Add fips_compatible flag to Azure * packages

[shmsr]

Proposed commit message

The fips_compatible flag is added to all policy templates (Azure *) that use either azure/metrics or azure-eventhub inputs.

These inputs are explicitly disabled in FIPS-enabled environments within Beats (elastic/beats#44885, elastic/beats#44902). By marking the relevant policy templates with fips_compatible: false, we ensure consistency and proper behavior of these integrations when deployed in FIPS environments.

Related Context:

• More about the fips_compatible flag: elastic/package-spec#894, elastic/package-spec#914
• Previous related integrations changes: elastic/integrations#14068

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

[shmsr]

Please note that these changes are due to running elastic-package-changelog. I think as it runs elastic-package format internally, hence the change. I also validated the same by using the format command, it is because of that only.

[shmsr]

This is applicable to all unrelated formatting changes.

[gizas]

thank you

[muthu-mps]

LGTM!

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[shmsr]

@elastic/security-service-integrations You own some packages that use azure-eventhub as well. I did not touch them, as I am specifically raising this PR for azure*

But I'd request you to take a look at these — elastic/beats#44885, elastic/beats#44902 and elastic/beats#44909; as you might be using them in your packages.

[shmsr]

@elastic/obs-ds-hosted-services and @elastic/security-service-integrations Can someone please take a look at this PR?

[efd6]

security-service-integrations is not a codeowner here.

[shmsr]

Can someone from @elastic/obs-ds-hosted-services please take a look?

[gizas]

@shmsr there are some more azure related integrations that are not listed in your pr. Is there a reason not to include them?

[shmsr]

@shmsr there are some more azure related integrations that are not listed in your pr. Is there a reason not to include them?

#14068

In this you will find more. And apart from that, only packages left are:

• azure_blob_storage (uses azure-blob-storage input)
• azure_frontdoor (uses azure-eventhub input but owned by security. I did not see anyone else putting the flag so I wasn't sure if I should make the change but ideally we should. That's why I asked them to review, because some of their other packages like o365 and all are likely affected as well; see: Add fips_compatible flag to Azure * packages #14769 (comment))
• azure_network_watcher_{nsg,vnet} (uses azure-blob-storage input)

As you can see as azure-blob-storage is not disabled, we haven't touched the packages that uses that.

cc: @gizas

[gizas]

Thanks for the comment above. Good to have it here to make clear for future review (as the title might be a little misleading)

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 851f128

History

• 💚 Build #29407 succeeded 64ca650

cc @shmsr

[elastic-sonarqube]

Quality Gate failed

Failed conditions
0.0% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube

[elastic-vault-github-plugin-prod]

Package azure_ai_foundry - 0.6.0 containing this change is available at https://epr.elastic.co/package/azure_ai_foundry/0.6.0/

[elastic-vault-github-plugin-prod]

Package azure_app_service - 0.7.0 containing this change is available at https://epr.elastic.co/package/azure_app_service/0.7.0/

[elastic-vault-github-plugin-prod]

Package azure_application_insights - 1.9.0 containing this change is available at https://epr.elastic.co/package/azure_application_insights/1.9.0/

[elastic-vault-github-plugin-prod]

Package azure_billing - 1.9.0 containing this change is available at https://epr.elastic.co/package/azure_billing/1.9.0/

[elastic-vault-github-plugin-prod]

Package azure_functions - 0.10.0 containing this change is available at https://epr.elastic.co/package/azure_functions/0.10.0/

[elastic-vault-github-plugin-prod]

Package azure_logs - 0.4.0 containing this change is available at https://epr.elastic.co/package/azure_logs/0.4.0/

[elastic-vault-github-plugin-prod]

Package azure_metrics - 1.10.0 containing this change is available at https://epr.elastic.co/package/azure_metrics/1.10.0/

[elastic-vault-github-plugin-prod]

Package azure_openai - 1.9.0 containing this change is available at https://epr.elastic.co/package/azure_openai/1.9.0/