Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Fleet] Make proxy certificate key a secret #208748

Open
6 tasks
criamico opened this issue Jan 29, 2025 · 1 comment
Open
6 tasks

[Fleet] Make proxy certificate key a secret #208748

criamico opened this issue Jan 29, 2025 · 1 comment
Labels
Team:Fleet Team label for Observability Data Collection Fleet team

Comments

@criamico
Copy link
Contributor

criamico commented Jan 29, 2025

Currently the proxy certificate "key" field is saved as a plain text field. We should harmonize it with the other settings and store it as a secret instead:

  • Update the api to use secrets. This applies to cases when fleet server is on a minimum version
  • For those cases when fleet server is not on this version or secrets are not supported for other reasons, use a encrypted mapping:
    • Register the proxy mapping withencryptedSavedObjects
  • Update the UI to have the same appearance currently used in outputs/fleet server hosts/agent binary settings
  • Make sure that the generated agent policy contains the updated value
  • Make sure that fleet server can read the secret value - see Support new SSL secrets fields fleet-server#4470

As a reference, #213211 can be used.

Current UI:
Image

UI using secrets fields:
Image

@criamico criamico added the Team:Fleet Team label for Observability Data Collection Fleet team label Jan 29, 2025
@elasticmachine
Copy link
Contributor

Pinging @elastic/fleet (Team:Fleet)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Fleet Team label for Observability Data Collection Fleet team
Projects
None yet
Development

No branches or pull requests

2 participants