[Fleet] Tagging of integration assets

x-pack/plugins/fleet/kibana.json

@@ -8,7 +8,7 @@
   "server": true,
   "ui": true,
   "configPath": ["xpack", "fleet"],
-  "requiredPlugins": ["licensing", "data", "encryptedSavedObjects", "navigation", "customIntegrations", "share", "spaces", "security", "unifiedSearch"],
+  "requiredPlugins": ["licensing", "data", "encryptedSavedObjects", "navigation", "customIntegrations", "share", "spaces", "security", "unifiedSearch", "savedObjectsTagging"],
   "optionalPlugins": ["features", "cloud", "usageCollection", "home", "globalSearch", "telemetry", "discover", "ingestPipelines"],
   "extraPublicDirs": ["common"],
   "requiredBundles": ["kibanaReact", "cloud", "esUiShared", "infra", "kibanaUtils", "usageCollection", "unifiedSearch"]

x-pack/plugins/fleet/server/plugin.ts

@@ -42,6 +42,8 @@ import type { CloudSetup } from '@kbn/cloud-plugin/server';
 
 import type { SpacesPluginStart } from '@kbn/spaces-plugin/server';
 
+import type { SavedObjectTaggingStart } from '@kbn/saved-objects-tagging-plugin/server';
+
 import type { FleetConfigType } from '../common/types';
 import type { FleetAuthz } from '../common';
 import type { ExperimentalFeatures } from '../common/experimental_features';
@@ -115,6 +117,7 @@ export interface FleetStartDeps {
   encryptedSavedObjects: EncryptedSavedObjectsPluginStart;
   security: SecurityPluginStart;
   telemetry?: TelemetryPluginStart;
+  savedObjectsTagging: SavedObjectTaggingStart;
 }
 
 export interface FleetAppContext {
@@ -128,6 +131,7 @@ export interface FleetAppContext {
   configInitialValue: FleetConfigType;
   experimentalFeatures: ExperimentalFeatures;
   savedObjects: SavedObjectsServiceStart;
+  savedObjectsTagging?: SavedObjectTaggingStart;
   isProductionMode: PluginInitializerContext['env']['mode']['prod'];
   kibanaVersion: PluginInitializerContext['env']['packageInfo']['version'];
   kibanaBranch: PluginInitializerContext['env']['packageInfo']['branch'];
@@ -400,6 +404,7 @@ export class FleetPlugin
         this.configInitialValue.enableExperimental || []
       ),
       savedObjects: core.savedObjects,
+      savedObjectsTagging: plugins.savedObjectsTagging,
       isProductionMode: this.isProductionMode,
       kibanaVersion: this.kibanaVersion,
       kibanaBranch: this.kibanaBranch,

x-pack/plugins/fleet/server/services/app_context.ts

@@ -26,6 +26,8 @@ import type { SecurityPluginStart, SecurityPluginSetup } from '@kbn/security-plu
 
 import type { CloudSetup } from '@kbn/cloud-plugin/server';
 
+import type { SavedObjectTaggingStart } from '@kbn/saved-objects-tagging-plugin/server';
+
 import type { FleetConfigType } from '../../common/types';
 import type { ExperimentalFeatures } from '../../common/experimental_features';
 import type {
@@ -58,6 +60,7 @@ class AppContextService {
   private httpSetup?: HttpServiceSetup;
   private externalCallbacks: ExternalCallbacksStorage = new Map();
   private telemetryEventsSender: TelemetryEventsSender | undefined;
+  private savedObjectsTagging: SavedObjectTaggingStart | undefined;
 
   public start(appContext: FleetAppContext) {
     this.data = appContext.data;
@@ -75,6 +78,7 @@ class AppContextService {
     this.kibanaBranch = appContext.kibanaBranch;
     this.httpSetup = appContext.httpSetup;
     this.telemetryEventsSender = appContext.telemetryEventsSender;
+    this.savedObjectsTagging = appContext.savedObjectsTagging;
 
     if (appContext.config$) {
       this.config$ = appContext.config$;
@@ -143,6 +147,13 @@ class AppContextService {
     return this.savedObjects;
   }
 
+  public getSavedObjectsTagging() {
+    if (!this.savedObjectsTagging) {
+      throw new Error('Saved object tagging start service not set.');
+    }
+    return this.savedObjectsTagging;
+  }
+
   public getInternalUserSOClient(request: KibanaRequest) {
     // soClient as kibana internal users, be careful on how you use it, security is not enabled
     return appContextService.getSavedObjects().getScopedClient(request, {

x-pack/plugins/fleet/server/services/epm/kibana/assets/install.ts

@@ -18,6 +18,10 @@ import type { SavedObjectsImportSuccess, SavedObjectsImportFailure } from '@kbn/
 import { createListStream } from '@kbn/utils';
 import { partition } from 'lodash';
 
