Commit Graph

1772 Commits

Author SHA1 Message Date
jaymode d3cbea6f4c use correct cluster state when starting index audit trail
Currently, we use the local cluster state when determining if the index audit trail can be
started. This is correct when we are logging to the same cluster but is incorrect when we
log to a remote cluster. Instead we should try to initialize the client and get the remote
cluster's state.

This also changes the enqueue method to stop throwing an exception on failing to add a
message to the queue. The exception was unnecessary and causing hard to read logs.
It is now replaced with a simple warn log message.

Closes elastic/elasticsearch#317

Original commit: elastic/x-pack-elasticsearch@238e9159b3
2015-07-28 12:37:51 -04:00
jaymode 5de2b799e0 don't attach audit user to remote requests and fix rest origin address
Currently, we attach the internal audit user to all requests. This is incorrect for requests that
need to be sent to a remote cluster. For these cases, we should require a user to be defined
to access the remote cluster if it is protected by Shield.

Additionally, the origin_address field for rest request fields is formatted differently than other
address fields. This changes the field to only be the remote address.

Closes elastic/elasticsearch#278
Closes elastic/elasticsearch#279

Original commit: elastic/x-pack-elasticsearch@a5f86b1974
2015-07-28 12:37:51 -04:00
jaymode 78068bd66f apply the useBaseVersion fix to watcher as well
Original commit: elastic/x-pack-elasticsearch@f3b5d76c11
2015-07-28 11:35:20 -04:00
Alexander Reelsen bf2f1e35ea Testing: Fix copying of files in shield integration tests
In order to correctly copy the license plugin version, we have
to enable useBaseVersion in order to strip the snapshot version
number.

Original commit: elastic/x-pack-elasticsearch@025da92c35
2015-07-28 16:55:07 +02:00
Areek Zillur ac1ba2add5 Merge pull request elastic/elasticsearch#322 from areek/fix/licensor-build
[LICENSOR] Fix licensor tool build

Original commit: elastic/x-pack-elasticsearch@8c7becb0b4
2015-07-27 15:25:56 -04:00
jaymode 7e78f09a1d update shield limitations around document level security
Original commit: elastic/x-pack-elasticsearch@4afbf69ce2
2015-07-27 13:25:19 -04:00
Martijn van Groningen 3abe6e02d6 fixed compile error due to an upstream change in the MetaData class
Original commit: elastic/x-pack-elasticsearch@b74276d43c
2015-07-24 22:26:36 +02:00
jaymode 868b6b01cf add isClosed method to SensitiveXContentParser
Original commit: elastic/x-pack-elasticsearch@b1cada3bfc
2015-07-24 14:44:52 -04:00
Alexander Reelsen ba5900cf0b Documentation: Fix calls for bin/plugin to be compatible with master
Original commit: elastic/x-pack-elasticsearch@e9ce3f401c
2015-07-24 12:24:44 +02:00
jaymode 92e6d301f2 [Test] don't use the shard AnalyzeAction when checking action mapping
Original commit: elastic/x-pack-elasticsearch@6501695edf
2015-07-24 06:08:24 -04:00
jaymode 1e63141bf2 update ShieldActionMapper to handle the change to use TransportSingleShardAction
This relates to commit cafc7078e2 in elasticsearch

Original commit: elastic/x-pack-elasticsearch@72f8a92b80
2015-07-23 13:55:48 -04:00
Robert Muir 4b5faf00ac Add description elements to pom.xml's for plugins, it goes in their metadata file
Original commit: elastic/x-pack-elasticsearch@753f7a67f4
2015-07-22 21:57:30 -04:00
jaymode 3d74a68e00 shield publishes the zip for internal deployments and x-dev-tools doesn't need a parent
This removes the parent from x-dev-tools because we won't be publishing this artifact to sonatype's repository.

