Commit Graph

4852 Commits

Author SHA1 Message Date
Areek Zillur 5051e30af2 LicensesService: Added Notification Documentation
Original commit: elastic/x-pack-elasticsearch@1337fbc9c7
2014-10-31 12:53:49 -04:00
Igor Motov 455dc77162 Add support for time in license issue and expiration dates
Original commit: elastic/x-pack-elasticsearch@27fb44ba1c
2014-10-31 12:44:18 -04:00
Areek Zillur cc2859d22f LicensesService: make sure that there are no race conditions on cluster state metaData
Original commit: elastic/x-pack-elasticsearch@095e7263b8
2014-10-31 11:36:44 -04:00
Martijn van Groningen 4373330a28 Changed the alert manager starting logic to move the loading logic down to alert store and alert action manager
Moved logic around from alert scheduler to action manager and trigger manager.

Original commit: elastic/x-pack-elasticsearch@8cba72b005
2014-10-31 10:28:42 +01:00
Igor Motov feeae1956f Enable license plugin to work on clients nodes
Original commit: elastic/x-pack-elasticsearch@1b940480ae
2014-10-30 19:58:47 -04:00
Igor Motov a107b5d70a TestConsumerPlugin shouldn't register its service on transport clients
Original commit: elastic/x-pack-elasticsearch@c9baa72a4b
2014-10-30 18:20:02 -04:00
Areek Zillur 34679d3e47 registerLicenses/trialLicenses should return currentCLusterState if not modified
Original commit: elastic/x-pack-elasticsearch@b8432ed988
2014-10-30 17:45:57 -04:00
Areek Zillur 1b9f069837 WIP: cluster integration tests
Original commit: elastic/x-pack-elasticsearch@99d055e04f
2014-10-30 17:29:55 -04:00
Igor Motov d518cd86db LicensesService cleanup
Original commit: elastic/x-pack-elasticsearch@348a2a6ca9
2014-10-30 17:14:43 -04:00
Areek Zillur 6d6f196af6 change to Elasticsearch Confidential license
Original commit: elastic/x-pack-elasticsearch@6d1d65a96f
2014-10-30 12:27:55 -04:00
Areek Zillur b79757bb91 LicensesService: Documentation & minor cleanups
Original commit: elastic/x-pack-elasticsearch@5ce349e2f5
2014-10-30 12:17:10 -04:00
Areek Zillur 50fb5250ee LicensesService:
- notification management
  - dont notify when NOT_RECOVERED_BLOCK is on
  - clean up & fixes
 - improve tests

Original commit: elastic/x-pack-elasticsearch@907af6d308
2014-10-29 23:14:17 -04:00
Areek Zillur d1b39f2c8e Improved LicensesServiceTests (include randomized stress tests, multiple client registrations)
- minor pom fixing

Original commit: elastic/x-pack-elasticsearch@6a0a141eca
2014-10-29 19:45:40 -04:00
Martijn van Groningen 3e45310877 make more readable
Original commit: elastic/x-pack-elasticsearch@c7727618ac
2014-10-29 14:08:06 +01:00
Martijn van Groningen 12a6de0a57 Moved alert loading to use scan scroll instead of a single normal search
Original commit: elastic/x-pack-elasticsearch@06e70836ec
2014-10-29 10:20:36 +01:00
Martijn van Groningen 1e7fc84f06 Forgot to parse field
Original commit: elastic/x-pack-elasticsearch@23512bce74
2014-10-29 09:46:39 +01:00
Areek Zillur 9a64f00802 Refactored & improved LicensesTransportTests
Ensure that invalid licenses never make it to clusterState

Original commit: elastic/x-pack-elasticsearch@c6dfb6226d
2014-10-28 23:11:36 -04:00
Areek Zillur d431c8b532 thorough plugin integration tests
Original commit: elastic/x-pack-elasticsearch@ff361ee49c
2014-10-28 22:25:41 -04:00
Areek Zillur c2c1eeeb97 increase disable notification timeout for test
Original commit: elastic/x-pack-elasticsearch@59b9fce0bf
2014-10-28 21:44:21 -04:00
Areek Zillur d7c9a2c8fc LicensesService cleanup; test fix
Original commit: elastic/x-pack-elasticsearch@bc6b2fdce9
2014-10-28 21:27:30 -04:00
uboness df3956fafe Changed the realm authentication failure logging
Now it logs the failure on debug and on trace it also logs the full stack trace. There's no point in logging it on info as a lot of the failures that will be logged are just fine (e.g. esusers will fail to authenticate and log the failure, but LDAP will succeed). This logging should only be applied for debugging purposes... for normal logging we have the audit logs

