[Fleet] Tagging of integration assets

x-pack/plugins/fleet/kibana.json

@@ -9,7 +9,7 @@
   "ui": true,
   "configPath": ["xpack", "fleet"],
   "requiredPlugins": ["licensing", "data", "encryptedSavedObjects", "navigation", "customIntegrations", "share", "spaces", "security", "unifiedSearch"],
-  "optionalPlugins": ["features", "cloud", "usageCollection", "home", "globalSearch", "telemetry", "discover", "ingestPipelines"],
+  "optionalPlugins": ["features", "cloud", "usageCollection", "home", "globalSearch", "telemetry", "discover", "ingestPipelines", "savedObjectsTagging"],
   "extraPublicDirs": ["common"],
   "requiredBundles": ["kibanaReact", "cloud", "esUiShared", "infra", "kibanaUtils", "usageCollection", "unifiedSearch"]
 }

x-pack/plugins/fleet/server/plugin.ts

@@ -42,6 +42,8 @@ import type { CloudSetup } from '@kbn/cloud-plugin/server';
 
 import type { SpacesPluginStart } from '@kbn/spaces-plugin/server';
 
+import type { SavedObjectTaggingStart } from '@kbn/saved-objects-tagging-plugin/server';
+
 import type { FleetConfigType } from '../common/types';
 import type { FleetAuthz } from '../common';
 import type { ExperimentalFeatures } from '../common/experimental_features';
@@ -115,6 +117,7 @@ export interface FleetStartDeps {
   encryptedSavedObjects: EncryptedSavedObjectsPluginStart;
   security: SecurityPluginStart;
   telemetry?: TelemetryPluginStart;
+  savedObjectTaggingStart: SavedObjectTaggingStart;
 }
 
 export interface FleetAppContext {
@@ -128,6 +131,7 @@ export interface FleetAppContext {
   configInitialValue: FleetConfigType;
   experimentalFeatures: ExperimentalFeatures;
   savedObjects: SavedObjectsServiceStart;
+  savedObjectTaggingStart?: SavedObjectTaggingStart;
   isProductionMode: PluginInitializerContext['env']['mode']['prod'];
   kibanaVersion: PluginInitializerContext['env']['packageInfo']['version'];
   kibanaBranch: PluginInitializerContext['env']['packageInfo']['branch'];
@@ -387,6 +391,7 @@ export class FleetPlugin
   }
 
   public start(core: CoreStart, plugins: FleetStartDeps): FleetStartContract {
+    // console.log(plugins.savedObjectTaggingStart);
     appContextService.start({
       elasticsearch: core.elasticsearch,
       data: plugins.data,
@@ -400,6 +405,7 @@ export class FleetPlugin
         this.configInitialValue.enableExperimental || []
       ),
       savedObjects: core.savedObjects,
+      savedObjectTaggingStart: plugins.savedObjectTaggingStart,
       isProductionMode: this.isProductionMode,
       kibanaVersion: this.kibanaVersion,
       kibanaBranch: this.kibanaBranch,

x-pack/plugins/fleet/server/services/app_context.ts

@@ -26,6 +26,8 @@ import type { SecurityPluginStart, SecurityPluginSetup } from '@kbn/security-plu
 
 import type { CloudSetup } from '@kbn/cloud-plugin/server';
 
+import type { SavedObjectTaggingStart } from '@kbn/saved-objects-tagging-plugin/server';
+
 import type { FleetConfigType } from '../../common/types';
 import type { ExperimentalFeatures } from '../../common/experimental_features';
 import type {
@@ -58,6 +60,7 @@ class AppContextService {
   private httpSetup?: HttpServiceSetup;
   private externalCallbacks: ExternalCallbacksStorage = new Map();
   private telemetryEventsSender: TelemetryEventsSender | undefined;
+  private savedObjectTaggingStart: SavedObjectTaggingStart | undefined;
 
   public start(appContext: FleetAppContext) {
     this.data = appContext.data;
@@ -75,6 +78,7 @@ class AppContextService {
     this.kibanaBranch = appContext.kibanaBranch;
     this.httpSetup = appContext.httpSetup;
     this.telemetryEventsSender = appContext.telemetryEventsSender;
+    this.savedObjectTaggingStart = appContext.savedObjectTaggingStart;
 
     if (appContext.config$) {
       this.config$ = appContext.config$;
@@ -143,6 +147,13 @@ class AppContextService {
     return this.savedObjects;
   }
 
+  public getSavedObjectTaggingStart() {
+    if (!this.savedObjectTaggingStart) {
+      throw new Error('Saved object tagging start service not set.');
+    }
+    return this.savedObjectTaggingStart;
+  }
+
   public getInternalUserSOClient(request: KibanaRequest) {
     // soClient as kibana internal users, be careful on how you use it, security is not enabled
     return appContextService.getSavedObjects().getScopedClient(request, {

x-pack/plugins/fleet/server/services/epm/kibana/assets/install.ts

@@ -18,6 +18,10 @@ import type { SavedObjectsImportSuccess, SavedObjectsImportFailure } from '@kbn/
 import { createListStream } from '@kbn/utils';
 import { partition } from 'lodash';
 
