Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Beats common "add cloud metadata" function doesn't use HTTPS #21392

Closed
maggieghamry opened this issue Sep 29, 2020 · 5 comments · Fixed by #21590
Closed

Beats common "add cloud metadata" function doesn't use HTTPS #21392

maggieghamry opened this issue Sep 29, 2020 · 5 comments · Fixed by #21590
Assignees
@jsoriano
Labels
Auditbeat bug impact:high Short-term priority; add to current release, or definitely next. Team:Platforms Label for the Integrations - Platforms team

Comments

@maggieghamry
Copy link

To use the OpenStack API with Auditbeat, HTTPS is required, but the Beats common "add cloud metadata" function doesn't (just uses plain HTTP).

Currently, there is no workaround to enable the connection to OpenStack API to use HTTPS

  • Version: 7.9
@maggieghamry maggieghamry added bug Auditbeat impact:high Short-term priority; add to current release, or definitely next. labels Sep 29, 2020
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Sep 29, 2020
@jsoriano jsoriano added Team:Platforms Label for the Integrations - Platforms team and removed needs_team Indicates that the issue/PR needs a Team:* label labels Sep 29, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/integrations-platforms (Team:Platforms)

@jsoriano
Copy link
Member

http is hardcoded here:

beats/libbeat/processors/add_cloud_metadata/http_fetcher.go

Line 141 in d8d35a1

urls = append(urls, "http://"+config.MetadataHostAndPort+uri)

@andrewkroh
Copy link
Member

Does OpenStack always require HTTPS? Should the processor attempt both http and https for the broadest compatibility?

@jsoriano
Copy link
Member

jsoriano commented Oct 6, 2020

@maggieghamry do you know how can OpenStack be configured to use HTTPS? In the latest documentation I only see references to HTTP: https://docs.openstack.org/nova/latest/user/metadata.html

@jsoriano
Copy link
Member

jsoriano commented Oct 6, 2020

Ok, there seems to be an enabled_ssl_apis option that can be used to enable SSL.

@jsoriano jsoriano mentioned this issue Oct 6, 2020
Merged
6 tasks
@jsoriano jsoriano mentioned this issue Oct 7, 2020
Merged
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jsoriano jsoriano

Labels
Auditbeat bug impact:high Short-term priority; add to current release, or definitely next. Team:Platforms Label for the Integrations - Platforms team
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add openstack ssl provider in add_cloud_metadata jsoriano/beats
4 participants
@jsoriano @andrewkroh @elasticmachine @maggieghamry