Skip to content

Latest commit

 

History

History
279 lines (216 loc) · 12.4 KB

release-notes-8.13.asciidoc

File metadata and controls

279 lines (216 loc) · 12.4 KB

Release notes

This section summarizes the changes in each release.

Also see:

  • {kibana-ref}/release-notes.html[{kib} release notes]

  • {beats-ref}/release-notes.html[{beats} release notes]

{fleet} and {agent} 8.13.0

Review important information about {fleet-server} and {agent} for the 8.13.0 release.

Security updates

{agent}

  • Update Go version to 1.21.7. #4221

Breaking changes

Breaking changes can prevent your application from optimal operation and performance. Before you upgrade, review the breaking changes, then mitigate the impact to your application.

Removes conditional topics for Kafka outputs

Details
The Kafka output no longer supports conditional topics. For more information, refer to (#176879).

Most Fleet installed integrations are now read-only and labelled with a Managed tag in the Kibana UI

Details
Integration content installed by {fleet} is no longer editable. This content is tagged with Managed in the {kib} UI, and is Elastic managed. This content cannot be edited or deleted, however managed visualizations, dashboards, and saved searches can be cloned. The clones can be customized. When cloning a dashboard the cloned panels become entirely independent copies that are unlinked from the original configurations and dependencies. Managed content relating to specific visualization editors such as Lens, TSVB, and Maps, the clones retain the original reference configurations. The same applies to editing any saved searches in a managed visualization. For more information, refer to (#172393).

New features

The 8.13.0 release added the following new and notable features.

{fleet}

  • Adds reference to ecs@mappings for each index template (#174855).

  • Adds support for the subobjects setting on the object type mapping (#171826).

{fleet-server}

  • Add support for storing output secrets in a new secrets block. 3061 2966

  • Add support for the remote {es} output type in {fleet-server}. 3051

  • Report the health state of remote {es} outputs to the logs-fleet_server.output_health-default data stream. 3127 3116

  • Add a policy_debounce_time configuration to add a forced delay to the policy index monitor when it successfully gathers new documents. 3234

{agent}

  • Log a summary of each policy configuration change received from {fleet}. #4050 #3406

  • Add the full version number to the installation directory name. #4193 #2579

  • Make more selective the Pod autodiscovery upon node and namespace update events. #4226 #37338

  • Add the new ETW input mapping to the Filebeat specification so that it’s available in {agent}. #4037 #36915

  • Add the new WebSocket input mapping to the Filebeat specification so that it’s available in {agent}. #4242 #37774

  • Create the .installed marker earlier on in the install process, allowing the use of elastic-agent uninstall to cleanup if the install fails. #4172 #4051

  • Add a postrm script to {agent} DEB and RPM packages. #4334 #3784 #4267

  • Kubernetes secrets provider has been improved to update a Kubernetes secret when the secret value changes. #4371 #4168

  • Upgrade elastic-agent-system-metrics to version 0.9.2. #4383

Enhancements

{fleet}

  • Adds skipRateLimitCheck flag to the Upgrade API and Bulk_upgrade API (#176923).

  • Adds making datastream rollover lazy (#176565).

  • Stops creating the {type}-{datastet}@custom component template during package installation (#175469).

  • Adds the xpack.fleet.isAirGapped flag (#174214).

  • Adds a warning when download upgrade is failing (#173844).

  • Adds a message explaining why an agent is not upgradeable (#173253).

  • Makes logs-* and metrics-* data views available across all spaces (#172991).

  • Adds flag for pre-release to templates/inputs endpoint (#174471).

  • Adds concurrency control to Fleet data stream API handler (#174087).

  • Adds a handlebar helper to percent encode a given string (#173119).

{fleet-server}

  • Relax version checks in snapshot builds to support automated testing during minor release updates. 3039 2960

  • Add top level keys for policy definition into {fleet-server} OpenAPI specification. 3048

  • Define the action.data and ack event schemas. 3060

  • Add additional transaction labels with {es} error details to requests. 3124 3098

  • Calls with unauthorized API keys now return a 401 error. 3135 2861

  • Use the Shutdown method with a timeout to gracefully halt HTTP servers. 3165 2902

  • Replace the policy and action limiters with a unified checkin limiter. 3255 3254

  • Change the response code for {es} call failures to 503. 3235 2852

{agent}

  • Move the control socket path to always be inside of the top level of the {agent} installation directory. #3909 #3840

  • Add mTLS flags to {agent} install and enroll commands to enable use of certificates for communication in on-prem proxy setups. #4007

  • Improve error handling by adding error descriptors to the inspect command and config methods. #4074

  • Add an agent.providers.initial_default configuration flag to disable providers by default. #4166 #4145

  • Add environment variable bindings so that {fleet-server} and {agents} started in container mode can specify mTLS variables. #4261

Bug fixes

{fleet}

  • Fixes a bug where secret values were not deleted on output type change (#178964).

  • Fixes formatting for some integrations on the overview page (#178937).

  • Fixes the name of {es} output workers configuration key (#178329).

  • Fixes clean up of the .fleet-policies entries when deleting an agent policy. (#178276).

  • Fixes only showing remote {es} output health status if later than last updated time (#177685).

  • Fixes status summary when showUpgradeable is selected (#177618).

  • Fixes issue of agent sometimes not getting inputs using a new agent policy with system integration (#177594).

  • Fixes the activity flyout keeping the scroll state on rerender (#177029).

  • Fixes inactive popover tour not resetting (#176929).

  • Fixes isPackageVersionOrLaterInstalled to check for installed package (#176532).

  • Removes pre-release exception for Synthetics package (#176249).

  • Fixes output validation when creating package policy (#175985).

  • Fixes allowing an agent to upgrade to a newer patch version than fleet-server (#175775).

  • Fixes asset creation during custom integration installation (#174869).

  • Fixes cascading agent policy’s namespace to package policies (#174776).

{fleet-server}

  • Add missing Elastic-Api-Version and X-Request-Id headers to the {fleet-server} OpenAPI specification. 3044

  • Replace all secret references in input objects. 3086 3083

  • Deprecate the redundant fleet.agent.logging.level attribute. 3195 3126

  • Add validation to make sure that status and message are present in the checkin API request body. 3233 2420

  • Fix a bug where agents were stuck in non-upgradeable state after an upgrade. 3264 3263

  • Fix chunked file delivery so that files are delivered in order. #3283

  • Fix a bug where the self monitor stops output health reporting if the output configuration is not acknowledged by agents. #3335 3334

{agent}

  • Fix component control protocol to allow checkin to be chunked across multiple messages. #3884 #2460

  • Fix the creation of directories when unpacking tar.gz packages. #4100 #4093

  • Set a timeout of 1 minute for the FQDN lookup function. #4147

  • Increase timeout for file removal during {agent} uninstall. #4310 #4164