+import type { IAssignmentService } from '@kbn/saved-objects-tagging-plugin/server';
+
+import { taggableTypes } from '@kbn/saved-objects-tagging-plugin/common/constants';
+
 import { PACKAGES_SAVED_OBJECT_TYPE } from '../../../../../common';
 import { getAsset, getPathParts } from '../../archive';
 import { KibanaAssetType, KibanaSavedObjectType } from '../../../../types';
@@ -128,13 +132,15 @@ export async function installKibanaAssets(options: {
 export async function installKibanaAssetsAndReferences({
   savedObjectsClient,
   savedObjectsImporter,
+  savedObjectTagAssignmentService,
   logger,
   pkgName,
   paths,
   installedPkg,
 }: {
   savedObjectsClient: SavedObjectsClientContract;
   savedObjectsImporter: Pick<SavedObjectsImporter, 'import' | 'resolveImportErrors'>;
+  savedObjectTagAssignmentService: IAssignmentService;
   logger: Logger;
   pkgName: string;
   paths: string[];
@@ -156,9 +162,45 @@ export async function installKibanaAssetsAndReferences({
     kibanaAssets,
   });
 
+  // console.log(pkgName);
+  // console.log(installedPkg);
+
+  await tagKibanaAssets({ savedObjectTagAssignmentService, kibanaAssets, pkgName });
+
   return installedKibanaAssetsRefs;
 }
 
+export async function tagKibanaAssets({
+  savedObjectTagAssignmentService,
+  kibanaAssets,
+  pkgName,
+}: {
+  savedObjectTagAssignmentService: IAssignmentService;
+  kibanaAssets: Record<KibanaAssetType, ArchiveAsset[]>;
+  pkgName: string;
+}) {
+  const taggableAssets = Object.entries(kibanaAssets).flatMap(([assetType, assets]) => {
+    if (!taggableTypes.includes(assetType as KibanaAssetType)) {
+      return [];
+    }
+
+    if (!assets.length) {
+      return [];
+    }
+
+    return assets;
+  });
+
+  // console.log(taggableAssets);
+
+  // TODO use readable name for pkg name tag
+  savedObjectTagAssignmentService.updateTagAssignments({
+    tags: ['Managed', pkgName],
+    assign: taggableAssets,
+    unassign: [],
+  });
+}
+
 export const deleteKibanaInstalledRefs = async (
   savedObjectsClient: SavedObjectsClientContract,
   pkgName: string,

x-pack/plugins/fleet/server/services/epm/packages/_install_package.ts

@@ -14,6 +14,8 @@ import type {
 } from '@kbn/core/server';
 import { SavedObjectsErrorHelpers } from '@kbn/core/server';
 
+import type { IAssignmentService } from '@kbn/saved-objects-tagging-plugin/server';
+
 import {
   MAX_TIME_COMPLETE_INSTALL,
   ASSETS_SAVED_OBJECT_TYPE,
@@ -56,6 +58,7 @@ import { withPackageSpan } from './utils';
 export async function _installPackage({
   savedObjectsClient,
   savedObjectsImporter,
+  savedObjectTagAssignmentService,
   esClient,
   logger,
   installedPkg,
@@ -68,6 +71,7 @@ export async function _installPackage({
 }: {
   savedObjectsClient: SavedObjectsClientContract;
   savedObjectsImporter: Pick<SavedObjectsImporter, 'import' | 'resolveImportErrors'>;
+  savedObjectTagAssignmentService: IAssignmentService;
   esClient: ElasticsearchClient;
   logger: Logger;
   installedPkg?: SavedObject<Installation>;
@@ -120,6 +124,7 @@ export async function _installPackage({
       installKibanaAssetsAndReferences({
         savedObjectsClient,
         savedObjectsImporter,
+        savedObjectTagAssignmentService,
         pkgName,
         paths,
         installedPkg,

x-pack/plugins/fleet/server/services/epm/packages/install.ts

@@ -362,11 +362,16 @@ async function installPackageFromRegistry({
       .getSavedObjects()
       .createImporter(savedObjectsClient);
 
+    const savedObjectTagAssignmentService = appContextService
+      .getSavedObjectTaggingStart()
+      .createInternalAssignmentService({ client: savedObjectsClient });
+
     // try installing the package, if there was an error, call error handler and rethrow
     // @ts-expect-error status is string instead of InstallResult.status 'installed' | 'already_installed'
     return await _installPackage({
       savedObjectsClient,
       savedObjectsImporter,
+      savedObjectTagAssignmentService,
       esClient,
       logger,
       installedPkg,