[Entity Store] Verify CPS Support

[uri-weisman]

Our current workaround for CCS is to detect when an index is from a remote cluster; if it is, we write the aggregated logs to a local index and run log extraction.

We’ve had confirmation that the lookup-join limitations we hit when validating CCS will likely also apply to CPS, but we need to validate that.
Although CPS is technical preview in 9.4 and Entity Store is already stated as not supporting it, we need to understand whether CPS can be supported with limited effort, in particular, whether we can detect that remote indices are coming from CPS.

DOD:

• Verify and document if entity store supports CPS
• If a feature is not working as expected with CPS, it should be flagged for documentation and a timeline/priority determined for enhancement.
• Verify that feature works with normal, local search as intended.
• Update the entity store row in this doc

related:

• Security: CPS Readiness & Integration Plan
• [Entity Store] Implement workaround for CCS #254651
• CPS guide for devs

[orouz]

tested CPS on serverless. notes:

• CPS has the same lookup join issue CCS has.
• CPS intent is given by the available linked projects, not by necessarily by index patterns strings.

---

Verify that feature works with normal, local search as intended.

works. esClient default is to search just from origin (the current project, no linked projects)

Verify and document if entity store supports CPS

it does not. but i think it can. if we query /_project/tags and see linked_projects, then we can do something similar to what we have now where we split main (local) query from remote (ccs), and add another promise to cps

Update the entity store row in this doc

done. set as not supported and eng not started. kept target phase as unknown. should it be GA @uri-weisman ?

[uri-weisman]

it does not. but i think it can. if we query /_project/tags and see linked_projects, then we can do something similar to what we have now where we split main (local) query from remote (ccs), and add another promise to cps

@orouz How do you evaluate the effort to implement and test it?

[uri-weisman]

@orouz let's add a comment with our findings here.