Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for using a service token to call Kibana Fleet Setup API #28024

Closed
joshdover opened this issue Sep 21, 2021 · 1 comment · Fixed by #28096
Closed

Add support for using a service token to call Kibana Fleet Setup API #28024

joshdover opened this issue Sep 21, 2021 · 1 comment · Fixed by #28096
Assignees
Labels
7.16-candidate enhancement Team:Elastic-Agent Label for the Agent team Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team

Comments

@joshdover
Copy link
Contributor

joshdover commented Sep 21, 2021

In order to drop the requirement to use superuser credentials to call the Fleet setup API in Kibana, we'd like to switch to using a elastic/fleet-server service account token instead of username & password to authenticate against Kibana.

We should allow specifying a KIBANA_FLEET_SERVICE_TOKEN env var that takes precedence over KIBANA_FLEET_USERNAME and KIBANA_FLEET_PASSWORD. We should also fallback to FLEET_SERVER_SERVICE_TOKEN if provided as well.

I've have a draft branch of what this change may look like, but haven't taken it to completion yet with necessary testing: master...joshdover:fleet-setup-token

This change is targeting 7.16 and is dependent on some work in Kibana (elastic/kibana#112648), however a working draft would help us test this end-to-end before the work is complete on the Kibana side.

@joshdover joshdover added enhancement Team:Elastic-Agent Label for the Agent team labels Sep 21, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/agent (Team:Agent)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
7.16-candidate enhancement Team:Elastic-Agent Label for the Agent team Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants