-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update Monitoring plugin's Elasticsearch configuration #55119
Update Monitoring plugin's Elasticsearch configuration #55119
Conversation
Plugin now allows "keystore" and "truststore" values in its config schema as the documentation currently states. Plugin also now reads PEM and PKCS12 files off of the filesystem before attempting to create an Elasticsearch client.
Several Elasticsearch config deprecations were overlooked for monitoring-specific Elasticsearch settings.
Pinging @elastic/kibana-security (Team:Security) |
Pinging @elastic/stack-monitoring (Team:Monitoring) |
@elasticmachine merge upstream |
This is causing a build failure during the DLL cleaning step.
x-pack/legacy/plugins/monitoring/server/es_client/parse_elasticsearch_config.test.mocks.ts
Show resolved
Hide resolved
x-pack/legacy/plugins/monitoring/server/es_client/parse_elasticsearch_config.ts
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@jportner This is great stuff 👍 Thank you for identifying and contributing the fix so quickly 🏆
Left some comments (mostly nitpicking), but looks good overall
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! Nice work and thanks for the quick fix!
💚 Build SucceededHistory
To update your PR or re-run it, just comment with: |
* Fix Monitoring plugin Elasticsearch SSL config Plugin now allows "keystore" and "truststore" values in its config schema as the documentation currently states. Plugin also now reads PEM and PKCS12 files off of the filesystem before attempting to create an Elasticsearch client. * Add missing Elasticsearch config deprecations Several Elasticsearch config deprecations were overlooked for monitoring-specific Elasticsearch settings.
* Fix Monitoring plugin Elasticsearch SSL config Plugin now allows "keystore" and "truststore" values in its config schema as the documentation currently states. Plugin also now reads PEM and PKCS12 files off of the filesystem before attempting to create an Elasticsearch client. * Add missing Elasticsearch config deprecations Several Elasticsearch config deprecations were overlooked for monitoring-specific Elasticsearch settings.
* Fix Monitoring plugin Elasticsearch SSL config Plugin now allows "keystore" and "truststore" values in its config schema as the documentation currently states. Plugin also now reads PEM and PKCS12 files off of the filesystem before attempting to create an Elasticsearch client. * Add missing Elasticsearch config deprecations Several Elasticsearch config deprecations were overlooked for monitoring-specific Elasticsearch settings.
The Monitoring plugin uses an Elasticsearch client to read monitoring data. This can be customized to read from a separate monitoring cluster using the
xpack.monitoring.elasticsearch.*
settings.However, the Elasticsearch client was updated in #53810 to expect SSL certificates/keys to be read in before initializing the client, and the Monitoring plugin was not changed accordingly. This caused a crash when attempting to set Monitoring-specific Elasticsearch SSL settings (such as
certificate
orkey
).This PR fixes that problem, and also adds missing deprecations for Elasticsearch config settings (#48247, #54392) that will no longer be supported in 8.0.
Resolves #55073.