While at it, also cleaned up the Ldap realm code... change java.lang.SecurityException to shield's LdapException

Closes elastic/elasticsearch#281

Original commit: elastic/x-pack-elasticsearch@d5f0ad2efb
2014-10-29 01:41:29 +01:00
Martijn van Groningen 3625b5bc91 Moved over the streaming parsing.
Original commit: elastic/x-pack-elasticsearch@10bd127df5
2014-10-29 00:54:18 +01:00
Areek Zillur 05c5e7f48e WIP: improve plugin integration test; minor changes
Original commit: elastic/x-pack-elasticsearch@39888be13a
2014-10-28 18:58:47 -04:00
Igor Motov 783970f0e7 Fix license metadata serialization
Original commit: elastic/x-pack-elasticsearch@4c838f18d4
2014-10-28 16:45:27 -04:00
Areek Zillur 8d6e0fc164 WIP:
- handle Invalid license case at REST layer
 - improve notification mechanism
 - improve notification tests

Original commit: elastic/x-pack-elasticsearch@a6c26e1601
2014-10-28 14:33:44 -04:00
uboness c5cbd58909 Clearing the realm caches on file updates
- Changed the behaviour of esusers realm so that whenever the `users` or the `users_roles` file are updated, the realm's cache expunges
- Changed LDAP realm such that when the `role_mapping.yml` file is updated, the realm's cache expunges

Also, cleaned up unused code (mainly around esusers and the different stores)

Original commit: elastic/x-pack-elasticsearch@3f093207da
2014-10-28 18:54:40 +01:00
Martijn van Groningen 6b2fbe400e Introduced AlertsStore that is responsible for maintaining / storing / parsing etc of alerts
Original commit: elastic/x-pack-elasticsearch@40aae7dc30
2014-10-28 18:49:23 +01:00
Areek Zillur 68270bb454 Merge branch 'es_integration' of github.com:elasticsearch/elasticsearch-license into es_integration
Original commit: elastic/x-pack-elasticsearch@5a0ea5ba10
2014-10-28 12:08:45 -04:00
Igor Motov 82fa8badeb Fix handling of the local flag on get licenses request
Original commit: elastic/x-pack-elasticsearch@50bb6dc9c3
2014-10-28 12:07:40 -04:00
Areek Zillur 3445af6d93 improve internal feature handling
Original commit: elastic/x-pack-elasticsearch@4b088cb64c
2014-10-28 12:04:55 -04:00
Martijn van Groningen 34c359281a Added a todo
Original commit: elastic/x-pack-elasticsearch@56f5b1326b
2014-10-28 16:35:41 +01:00
Igor Motov 4d1b4ccdec Fix handling of the local flag on get licenses request
Original commit: elastic/x-pack-elasticsearch@4273827728
2014-10-28 10:38:00 -04:00
Brian Murphy 879d88edac Merge pull request elastic/elasticsearch#21 from elasticsearch/alerthistory/jobqueue
Alerthistory/jobqueue

Original commit: elastic/x-pack-elasticsearch@87154dca40
2014-10-28 13:55:14 +00:00
Brian Murphy 4da8f9fec7 AlertActionManager: Add alert action job queue
This change adds the AlertActionManager and AlertActionEntry. The old AlertActionManager has become the AlertActionRegistry.
This means that now the results of Alerts are queued up in a job queue and executed in separate threads.
The AlertActionManager is a composite member of the AlertManager.
Change the BasicTest to just run on a single node to fix the action registration if the action happens on a different node.
Threads are not directly constructed but now the threadpool is used.
The ClusterStateListener in AlertManager is responsible now for starting the job queue.