Original commit: elastic/x-pack-elasticsearch@013efb50e9
2015-07-22 12:23:18 -04:00
Robert Muir ab3962517a Merge pull request elastic/elasticsearch#319 from rmuir/plugin_descriptor
Fix plugins to the new world

Original commit: elastic/x-pack-elasticsearch@f9d0e75ef0
2015-07-22 11:22:23 -04:00
Robert Muir aa5356e1ad revert temporary change
Original commit: elastic/x-pack-elasticsearch@91bcd36ffa
2015-07-22 11:13:58 -04:00
jaymode d7d8ca125a load shield for external cluster client
Original commit: elastic/x-pack-elasticsearch@96e8df2ac3
2015-07-22 10:25:20 -04:00
Robert Muir 2dbeb1273d fix marvel unit tests
Original commit: elastic/x-pack-elasticsearch@6ab4a90805
2015-07-22 10:03:21 -04:00
jaymode 187be6c602 tell shield tests to explicitly load shield and license plugins
Original commit: elastic/x-pack-elasticsearch@4f70d6ee93
2015-07-22 10:01:44 -04:00
Robert Muir 8dea4500c5 get watcher verify working
Original commit: elastic/x-pack-elasticsearch@56978b71f9
2015-07-22 09:49:57 -04:00
Robert Muir b7470ea469 Fix compilation/verify works
Original commit: elastic/x-pack-elasticsearch@62001c83cb
2015-07-22 09:38:22 -04:00
Robert Muir de61163c1b add back shield assembly
Original commit: elastic/x-pack-elasticsearch@14c7d7ea8e
2015-07-22 09:31:51 -04:00
Robert Muir 360a302511 fix test compilation
Original commit: elastic/x-pack-elasticsearch@53074ee0c1
2015-07-22 09:10:34 -04:00
Robert Muir d68f94b859 give license plugin its assembly back
Original commit: elastic/x-pack-elasticsearch@ec972de2b5
2015-07-22 09:06:04 -04:00
Robert Muir 0cd1aa5aa2 get build (kinda) working
Original commit: elastic/x-pack-elasticsearch@c230faf732
2015-07-22 08:49:20 -04:00
Tanguy Leroux deb6391c10 Marvel: Add integration test
Closes elastic/elasticsearch#314

Original commit: elastic/x-pack-elasticsearch@9c5d3ab862
2015-07-21 21:42:13 +02:00
Brian Murphy 7609d5f823 [TEST] Fix test compilation
This fixes the WatchStoreTests and the TriggeredWatchStore tests with the new shard constructor.

Original commit: elastic/x-pack-elasticsearch@3d1b00b132
2015-07-21 13:56:15 -04:00
jaymode cc7fe390eb [[getting-started-with-shield]] back to [[getting-started]]
The redirect has been removed that was causing a loop. This reverts commit elastic/x-pack@546d4d4205.

Original commit: elastic/x-pack-elasticsearch@f9fb88a9d0
2015-07-21 13:43:52 -04:00
jaymode 89fa3d5a59 disable integration tests for marvel
See elastic/elasticsearch#314

Original commit: elastic/x-pack-elasticsearch@5e5811853d
2015-07-21 13:06:32 -04:00
jaymode a676a1199f release notes for Shield 1.3.1 and 1.2.3
Original commit: elastic/x-pack-elasticsearch@027b905d80
2015-07-21 11:08:55 -04:00
jaymode dbca30808f update index privilege to include shard action for indices:data/write/update
Original commit: elastic/x-pack-elasticsearch@d10b763c91
2015-07-21 10:22:53 -04:00
jaymode b54d9f9f3c add 1.3.1 and 1.2.3 to shield version
Original commit: elastic/x-pack-elasticsearch@02b798fa15
2015-07-21 10:10:35 -04:00
Tanguy Leroux 99dc9784cc Marvel: add configuration for integration tests
Original commit: elastic/x-pack-elasticsearch@6161a64d13
2015-07-21 14:51:00 +02:00
Tanguy Leroux 75178aa6e7 Marvel: remove unused licence header files
Original commit: elastic/x-pack-elasticsearch@9452fce8df
2015-07-21 14:50:25 +02:00
jaymode db0b745fa6 finish cleaning up exceptions
This commit finishes the exception cleanup and resolves the TODOs that were left from
the last set of exception changes and re-enables all muted tests.

