Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Defer security auto-configuration on initial node startup (#82574) #82733

Conversation

albertzaharovits
Copy link
Contributor

The new security autoconfiguration in version 8 prints information to the terminal.
This information is required in order to access the node (eg the generated elastic
user password). But this contends for screen lines with the normal log output of
a starting node, to the extent that the security autoconfiguration can pass by
unnoticed by the user.

This PR addresses this concern by:

  • making sure that auto-configuration is triggered only after the node is started
    (ClusterPlugin#onNodeStarted). Auto-configuration requires the http bind address,
    which is guaranteed to be available only after this point in time.
  • Additionally deferring the auto-configuration by a fixed time amount (9 sec),
    even after all the depended resources have finished initializing.

@albertzaharovits albertzaharovits added backport v8.0.0 auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) labels Jan 18, 2022
@albertzaharovits albertzaharovits self-assigned this Jan 18, 2022
)

The new security autoconfiguration in version 8 prints information to the terminal.
This information is required in order to access the node (eg the generated elastic
user password). But this contends for screen lines with the normal log output of
a starting node, to the extent that the security autoconfiguration can pass by
unnoticed by the user.

This PR addresses this concern by:
* making sure that auto-configuration is triggered only after the node is started
(ClusterPlugin#onNodeStarted). Auto-configuration requires the http bind address,
which is guaranteed to be available only after this point in time.
* Additionally deferring the auto-configuration by a fixed time amount (9 sec),
even after all the depended resources have finished initializing.
@albertzaharovits albertzaharovits force-pushed the backport-80-print-enrollment-saliently branch from 681d2e6 to 46f42f7 Compare January 18, 2022 15:18
@elasticsearchmachine elasticsearchmachine merged commit 33cecb0 into elastic:8.0 Jan 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport v8.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants