ROX-30577: Add process baseline autolocking to cluster config#16427

Closed

JoukoVirtanen wants to merge 38 commits intojv-ROX-30135-send-baselines-to-sensor-when-deployment-leaves-observationfrom

jv-add-proceess-baseline-autolocking-to-cluster-config

Commits on Aug 20, 2025

X-Smart-Branch-Parent: master
JoukoVirtanen
committed
X-Smart-Squash: Squashed 7 commits:
JoukoVirtanen
committed
Revert "X-Smart-Squash: Squashed 7 commits:"
JoukoVirtanen
committed
Sends locked processes baselines to sensor when deployments leave observation period
JoukoVirtanen
committed
Added a feature flag
JoukoVirtanen
committed
Fixed unit test
JoukoVirtanen
committed
Changed the name of the feature flag
JoukoVirtanen
committed
Setting connectionManager for lifecycle manager
JoukoVirtanen
committed
Manual testing works
JoukoVirtanen
committed
Fixed style
JoukoVirtanen
committed
Not upserting the baseline if it doesn't need to be upserted
JoukoVirtanen
committed
Added unit test
JoukoVirtanen
committed
Remved connection manager from process baseline service
JoukoVirtanen
committed
make style
JoukoVirtanen
committed
Apply suggestions from code review

JoukoVirtanen
and
dashrews78
committed
Made feature flag consistent
JoukoVirtanen
committed
Added test for UpdateProcessBaselineElements where autolock is true
JoukoVirtanen
committed
Clarified which lock is being used
JoukoVirtanen
committed
Further clarified which lock is being used
JoukoVirtanen
committed
stackroxLock will be set to true if userLock is set to true. userLock is passed to .updateProcessBaselineElements even if the baseline already exists
JoukoVirtanen
committed
SendBaselineToSensor returns error. Variable renamed from pw to baseline
JoukoVirtanen
committed
Added more tests for .checkAndUpdateBaseline with autolocking
JoukoVirtanen
committed
Added another test. UserLock should be unlocked when needed
JoukoVirtanen
committed
Moved a check into its own function
JoukoVirtanen
committed
Refactored case where the baseline already exists
JoukoVirtanen
committed
Corrected comment
JoukoVirtanen
committed
Saving feature flag to env var, because it can be more complex in the future
JoukoVirtanen
committed
Renamed checkIfBaselineDoesntNeedUpdate to checkIfBaselineCanBeSkipped
JoukoVirtanen
committed
Not passing userLock to updateProcessBaselineElements
JoukoVirtanen
committed
X-Smart-Branch-Parent: jv-ROX-30135-send-baselines-to-sensor-when-deployment-leaves-observation
JoukoVirtanen
committed
Added AutolockProcessBaseline to cluster config
JoukoVirtanen
committed
Autolocking of process baselines is done at cluster level
JoukoVirtanen
committed
Updated unit tests
JoukoVirtanen
committed
Updated unit tests
JoukoVirtanen
committed
Using both feature flag and cluster config to gate feature
JoukoVirtanen
committed
Renamed field from autolock to enabled
JoukoVirtanen
committed
Added cluster permission to detection lifecycle manager
JoukoVirtanen
committed
make update-storage-protolock
JoukoVirtanen
committed