Commit Graph

277 Commits

Author SHA1 Message Date
Simon Willnauer a9028da5d1 Merge pull request elastic/elasticsearch#933 from s1monw/catchup/14518
Fix API usage after index-level guice was removed

Original commit: elastic/x-pack-elasticsearch@06400cc58d
2015-11-05 18:39:12 +01:00
Robert Muir cfb77bf572 Remove confusing pom.xml files
Original commit: elastic/x-pack-elasticsearch@772a1eb5d3
2015-11-05 10:39:28 -05:00
Simon Willnauer ad2835f6d3 Fix API usage after index-level guice was removed
See https://github.com/elastic/elasticsearch/pull/14518

Original commit: elastic/x-pack-elasticsearch@2428ee47c2
2015-11-05 13:18:58 +01:00
Robert Muir 5311da746b Add jimfs as shield test dep and conditionalize file permissions changing in tests.
See elastic/elasticsearch#928 for followup work

Original commit: elastic/x-pack-elasticsearch@d435cf9000
2015-11-04 14:25:20 -05:00
Daniel Mitterdorfer 081ffbeced Allow System#exit() from command line tools
This commit adds SuppressForbidden annotations to command line tools to
still allow to call System#exit() (see also issue 12596 in ES core).

Original commit: elastic/x-pack-elasticsearch@1dd3f1dcb1
2015-11-04 14:54:27 +01:00
Martijn van Groningen b7b9fa3ba5 fixed shield due to the IndexQueryParseService removal change
Original commit: elastic/x-pack-elasticsearch@ad826b9245
2015-11-04 13:10:42 +07:00
Martijn van Groningen 8fe5a03aae fixed compile error by removing unused imports
Original commit: elastic/x-pack-elasticsearch@59384c6a10
2015-11-04 11:39:19 +07:00
javanna e6409ea171 [TEST] resolve compile error due to upstream changes
Original commit: elastic/x-pack-elasticsearch@b16c56ae6a
2015-10-31 10:31:54 +01:00
Lee Hinman 52cfa2b6ed [TEST] Fix IndexPrivilegeTests for the _optimize removal
Original commit: elastic/x-pack-elasticsearch@cc1a8b94d4
2015-10-29 16:39:03 -06:00
Ryan Ernst d1b5d020f5 Switch to gradle build system.
See elastic/elasticsearchelastic/elasticsearch#13930

Original commit: elastic/x-pack-elasticsearch@b8d26ebd2a
2015-10-29 11:44:48 -07:00
debadair c088d19da4 Fixed YAML error in config. Closes elastic/elasticsearch#896
Original commit: elastic/x-pack-elasticsearch@7056bd5315
2015-10-29 11:38:56 -07:00
debadair 86ed4c84d6 Fixed download links. Closes elastic/elasticsearch#891 & elastic/elasticsearch#893.
Original commit: elastic/x-pack-elasticsearch@f6711f2dbc
2015-10-28 16:33:41 -07:00
jaymode 2837a2d8dc docs: shield release notes updates for 2.0GA
Original commit: elastic/x-pack-elasticsearch@6693be06da
2015-10-28 06:21:30 -04:00
Suyog Rao 7b0dbfe3c5 Update Shield docs with Logstash 2.0 changes
Most changes are related to the change in default
protocol from node to http

Fixes elastic/elasticsearch#882

Original commit: elastic/x-pack-elasticsearch@f5cad71f84
2015-10-27 18:18:31 -07:00
debadair e81e640190 Docs: Consolidated Watcher 2.0 release notes. Fixed pkg install cmds and subscription links for Watcher & Shield.
Original commit: elastic/x-pack-elasticsearch@1387a61a8f
2015-10-27 18:01:41 -07:00
Simon Willnauer 70ed74cd7d Make sure license plugins classes are loaded before we can instantiate them
Original commit: elastic/x-pack-elasticsearch@c46fd7287e
2015-10-27 23:23:44 +01:00
Simon Willnauer 3639465760 remove useless @Inject annoation to make sure nobody loads this in anger
Original commit: elastic/x-pack-elasticsearch@418381665c
2015-10-27 14:31:31 +01:00
Simon Willnauer c132e55020 Use official public API to register query cache and index searcher wrapper
Closes elastic/elasticsearch#794

