From 3f76f5c740e85cc8a46db3e1250df4ae73a4223e Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Mon, 2 Jun 2025 16:22:41 +0200 Subject: [PATCH 1/6] Add known issue for Elastic Agent failing to enroll into Fleet --- .../fleet-elastic-agent/known-issues.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/release-notes/fleet-elastic-agent/known-issues.md b/release-notes/fleet-elastic-agent/known-issues.md index 892eb0649f..62c965a4c2 100644 --- a/release-notes/fleet-elastic-agent/known-issues.md +++ b/release-notes/fleet-elastic-agent/known-issues.md @@ -17,6 +17,24 @@ Known issues are significant defects or limitations that may impact your impleme % ::: +:::{dropdown} [Windows] {{agent}} is unable to enroll into {{fleet}} following the {{agent}}'s upgrade. + +**Applies to: {{agent}} 9.0.0 and 9.0.1 (Windows only)** + +On April 9, 2025, a known issue was discovered where an {{agent}} installed on Windows and previously enrolled into {f{leet}} is unable to re-enroll after the {{agent}} is upgraded. Attempting to enroll the {{agent}} fails with the following error: + +```shell +Error: the command is executed as root but the program files are not owned by the root user. +``` + +For more information, check [Issue #7794](https://github.com/elastic/elastic-agent/issues/7794). + +**Workaround** + +There is no resolution or workaround at this time, but a bug fix is expected in a later maintenance release. + +::: + :::{dropdown} [macOS] Osquery integration fails to start on fresh agent installs **Applies to: {{agent}} 9.0.0 and 9.0.1 (macOS only)** From 31dd67ed28e659efcdf9312c19fd4b7c1ba9e758 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Mon, 2 Jun 2025 16:28:22 +0200 Subject: [PATCH 2/6] Fix typo --- release-notes/fleet-elastic-agent/known-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/release-notes/fleet-elastic-agent/known-issues.md b/release-notes/fleet-elastic-agent/known-issues.md index 62c965a4c2..f3c64fe24d 100644 --- a/release-notes/fleet-elastic-agent/known-issues.md +++ b/release-notes/fleet-elastic-agent/known-issues.md @@ -21,7 +21,7 @@ Known issues are significant defects or limitations that may impact your impleme **Applies to: {{agent}} 9.0.0 and 9.0.1 (Windows only)** -On April 9, 2025, a known issue was discovered where an {{agent}} installed on Windows and previously enrolled into {f{leet}} is unable to re-enroll after the {{agent}} is upgraded. Attempting to enroll the {{agent}} fails with the following error: +On April 9, 2025, a known issue was discovered where an {{agent}} installed on Windows and previously enrolled into {{fleet}} is unable to re-enroll after the {{agent}} is upgraded. Attempting to enroll the {{agent}} fails with the following error: ```shell Error: the command is executed as root but the program files are not owned by the root user. From 6d5ef09f303a13373c526a9df09189f103fe188f Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 3 Jun 2025 15:55:16 +0200 Subject: [PATCH 3/6] Add workaround to known issue --- release-notes/fleet-elastic-agent/known-issues.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/release-notes/fleet-elastic-agent/known-issues.md b/release-notes/fleet-elastic-agent/known-issues.md index f3c64fe24d..be17d58ed7 100644 --- a/release-notes/fleet-elastic-agent/known-issues.md +++ b/release-notes/fleet-elastic-agent/known-issues.md @@ -12,7 +12,7 @@ Known issues are significant defects or limitations that may impact your impleme % On [Month Day, Year], a known issue was discovered that [description of known issue]. % For more information, check [Issue #](Issue link). -% **Workaround** +% **Workaround** % Workaround description. % ::: @@ -31,7 +31,13 @@ For more information, check [Issue #7794](https://github.com/elastic/elastic-age **Workaround** -There is no resolution or workaround at this time, but a bug fix is expected in a later maintenance release. +Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory: + +```shell +icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l +``` + +After the output confirms all files were successfully processed, run the `enroll` command again. ::: @@ -43,7 +49,7 @@ On May 26th, 2025, a known issue was discovered that causes the `osquery` integr For more information, check [Issue #8245](https://github.com/elastic/elastic-agent/issues/8245). -**Workaround** +**Workaround** As a workaround, you can manually restore the `osquery.app/` directory as follows: From 177823b17a28e263d640ac7da0736833b5e8dfaa Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 3 Jun 2025 16:07:26 +0200 Subject: [PATCH 4/6] Rephrase workaround --- release-notes/fleet-elastic-agent/known-issues.