Original commit: elastic/x-pack-elasticsearch@a73c6b60f8
2014-10-28 13:49:04 +00:00
uboness 3ab8f57f34 [Fix] - Return 401 on any authentication error
Fixes a bug where the wrong exception and wrong error status code (500) were returned when the user sent the wrong username/password. This fixes this beahviour to return an `AuhthenticationException` with a 401 status code.

Fixes elastic/elasticsearch#271

Original commit: elastic/x-pack-elasticsearch@0a120caeae
2014-10-28 14:39:49 +01:00
Areek Zillur 9947dab389 explicit UTC date parsing
Original commit: elastic/x-pack-elasticsearch@80a3f01ab1
2014-10-27 23:35:20 -04:00
Igor Motov 351288b3dc Remove LicenseSpecs
Original commit: elastic/x-pack-elasticsearch@ccdbe41261
2014-10-27 22:38:39 -04:00
Areek Zillur 5a63b6bb8b prefix endpoints with _
Original commit: elastic/x-pack-elasticsearch@b300803aa5
2014-10-27 22:20:15 -04:00
Areek Zillur 021974fb22 Make Type & SubscriptionType strings instead of enums
Original commit: elastic/x-pack-elasticsearch@e48ebc447d
2014-10-27 21:58:00 -04:00
Areek Zillur a82a0a4e6a licensesService cleanup
Original commit: elastic/x-pack-elasticsearch@a1c136d3bb
2014-10-27 21:37:16 -04:00
Areek Zillur 79f430ebaf remove comment
Original commit: elastic/x-pack-elasticsearch@e55d3bebb4
2014-10-27 21:35:14 -04:00
Igor Motov 61b1750058 Refactor license serialization/deserialization
Original commit: elastic/x-pack-elasticsearch@ac0bb4a147
2014-10-27 20:04:09 -04:00
Areek Zillur a57164ec67 REFACTOR: convert internal license feature to json blob
Original commit: elastic/x-pack-elasticsearch@21d99b2219
2014-10-27 17:57:52 -04:00
Paul Echeverri 1f540dbc50 Adds intro text to Clients page, general fixes elsewhere
Original commit: elastic/x-pack-elasticsearch@6a8bd1a4a2
2014-10-27 13:30:28 -07:00
uboness 4c2df8ff3e Cleaned up roles.xml
Also updated the default roles test (to include marvel)

Original commit: elastic/x-pack-elasticsearch@5fb320273f
2014-10-27 21:26:49 +01:00
uboness c7e927734c Fixed a bug in Cluster privileges where resolve failed for template APIs
We now moved from the logic of checking `indices:` and `cluster:` prefixes to determine whether an action is an indices or a cluster action... instead we use the index/cluster privielge `all` privilege to determine that (which is more accurate in the context of shield, as it enables us to move actions between the two categories while keeping their logical name intact)

Also updated the docs to reflect that template related actions are infact cluster actions.

Original commit: elastic/x-pack-elasticsearch@8027334105
2014-10-27 19:31:21 +01:00
Paul Echeverri 647e545c79 Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
Conflicts:
	docs/public/02-architecture.asciidoc
	docs/public/04-authorization.asciidoc
	docs/public/07-securing-nodes.asciidoc
	docs/public/clients/kibana.asciidoc
	docs/public/clients/logstash.asciidoc
	docs/public/clients/marvel.asciidoc

Original commit: elastic/x-pack-elasticsearch@57efef1bf6
2014-10-27 11:16:58 -07:00
Areek Zillur 7f11de275f minor fix: LicenseSpecs
Original commit: elastic/x-pack-elasticsearch@5c9e0b3ad0
2014-10-27 13:18:36 -04:00
uboness 25d21570d6 Better shield user configuration
Added `shield.user` setting so that the clients won't need to go through the unnatural and tedious process of configuring the `Authorization` header directly (that also requires the user to applicat the base64(username:password) logic.

Now, the user can just set the following settings to bind a user to the client:

```yaml
shield.user: 'username:password'
```

Original commit: elastic/x-pack-elasticsearch@94be3abd92
2014-10-27 18:07:36 +01:00
Areek Zillur d1afd77bde nuked LicenseSpec; merge to ESLicense
Original commit: elastic/x-pack-elasticsearch@f7dc1b7c9c
2014-10-27 12:49:18 -04:00