Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Beats shipper output will not enable TLS #34321

Closed
fearful-symmetry opened this issue Jan 20, 2023 · 6 comments
Closed

Beats shipper output will not enable TLS #34321

fearful-symmetry opened this issue Jan 20, 2023 · 6 comments
Assignees
Labels
bug Team:Elastic-Agent Label for the Agent team

Comments

@fearful-symmetry
Copy link
Contributor

Right now, the shipper output will use a simple if block to determine if it should use TLS or not:

	if s.config.TLS != nil && s.config.TLS.Enabled != nil && *s.config.TLS.Enabled {
		creds = credentials.NewTLS(tls.ToConfig())
		s.log.Debugf("beat is running with TLS")
	} else {
		creds = insecure.NewCredentials()
		s.log.Debugf("beat is running with insecure gRPC credentials")
	}

Problem is, right now, elastic-agent will never send an enabled: true field in the TLS setting, presumably as elastic-agent assumes we'll always be operating under TLS. We either need to remove the enabled field, or just set enabled: true in the default setting before we unpack the config.

@fearful-symmetry fearful-symmetry added bug Team:Elastic-Agent Label for the Agent team labels Jan 20, 2023
@elasticmachine
Copy link
Collaborator

Pinging @elastic/elastic-agent (Team:Elastic-Agent)

@blakerouse
Copy link
Contributor

That seems agains the standard way we do enabled: true? Normally if a block is defined:

tls: {}

Then enabled: true is implied. Doesn't enabled: false have to be explicit? We should strive for consistency.

@fearful-symmetry
Copy link
Contributor Author

@blakerouse yah, that would be ideal. I just wasn't 100% sure if elastic-agent was working as desired here.

@pierrehilbert
Copy link
Collaborator

@cmacknz / @leehinman could we close this one with the new shipper plan?

@cmacknz
Copy link
Member

cmacknz commented May 4, 2023

Still relevant

@jlind23
Copy link
Collaborator

jlind23 commented Jun 5, 2024

The shipper project has been revisited hence closing this as outdated/not relevant.

@jlind23 jlind23 closed this as not planned Won't fix, can't repro, duplicate, stale Jun 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Team:Elastic-Agent Label for the Agent team
Projects
None yet
Development

Successfully merging a pull request may close this issue.

6 participants