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/release-notes/fleet-elastic-agent/known-issues.md b/release-notes/fleet-elastic-agent/known-issues.md index be17d58ed7..e4350e4fcc 100644 --- a/release-notes/fleet-elastic-agent/known-issues.md +++ b/release-notes/fleet-elastic-agent/known-issues.md @@ -17,7 +17,7 @@ Known issues are significant defects or limitations that may impact your impleme % ::: -:::{dropdown} [Windows] {{agent}} is unable to enroll into {{fleet}} following the {{agent}}'s upgrade. +:::{dropdown} [Windows] {{agent}} is unable to enroll into {{fleet}} following the {{agent}}'s upgrade **Applies to: {{agent}} 9.0.0 and 9.0.1 (Windows only)** @@ -31,13 +31,15 @@ For more information, check [Issue #7794](https://github.com/elastic/elastic-age **Workaround** -Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory: +Until a bug fix is available in a later release, you can resolve the issue temporarily using the following workaround: -```shell -icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l -``` +1. Change the ownership of the {{agent}} directory: + + ```shell + icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l + ``` -After the output confirms all files were successfully processed, run the `enroll` command again. +2. After the output confirms all files were successfully processed, run the `enroll` command again. ::: From 5ac0bc5ddaa7d100a075898d4e6ffc59f0a709b6 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 3 Jun 2025 22:46:01 +0200 Subject: [PATCH 5/6] Update wording to remove references to the Agent upgrade --- release-notes/fleet-elastic-agent/known-issues.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/release-notes/fleet-elastic-agent/known-issues.md b/release-notes/fleet-elastic-agent/known-issues.md index e4350e4fcc..9bd693328c 100644 --- a/release-notes/fleet-elastic-agent/known-issues.md +++ b/release-notes/fleet-elastic-agent/known-issues.md @@ -17,11 +17,11 @@ Known issues are significant defects or limitations that may impact your impleme % ::: -:::{dropdown} [Windows] {{agent}} is unable to enroll into {{fleet}} following the {{agent}}'s upgrade +:::{dropdown} [Windows] {{agent}} is unable to re-enroll into {{fleet}} **Applies to: {{agent}} 9.0.0 and 9.0.1 (Windows only)** -On April 9, 2025, a known issue was discovered where an {{agent}} installed on Windows and previously enrolled into {{fleet}} is unable to re-enroll after the {{agent}} is upgraded. Attempting to enroll the {{agent}} fails with the following error: +On April 9, 2025, a known issue was discovered where an {{agent}} installed on Windows and previously enrolled into {{fleet}} is unable to re-enroll. Attempting to enroll the {{agent}} fails with the following error: ```shell Error: the command is executed as root but the program files are not owned by the root user. From bce6b3d5fe6db83161860252cf1e564197c79302 Mon Sep 17 00:00:00 2001 From: Visha Angelova Date: Tue, 3 Jun 2025 22:50:06 +0200 Subject: [PATCH 6/6] Add release 9.0.2 to the list of affected releases --- release-notes/fleet-elastic-agent/known-issues.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/release-notes/fleet-elastic-agent/known-issues.md b/release-notes/fleet-elastic-agent/known-issues.md index 9bd693328c..74d29135a5 100644 --- a/release-notes/fleet-elastic-agent/known-issues.md +++ b/release-notes/fleet-elastic-agent/known-issues.md @@ -19,7 +19,7 @@ Known issues are significant defects or limitations that may impact your impleme :::{dropdown} [Windows] {{agent}} is unable to re-enroll into {{fleet}} -**Applies to: {{agent}} 9.0.0 and 9.0.1 (Windows only)** +**Applies to: {{agent}} 9.0.0, 9.0.1, 9.0.2 (Windows only)** On April 9, 2025, a known issue was discovered where an {{agent}} installed on Windows and previously enrolled into {{fleet}} is unable to re-enroll. Attempting to enroll the {{agent}} fails with the following error: