-
Notifications
You must be signed in to change notification settings - Fork 148
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove endpoint security from linux containers #6016
Remove endpoint security from linux containers #6016
Conversation
This pull request does not have a backport label. Could you fix it @kaanyalti? 🙏
|
|
fba6917
to
2f11581
Compare
Pinging @elastic/elastic-agent-control-plane (Team:Elastic-Agent-Control-Plane) |
8746aa2
to
37350ff
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good.
l like the small cleanups added in this PR as well.
changelog/fragments/1731517501-removed-endpoint-security-from-linux-containers.yaml
Outdated
Show resolved
Hide resolved
2ea013e
to
e875ad3
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
i like the change, it gives us a bit of flexibility for future changes.
it would also be nice enhancement (not a blocker) to have helper like AllPackageTypesExcept(pt ...PackageType)
so endpoint would become AllPackageTypesExcept(Docker)
04463d7
to
85389d5
Compare
…packaging function
…linux-containers.yaml Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com>
85389d5
to
a09ce0f
Compare
Quality Gate passedIssues Measures |
* enhancement(5495): added package types to expected binaries, updated packaging function * enhancement(5495): ran mage addLicenseHeader * enhancement(5495): added changelog fragment * Update changelog/fragments/1731517501-removed-endpoint-security-from-linux-containers.yaml Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com> * enhancement(5495): ran mage clean --------- Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com> (cherry picked from commit 9c7552f) # Conflicts: # dev-tools/mage/manifest/manifest.go # magefile.go
* enhancement(5495): added package types to expected binaries, updated packaging function * enhancement(5495): ran mage addLicenseHeader * enhancement(5495): added changelog fragment * Update changelog/fragments/1731517501-removed-endpoint-security-from-linux-containers.yaml Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com> * enhancement(5495): ran mage clean --------- Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com>
…6042) * Remove endpoint security from linux containers (#6016) * enhancement(5495): added package types to expected binaries, updated packaging function * enhancement(5495): ran mage addLicenseHeader * enhancement(5495): added changelog fragment * Update changelog/fragments/1731517501-removed-endpoint-security-from-linux-containers.yaml Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com> * enhancement(5495): ran mage clean --------- Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com> (cherry picked from commit 9c7552f) # Conflicts: # dev-tools/mage/manifest/manifest.go # magefile.go * resolved conflicts --------- Co-authored-by: Kaan Yalti <kaan.yalti@elastic.co>
What does this PR do?
The goal of this implementation is to remove endpoint security from linux containers. Since we currently do not distribute any container other than linux containers (source), this PR does not consider selected platforms when excluding the endpoint security from container images.
Why is it important?
Endpoint security cannot run in containers since it has a systemd dependency.
Checklist
[ ] I have made corresponding changes to the documentation[ ] I have made corresponding change to the default configuration files[ ] I have added tests that prove my fix is effective or that my feature works[ ] I have added an entry in./changelog/fragments
using the changelog tool[ ] I have added an integration test or an E2E testHow to test this PR locally
Package elastic-agent for a non-docker platform and validate endpoint security is installed
SNAPSHOT=true PLATFORMS=linux/arm64 PACKAGES=tar.gz EXTERNAL=true mage package
tar xzvf elastic-agent-9.0.0-SNAPSHOT-linux-arm64.tar.gz
data/elastic-agent-<commit>/components
Package elastic-agent for docker with linux and validate that endpoint security is not installed
SNAPSHOT=true PLATFORMS=linux/arm64 PACKAGES=docker EXTERNAL=true mage package
docker run --entrypoint /bin/bash -it e75d83ff01b5
data/elastic-agent-<commit>/components
Related issues