kibana-keystore requires kibana.yml starting 8.11.2

[thbkrkr]

In 8.11.1, it was possible to call kibana-keystore without kibana.yml:

> d run --rm --entrypoint bash -ti docker.elastic.co/kibana/kibana:8.11.1 -c 'rm config/kibana.yml && kibana-keystore'
Kibana is currently running with legacy OpenSSL providers enabled! For details and instructions on how to disable see https://www.elastic.co/guide/en/kibana/8.11/production.html#openssl-legacy-provider

  Usage: bin/kibana-keystore [command] [options]

  A tool for managing settings stored in the Kibana keystore

  Commands:
    create  [options]       Creates a new Kibana keystore
    list  [options]         List entries in the keystore
    add  [options] <key>    Add a setting to the keystore. Note: The value will be JSON parsed. Use quotes to force string inputs.
    remove  [options] <key> Remove a setting from the keystore
    show  [options] <key>   Displays the value of a single setting in the keystore. Pass the -o (or --output) parameter to write the setting to a file.
    help  <command>         get the help for a specific command

Since 8.11.2, it fails:

> d run --rm --entrypoint bash -ti docker.elastic.co/kibana/kibana:8.11.2 -c 'rm config/kibana.yml && kibana-keystore'
Kibana is currently running with legacy OpenSSL providers enabled! For details and instructions on how to disable see https://www.elastic.co/guide/en/kibana/8.11/production.html#openssl-legacy-provider
Error: ENOENT: no such file or directory, open '/usr/share/kibana/config/kibana.yml'
    at Object.openSync (node:fs:603:3)
    at readFileSync (node:fs:471:35)
    at readYaml (/usr/share/kibana/node_modules/@kbn/config/src/raw/read_config.js:20:69)
    at getConfigFromFiles (/usr/share/kibana/node_modules/@kbn/config/src/raw/read_config.js:56:18)
    at buildDataPaths (/usr/share/kibana/node_modules/@kbn/utils/src/path/index.js:41:82)
    at getDataPath (/usr/share/kibana/node_modules/@kbn/utils/src/path/index.js:71:36)
    at getKeystore (/usr/share/kibana/src/cli/keystore/get_keystore.js:21:63)
    at Object.<anonymous> (/usr/share/kibana/src/cli_keystore/cli_keystore.js:25:71)
    at Module._compile (node:internal/modules/cjs/loader:1256:14)
    at Object.Module._extensions..js (node:internal/modules/cjs/loader:1310:10)

One problem is that it is a breaking change that makes 8.11.2 not work with ECK, because ECK calls the kibana-keystore in an init container where kibana.yml is not present.

[delanni]

Caused by #157659 in #158426 - while the feature might be right, ECK is running on an init container without the config being present.

[elasticmachine]

Pinging @elastic/kibana-operations (Team:Operations)