Skip to content

crowdstrike: fix streaming system test mock to handle reconnection with offset#19810

Merged
efd6 merged 1 commit into
elastic:mainfrom
efd6:19766-crowdstrike
Jun 29, 2026
Merged

crowdstrike: fix streaming system test mock to handle reconnection with offset#19810
efd6 merged 1 commit into
elastic:mainfrom
efd6:19766-crowdstrike

Conversation

@efd6

@efd6 efd6 commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

Proposed commit message

crowdstrike: fix streaming system test mock to handle reconnection with offset

The streaming input appends ?offset=N to the feed URL when
reconnecting after a stream ends. The mock server only had a rule
for /events with no query parameters (offset: null), so
reconnection requests got 404, causing the agent to go DEGRADED
and failing the system test.

Add a catch-all /events rule (without query_params constraints)
after the existing rule. It matches reconnection requests and
returns an empty 200, preventing the DEGRADED transition.

Note

Not user-facing, so no changelog.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

…th offset

The streaming input appends ?offset=N to the feed URL when
reconnecting after a stream ends. The mock server only had a rule
for /events with no query parameters (offset: null), so
reconnection requests got 404, causing the agent to go DEGRADED
and failing the system test.

Add a catch-all /events rule (without query_params constraints)
after the existing rule. It matches reconnection requests and
returns an empty 200, preventing the DEGRADED transition.

Fixes elastic#19766
Fixes elastic#19773
@efd6 efd6 self-assigned this Jun 29, 2026
@efd6 efd6 added Integration:crowdstrike CrowdStrike flaky-test Unstable or unreliable test cases. bugfix Pull request that fixes a bug issue Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] skip-changelog labels Jun 29, 2026
@efd6 efd6 changed the title crowdstrike: fix streaming system test mock to handle reconnection wi… crowdstrike: fix streaming system test mock to handle reconnection with offset Jun 29, 2026
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

💚 Build Succeeded

cc @efd6

@efd6 efd6 marked this pull request as ready for review June 29, 2026 01:51
@efd6 efd6 requested review from a team as code owners June 29, 2026 01:51
@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@vera-review-bot

Copy link
Copy Markdown

👀 I have started reviewing the PR

@vera-review-bot

Copy link
Copy Markdown

Vera Review Bot

For the current commit state, I did not find any issues.


🤖 AI-Generated Review | Vera Review Bot | 📚 Knowledge base: integration-skills

⚠️ Automated review — verify suggestions before applying.

@navnit-elastic navnit-elastic left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mergify

mergify Bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@efd6 efd6 merged commit c10bb7f into elastic:main Jun 29, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugfix Pull request that fixes a bug issue flaky-test Unstable or unreliable test cases. Integration:crowdstrike CrowdStrike skip-changelog Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

2 participants