Original commit: elastic/x-pack-elasticsearch@eb94fbd145
2015-10-27 14:20:26 +01:00
Simon Willnauer 6b742a0d60 fix tests - don't mock BitSetFilterCache
Original commit: elastic/x-pack-elasticsearch@ad9a507415
2015-10-27 12:24:04 +01:00
Simon Willnauer 2cb0cbf62a Cut over to IndexModule to register query cache
This commit cuts over to the new query cache registry in IndexModule added in
https://github.com/elastic/elasticsearch/pull/14293

Original commit: elastic/x-pack-elasticsearch@4d56584b01
2015-10-27 12:04:37 +01:00
jaymode 32af9610dd do not use the cache methods for loading entries into the user cache
The cache provides a get method with a callable to load the value into the cache. Our callable
performs authentication and then returns a value. The issue with this is that the cache will queue
concurrent calls if a value is already being loaded and return the result to all callers. This is
problematic since the key is only the username and we do not validate the credentials as part of
the get call. This means it is possible for valid credentials to be returned a null user and authentication
fails.

Additionally, another variant exists where it is possible for invalid credentials to be returned a valid
user, which allows an attacker to gain access by only knowing a username and issuing a large number
of concurrent requests.

Closes elastic/elasticsearch#860

Original commit: elastic/x-pack-elasticsearch@3d122d3bbb
2015-10-26 09:44:00 -04:00
jaymode 6850cb051d fix compile errors due to upstream changes in EngineConfig
Original commit: elastic/x-pack-elasticsearch@c2f24707a9
2015-10-26 09:09:10 -04:00
Simon Willnauer eee2718b05 Move over to new IndexSettings
This change applied the changed from https://github.com/elastic/elasticsearch/pull/14251

Original commit: elastic/x-pack-elasticsearch@c19a0a23e9
2015-10-23 12:05:25 +02:00
debadair 7a61d435a5 Shield Docs: Fixed another cross doc problem.
Original commit: elastic/x-pack-elasticsearch@4a100865fa
2015-10-21 15:49:29 -07:00
debadair 099266bc49 Shield Docs: Fixed broken xrefs.
Original commit: elastic/x-pack-elasticsearch@938fce0359
2015-10-21 15:49:09 -07:00
debadair ca2aaa1567 Shield Docs: Fixed messed up xrefs & removed obsolete troubleshooting & limitation info.
Original commit: elastic/x-pack-elasticsearch@a376a24ea1
2015-10-21 15:48:36 -07:00
javanna 93065acf59 Remove references to search/exists that was deleted in core
Original commit: elastic/x-pack-elasticsearch@f1da798028
2015-10-21 18:30:30 +02:00
jaymode f5e9c826b4 docs: remove configuration path setting from plugin install commands
The additional setting to specify the configuration path is no longer needed with elasticsearch 2.0, so
we should remove it from the documentation. Also cleans up the installation commands to be in line
with what 2.0 requires.

Original commit: elastic/x-pack-elasticsearch@b269568a67
2015-10-21 07:14:34 -04:00
javanna 45d0ea6014 update action names after optimize and count removal from core
Original commit: elastic/x-pack-elasticsearch@614e51bd31
2015-10-21 13:01:37 +02:00
Lee Hinman bfdf01131c [TESTS] Rename optimize to forcemerge for internal transport action
Original commit: elastic/x-pack-elasticsearch@4fca4fe3cb
2015-10-20 23:04:32 -06:00
Nik Everett 8231e856c2 Remove and ban @Test
Original commit: elastic/x-pack-elasticsearch@02425ca13d
2015-10-20 18:20:46 -04:00
jaymode 7380e45abb document the user_group_attribute setting for LDAP realms
Closes elastic/elasticsearch#284

Original commit: elastic/x-pack-elasticsearch@d90aecbe3b
2015-10-20 14:43:08 -04:00
debadair 84ffc956a8 Shield Docs: Clarified that Shield does not support AD distribution groups. Closes elastic/elasticsearch#520.
Original commit: elastic/x-pack-elasticsearch@39f57ff08d
2015-10-20 10:34:52 -07:00
debadair 0123d33e87 Shield Docs: Updated Marvel config and license management for 2.0.
Original commit: elastic/x-pack-elasticsearch@3d225c2562
2015-10-20 10:13:51 -07:00
Steve Kearns e1dde82724 Update LICENSE.txt for shield and watcher with new EULA
Original commit: elastic/x-pack-elasticsearch@9dd554efff
2015-10-20 15:47:00 +02:00
Jay Modi 5f3ba2cd43 Merge pull request elastic/elasticsearch#827 from jaymode/docs_alias_dls
update the wording around filtered aliases and document level security

Original commit: elastic/x-pack-elasticsearch@86958f1404
2015-10-19 10:10:42 -04:00
jaymode f7a8d31d6a update the wording around filtered aliases and document level security
Also, remove an extra period in DLS/FLS section title.