+import type { IAssignmentService, ITagsClient } from '@kbn/saved-objects-tagging-plugin/server';
+
+import { taggableTypes } from '@kbn/saved-objects-tagging-plugin/common/constants';
+
 import { PACKAGES_SAVED_OBJECT_TYPE } from '../../../../../common';
 import { getAsset, getPathParts } from '../../archive';
 import { KibanaAssetType, KibanaSavedObjectType } from '../../../../types';
@@ -128,15 +132,21 @@ export async function installKibanaAssets(options: {
 export async function installKibanaAssetsAndReferences({
   savedObjectsClient,
   savedObjectsImporter,
+  savedObjectTagAssignmentService,
+  savedObjectTagClient,
   logger,
   pkgName,
+  pkgTitle,
   paths,
   installedPkg,
 }: {
   savedObjectsClient: SavedObjectsClientContract;
   savedObjectsImporter: Pick<SavedObjectsImporter, 'import' | 'resolveImportErrors'>;
+  savedObjectTagAssignmentService: IAssignmentService;
+  savedObjectTagClient: ITagsClient;
   logger: Logger;
   pkgName: string;
+  pkgTitle: string;
   paths: string[];
   installedPkg?: SavedObject<Installation>;
 }) {
@@ -156,9 +166,67 @@ export async function installKibanaAssetsAndReferences({
     kibanaAssets,
   });
 
+  await tagKibanaAssets({
+    savedObjectTagAssignmentService,
+    savedObjectTagClient,
+    kibanaAssets,
+    pkgTitle,
+  });
+
   return installedKibanaAssetsRefs;
 }
 
+export async function tagKibanaAssets({
+  savedObjectTagAssignmentService,
+  savedObjectTagClient,
+  kibanaAssets,
+  pkgTitle,
+}: {
+  savedObjectTagAssignmentService: IAssignmentService;
+  savedObjectTagClient: ITagsClient;
+  kibanaAssets: Record<KibanaAssetType, ArchiveAsset[]>;
+  pkgTitle: string;
+}) {
+  const taggableAssets = Object.entries(kibanaAssets).flatMap(([assetType, assets]) => {
+    if (!taggableTypes.includes(assetType as KibanaAssetType)) {
+      return [];
+    }
+
+    if (!assets.length) {
+      return [];
+    }
+
+    return assets;
+  });
+
+  const managedTagName = 'Managed';
+  const tagColor = '#FFFFFF';
+  const allTags = await savedObjectTagClient.getAll();
+  let managedTag = allTags.find((tag) => tag.name === managedTagName);
+  if (!managedTag) {
+    managedTag = await savedObjectTagClient.create({
+      name: managedTagName,
+      description: '',
+      color: tagColor,
+    });
+  }
+
+  let packageTag = allTags.find((tag) => tag.name === pkgTitle);
+  if (!packageTag) {
+    packageTag = await savedObjectTagClient.create({
+      name: pkgTitle,
+      description: '',
+      color: tagColor,
+    });
+  }
+
+  savedObjectTagAssignmentService.updateTagAssignments({
+    tags: [managedTag.id, packageTag.id],
+    assign: taggableAssets,
+    unassign: [],
+  });
+}
+
 export const deleteKibanaInstalledRefs = async (
   savedObjectsClient: SavedObjectsClientContract,
   pkgName: string,

x-pack/plugins/fleet/server/services/epm/packages/_install_package.ts

@@ -14,6 +14,8 @@ import type {
 } from '@kbn/core/server';
 import { SavedObjectsErrorHelpers } from '@kbn/core/server';
 
+import type { IAssignmentService, ITagsClient } from '@kbn/saved-objects-tagging-plugin/server';
+
 import {
   MAX_TIME_COMPLETE_INSTALL,
   ASSETS_SAVED_OBJECT_TYPE,
@@ -56,6 +58,8 @@ import { withPackageSpan } from './utils';
 export async function _installPackage({
   savedObjectsClient,
   savedObjectsImporter,
+  savedObjectTagAssignmentService,
+  savedObjectTagClient,
   esClient,
   logger,
   installedPkg,
@@ -68,6 +72,8 @@ export async function _installPackage({
 }: {
   savedObjectsClient: SavedObjectsClientContract;
   savedObjectsImporter: Pick<SavedObjectsImporter, 'import' | 'resolveImportErrors'>;
+  savedObjectTagAssignmentService: IAssignmentService;
+  savedObjectTagClient: ITagsClient;
   esClient: ElasticsearchClient;
   logger: Logger;
   installedPkg?: SavedObject<Installation>;
@@ -78,7 +84,7 @@ export async function _installPackage({
   spaceId: string;
   verificationResult?: PackageVerificationResult;
 }): Promise<AssetReference[]> {
-  const { name: pkgName, version: pkgVersion } = packageInfo;
+  const { name: pkgName, version: pkgVersion, title: pkgTitle } = packageInfo;
 
   try {
     // if some installation already exists
@@ -120,7 +126,10 @@ export async function _installPackage({
       installKibanaAssetsAndReferences({
         savedObjectsClient,
         savedObjectsImporter,
+        savedObjectTagAssignmentService,
+        savedObjectTagClient,
         pkgName,
+        pkgTitle,
         paths,
         installedPkg,
         logger,

x-pack/plugins/fleet/server/services/epm/packages/install.ts

@@ -362,11 +362,21 @@ async function installPackageFromRegistry({
       .getSavedObjects()
       .createImporter(savedObjectsClient);
 
+    const savedObjectTagAssignmentService = appContextService
+      .getSavedObjectsTagging()
+      .createInternalAssignmentService({ client: savedObjectsClient });
+
+    const savedObjectTagClient = appContextService
+      .getSavedObjectsTagging()
+      .createTagClient({ client: savedObjectsClient });
+
     // try installing the package, if there was an error, call error handler and rethrow
     // @ts-expect-error status is string instead of InstallResult.status 'installed' | 'already_installed'
     return await _installPackage({
       savedObjectsClient,
       savedObjectsImporter,
+      savedObjectTagAssignmentService,
+      savedObjectTagClient,
       esClient,
       logger,
       installedPkg,