Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

enrich diskqueue configuration with encryption_password when disk queue is encryption is enabled #1656

Open
Tracked by #118 ...
leehinman opened this issue Oct 31, 2022 · 0 comments
Assignees
Labels
8.7-candidate Team:Elastic-Agent Label for the Agent team

Comments

@leehinman
Copy link
Contributor

Describe the enhancement:

The encryption password for the disk queue is stored locally per instance by elastic-agent. When elastic-agent receives a policy that has an output with disk queue encryption enabled, it needs to generate the password if it doesn't exist or retrieve it if it does from the keystore. Then fill in the queue.disk.encryption_password field with the value before sending to the shipper. If the policy is sent to disk (not the shipper) then the encryption_password should be redacted.

Describe a specific use case for the enhancement or feature:

supporting encrypted disk queues in the shipper.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
8.7-candidate Team:Elastic-Agent Label for the Agent team
Projects
None yet
Development

No branches or pull requests

3 participants