Closes elastic/elasticsearch#5

Original commit: elastic/x-pack-elasticsearch@742fa948ce
2015-07-21 06:52:22 -04:00
Tanguy Leroux 8178b799fd Marvel: rename index stats collector
Original commit: elastic/x-pack-elasticsearch@489e43517c
2015-07-21 11:50:18 +02:00
Tanguy Leroux a1870b70bf Marvel: update project integration in x-plugins
Minor fixes to finish Marvel's agent integration into x-plugins project

Original commit: elastic/x-pack-elasticsearch@5fd9501893
2015-07-21 10:40:52 +02:00
debadair 91786f4662 Stated that node client is unsupported, removed node client config info, and edited the transport client config section. Closes elastic/elasticsearch#906
Original commit: elastic/x-pack-elasticsearch@9bbd6726a8
2015-07-20 10:51:06 -07:00
Shaunak Kashyap 8e5b321cc7 Merge pull request elastic/elasticsearch#299 from ycombinator/fix-default-throttle-typo
Fixing typo with default throttle period

Original commit: elastic/x-pack-elasticsearch@b37479ff93
2015-07-20 06:56:26 -07:00
Clinton Gormley cbeb6fdd66 Renamed [[getting-started]] to [[getting-started-with-shield]] to avoid 301 redirect
Closes elastic/elasticsearch#303

Original commit: elastic/x-pack-elasticsearch@84b535a68c
2015-07-20 14:14:45 +02:00
jaymode 4f1aaa8882 [docs] change `active-directory` to `active_directory`
In the documentation reorgantization for Shield, the type of the active directory realm changed
and is not valid. Users are configuring Shield incorrectly and running into issues because of
this. This changes the realm type to the correct value.

Closes elastic/elasticsearch#291

Original commit: elastic/x-pack-elasticsearch@7f8b65eda7
2015-07-17 19:07:52 -04:00
Shaunak Kashyap 74f5441923 Fixing typo with default throttle period
Original commit: elastic/x-pack-elasticsearch@3b76955708
2015-07-17 12:01:30 -07:00
uboness 7a00cf9cdf Update README.asciidoc
Original commit: elastic/x-pack-elasticsearch@4a024138cc
2015-07-17 19:01:46 +02:00
uboness 315055012f Merge Marvel 2.0
Original commit: elastic/x-pack-elasticsearch@ce68b3b983
2015-07-17 18:43:52 +02:00
uboness 37c0b627e7 migration of marvel agent 2.0
Original commit: elastic/x-pack-elasticsearch@6cd0a7d25c
2015-07-17 18:43:12 +02:00
jaymode a2c23cdc6f update the active directory cert in the testnode keystore
Original commit: elastic/x-pack-elasticsearch@8b3d65896d
2015-07-17 08:45:39 -04:00
jaymode 41799e44a4 blacklist rest test with no indices since shield changes the behavior
Original commit: elastic/x-pack-elasticsearch@1a58146296
2015-07-17 08:17:38 -04:00
jaymode 5ac477fbb7 add shard stores api to known actions/handlers
Original commit: elastic/x-pack-elasticsearch@8f3bad4f80
2015-07-17 07:58:05 -04:00
jaymode b3c1e3a34c add new active directory certificate
Original commit: elastic/x-pack-elasticsearch@ad902dcd57
2015-07-17 07:53:36 -04:00
Areek Zillur 9a51aad48f Merge branch 'master' of github.com:elastic/x-plugins
Original commit: elastic/x-pack-elasticsearch@e0c506bb5b
2015-07-16 15:30:06 -04:00
jaymode 66569f631a use securemock instead of elasticsearch-securemock
Original commit: elastic/x-pack-elasticsearch@c4ab3b8689
2015-07-16 12:59:52 -04:00