Code

Agent configuration encryption#398

Code

Merged

aleksmaus merged 39 commits intoelastic:mainelastic/elastic-agent:mainfrom aleksmaus:feature/vaultaleksmaus/elastic-agent:feature/vaultCopy head branch name to clipboardMay 24, 2022

+2,490-132

Commits

Commits on May 2, 2022

• Agent configuration encryption

  aleksmaus

  committed
  c10b579

• Make linter happy

  aleksmaus

  committed
  6afad66

• Address code review feedback

  aleksmaus

  committed
  17214e0

• Make linux linter happy

  aleksmaus

  committed
  750d0a4

Commits on May 3, 2022

• Encode created on date/time with the vault key/value

  aleksmaus

  committed
  e94ccc7

• Check .seed file owner is root on load

  aleksmaus

  committed
  5922e7b

Commits on May 4, 2022

• Update upgrade code paths, rename configuration files fleet.yml and state.yml into fleet.enc and state.enc after the encryption

  aleksmaus

  committed
  73da02a

• Make linter happy again

  aleksmaus

  committed
  a00e7f9

• Disable storage encryption for Darwin unit tests that do not run with sudo, thus don't have access to the system keychain

  aleksmaus

  committed
  0ea9f6c

• Make linter happy for the last commit touched files

  aleksmaus

  committed
  4e0d215

• Make check happy

  aleksmaus

  committed
  332cd63

• Fix Winderz linter: Error: naked return in func with 7 lines of code (nakedret)

  aleksmaus

  committed
  bfaa47f

• Fix Winderz linter: internal/pkg/agent/vault/vault_windows.go#L57

  Show description for 05dcce7
  aleksmaus

  committed
  05dcce7

• Remove .seed file root owner check, makes it impossible to unit test encrypted storage on any of the platforms

  aleksmaus

  committed
  2bff2cb

• Remove unused import

  aleksmaus

  committed
  bf54d72

Commits on May 5, 2022

• Add secret initialiation to non-darwin unit tests

  aleksmaus

  committed
  20f6478

• Add SkipCreateSecret to enroll_cmd, in order to pass run the unit tests on darwin

  aleksmaus

  committed
  fceee17

• Put the root owner check back with a hook that allows to disable it for the unit tests

  aleksmaus

  committed
  35eca70

• Fix disabling root check for tests on darwin

  aleksmaus

  committed
  0fd625d

Commits on May 8, 2022

• Addressed code review comments

  aleksmaus

  committed
  23c0b48

Commits on May 9, 2022

• Replace os.IsNotExist(err) with errors.Is(err, fs.ErrNotExist)

  aleksmaus

  committed
  32a6ff2

• Add missing imports for windows implementation

  aleksmaus

  committed
  306f6b4

• Address the latest set of code review comments

  aleksmaus

  committed
  5f43096

• Adjust paths for darwin to make linter happy

  aleksmaus

  committed
  1f5d81c

• Additional unit test coverage

  aleksmaus

  committed
  d8fc776

Commits on May 10, 2022

• Add vault unit tests

  aleksmaus

  committed
  4a53602

• Merge branch 'main' into feature/vault

  aleksmaus

  committed
  5745c97

• Improve unit test coverage of vault package

  aleksmaus

  committed
  5a9db4e

Commits on May 11, 2022

• Set Administrator permissions correctly on the vault directory to protect entropy on Windows

  aleksmaus

  committed
  46f3a7d

• Address code review feedback

  aleksmaus

  committed
  5d3a388

Commits on May 19, 2022

• Address the licensing blocker for vault_darwin.c. Updated the defaultAgentVaultName as suggested.

  aleksmaus

  committed
  a8a8be0

• Merge branch 'main' into feature/vault

  aleksmaus

  committed
  9b0d1d5

Commits on May 20, 2022

• Update imports order

  aleksmaus

  committed
  c6cbaaf

• Adjusted the copyright header based on the latest feedback

  aleksmaus

  committed
  5f6fb6d

• Update the CHANGELOG with this PR change

  aleksmaus

  committed
  7311aad

Commits on May 21, 2022

• Fix the issue on install. If the encrypted configuration file doesn't exists, detect and not attempt decryption

  aleksmaus

  committed
  3f85788

Commits on May 23, 2022

• Merge branch 'main' into feature/vault

  aleksmaus

  committed
  6909b8f

• Update NOTICE.txt generation for the mDNSResponder open source project

  aleksmaus

  committed
  9442d6e

• Addressed the latest round of code review

  aleksmaus

  committed
  427a2e1