From 9ca3a76dfa27d13c0602081b0011710dbd770aeb Mon Sep 17 00:00:00 2001 From: David Kilfoyle Date: Wed, 20 Sep 2023 15:04:37 -0400 Subject: [PATCH 1/3] Add Fleet & Agent 8.10.2 Release Notes --- .../release-notes/release-notes-8.10.asciidoc | 98 +++++++++++++++++++ 1 file changed, 98 insertions(+) diff --git a/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc b/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc index 064684a0a..1ffde6dbd 100644 --- a/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc +++ b/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc @@ -14,6 +14,7 @@ This section summarizes the changes in each release. +* <> * <> * <> @@ -22,6 +23,103 @@ Also see: * {kibana-ref}/release-notes.html[{kib} release notes] * {beats-ref}/release-notes.html[{beats} release notes] +// begin 8.10.2 relnotes + +[[release-notes-8.10.2]] +== {fleet} and {agent} 8.10.2 + +Review important information about the {fleet} and {agent} 8.10.2 release. + +[discrete] +[[known-issues-8.10.2]] +=== Known issues + +[[known-issue-3375-v8102]] +.PGP key download fails in an air-gapped environment +[%collapsible] +==== + +*Details* + +IMPORTANT: If you're using an air-gapped environment, we recommended waiting for this issue to be resolved before installing 8.9.x or any higher version, to avoid being unable to upgrade. + +Starting from version 8.9.0, when {agent} tries to perform an upgrade, it first verifies the binary signature with the key bundled in the agent. +This process has a backup mechanism that will use the key coming from `https://artifacts.elastic.co/GPG-KEY-elastic-agent` instead of the one it already has. + +In an air-gapped environment, the agent won't be able to download the remote key and therefore cannot be upgraded. + +*Impact* + + +For the upgrade to succeed, the agent needs to download the remote key from a server accessible from the air-gapped environment. Two workarounds are available. + +*Option 1* + +If an HTTP proxy is available to be used by the {agents} in your {fleet}, add the proxy settings using environment variables as explained in <>. +Please note that you need to enable HTTP Proxy usage for `artifacts.elastic.co` to bypass this problem, so you can craft the `HTTP_PROXY`, `HTTPS_PROXY` and `NO_PROXY` environment variables to be used exclusively for it. + +*Option 2* + +As the upgrade URL is not customizable, we have to "trick" the system by pointing `https://artifacts.elastic.co/` to another host that will have the file. + +The following examples require a server in your air-gapped environment that will expose the key you will have downloaded from `https://artifacts.elastic.co/GPG-KEY-elastic-agent``. + +_Example 1: Manual_ + +Edit the {agent} server hosts file to add the following content: + +[source,sh] +---- + artifacts.elastic.co +---- + +The Linux hosts file path is `/etc/hosts`. + +Windows hosts file path is `C:\Windows\System32\drivers\etc\hosts`. + +_Example 2: Puppet_ + +[source,yaml] +---- +host { 'elastic-artifacts': + ensure => 'present' + comment => 'Workaround for PGP check' + ip => '' +} +---- + +_Example 3: Ansible_ + +[source,yaml] +---- +- name : 'elastic-artifacts' + hosts : 'all' + become: 'yes' + + tasks: + - name: 'Add entry to /etc/hosts' + lineinfile: + path: '/etc/hosts' + line: ' artifacts.elastic.co' +---- + +==== + +[discrete] +[[enhancements-8.10.2]] +=== Enhancements + +{agent}:: +* Updated Go version to 1.20.8. {agent-pull}3393[#3393] + +[discrete] +[[bug-fixes-8.10.2]] +=== Bug fixes + +{fleet}:: +* Fix force delete package, updated used by agents check. ({kibana-pull}166623[#166623]). + +// end 8.10.2 relnotes + // begin 8.10.1 relnotes [[release-notes-8.10.1]] From 53e6c1922da563ed037a7c1b7b9679ace53a0433 Mon Sep 17 00:00:00 2001 From: David Kilfoyle Date: Thu, 21 Sep 2023 10:03:17 -0400 Subject: [PATCH 2/3] fixup --- .../ingest-management/release-notes/release-notes-8.10.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc b/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc index 1ffde6dbd..5995180b6 100644 --- a/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc +++ b/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc @@ -116,7 +116,7 @@ _Example 3: Ansible_ === Bug fixes {fleet}:: -* Fix force delete package, updated used by agents check. ({kibana-pull}166623[#166623]). +* Fix force delete package, updated used by agents check. ({kibana-pull}166623[#166623]) // end 8.10.2 relnotes From 280bd65ca7f6543590ae3cd0313394e146b65f96 Mon Sep 17 00:00:00 2001 From: David Kilfoyle <41695641+kilfoyle@users.noreply.github.com> Date: Thu, 21 Sep 2023 10:33:13 -0400 Subject: [PATCH 3/3] Update docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc Co-authored-by: Julia Bardi <90178898+juliaElastic@users.noreply.github.com> --- .../ingest-management/release-notes/release-notes-8.10.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc b/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc index 5995180b6..06c693324 100644 --- a/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc +++ b/docs/en/ingest-management/release-notes/release-notes-8.10.asciidoc @@ -116,7 +116,7 @@ _Example 3: Ansible_ === Bug fixes {fleet}:: -* Fix force delete package, updated used by agents check. ({kibana-pull}166623[#166623]) +* Fixed force delete package API, fixed validation check to reject request if package is used by agents. ({kibana-pull}166623[#166623]) // end 8.10.2 relnotes