Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BeatsCM] Add user flow for managing TSL certs #27617

Open
mattapperson opened this issue Dec 20, 2018 · 2 comments
Open

[BeatsCM] Add user flow for managing TSL certs #27617

mattapperson opened this issue Dec 20, 2018 · 2 comments
Labels
Projects

Comments

@mattapperson
Copy link
Contributor

Due to the need for Beats to communicate securely with Kibana, we need users to setup certs on the host beats run on so it can trust Kibana. This process has proven tedious for users, so we want to introduce a UI to manage this process.

We will need an initial step where instructions are provided and a cert text input block is provided in order to let users add their cert to BeatsCM for later use.

We will also need a management screen to delete/add a new cert.

  • There can only be one cert at a time
  • We might be able to get the cert from kibana, but most often not. (ability to inform the user without requiring action
  • Users can't see/edit the cert, only add/remove/replace it.
  • Users will need to be able to name the cert (optional) and know the date it was added
@mattapperson mattapperson self-assigned this Dec 20, 2018
@mattapperson mattapperson added this to To do in Beats CM via automation Dec 20, 2018
@ryankeairns
Copy link
Contributor

Design meeting notes

  • can sometimes get SSL cert from Kibana to establish a secure connection
    • pull from ES settings (if kibana and ES running on same machine; not typical)
    • the check is instant, we know right away
  • when we can get it, let user know it was successfully found
  • when we can't, we need a screen that says...
    • "upload here" (provide instructions (CLI); copy paste into textarea
      • users won't be generating, they'll already haven one
      • similar to "Checking for existing SSH keys" on github
    • "we'll store it securely"
    • confirm it was stored
  • part of initial walkthrough
    • on or before the 'Enroll beat' screen under Advanced Settings

@ph
Copy link
Contributor

ph commented Dec 20, 2018

This needs a bit more thinking on our side, so I would not do it right now.
We still need to move to use a web token and we can revisit the experience after.

@mattapperson mattapperson added the loe:x-large Extra Large Level of Effort label Jan 28, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Beats CM
  
To do
Development

No branches or pull requests

3 participants