Closes elastic/elasticsearch#542
Closes elastic/elasticsearch#798

Original commit: elastic/x-pack-elasticsearch@a1556b37c7
2015-10-19 09:48:54 -04:00
javanna baa36f7bae adapt to upstream java count api removal
Original commit: elastic/x-pack-elasticsearch@ea6c53b88e
2015-10-19 15:10:59 +02:00
Colin Goodheart-Smithe 4cd02142a2 fixes for compile errors due to search request refactoring in core
Original commit: elastic/x-pack-elasticsearch@8808789912
2015-10-16 08:18:20 +01:00
Tanguy Leroux 4dd5bfe0e7 Shield: Fix compilation error in IndexAuditTrailTests
Original commit: elastic/x-pack-elasticsearch@744d133fc4
2015-10-16 08:52:15 +02:00
uboness 68f85b5527 Added missing privileges for the marvel_user role
Original commit: elastic/x-pack-elasticsearch@f3d629a878
2015-10-15 18:03:00 -07:00
Areek Zillur ae552efc3c [license] simplify Licensee interface
Currently, Licensee#onChange is called with a license and its status, It would be
cleaner if it accepted the license's operationMode and status as parameters instead.
This hides the license responsible for the notification from the consumer plugins and only
provides the license information used by the commercial plugins to turn features on via
operationMode and status to act on whether the current license is enabled, in
grace_period or disabled.

Original commit: elastic/x-pack-elasticsearch@b0ea7ec32b
2015-10-15 17:57:54 -04:00
PhaedrusTheGreek 6707b5d847 fixed a single character in reference docs
Original commit: elastic/x-pack-elasticsearch@6fdbe33ff9
2015-10-15 13:28:30 -04:00
uboness 21bb43ce3c Updated the marvel & kibana roles
- kibana 2.x explicitly creates the `.kibana` index now and it requires the indices/create permission
- added back the marvel agent/user roles

Closes elastic/elasticsearch#696

Original commit: elastic/x-pack-elasticsearch@bb9f22219e
2015-10-15 08:15:34 -07:00
Jason Tedor a0b9d424e6 Reflect upstream changes to o.e.c.m.IndexMetaData
This commit reflects some upstream method removals from
o.e.c.m.IndexMetaData.

Original commit: elastic/x-pack-elasticsearch@74b25628dc
2015-10-14 21:05:35 -04:00
jaymode 05befa5ebb test: start at 0 instead of 1
In the test we always create at least one type_ factory but the test incorrectly used type_1
as the first, when it should have been type_0

Original commit: elastic/x-pack-elasticsearch@e4128cbc26
2015-10-14 17:23:25 -04:00
jaymode f19e68ecb8 shield: only enable custom realms with a platinum or trial license
In elastic/elasticsearch#788, the enabling and disabling of features was added for shield, but custom realms were not
being enabled/disabled based on license type. This commit adds that functionality.

Relates to elastic/elasticsearch#689

Original commit: elastic/x-pack-elasticsearch@625c3ef18a
2015-10-14 15:29:53 -04:00
Alexander Reelsen b927fd08bc Watcher: Adhere to new licensing requirements
* Basic license equlas disabling
* trial/gold/platinum: everything is allowed
* On expiry: actions of watches do not execute, PUT/GET on watches is disabled

Closes elastic/elasticsearch#688

Original commit: elastic/x-pack-elasticsearch@7017c62136
2015-10-14 17:59:09 +02:00
jaymode 6dbad15e56 always sign messages when message signing is enabled
This change allows for messages to be signed when message signing is enabled and a system
key is not present. This is accomplished by generating a random key on startup and then using
HKDF with HmacSHA1 to generate the keying material to be used to sign the messages. The random
key from the originating node is added to the signed message so that the signing key can be
derived on the receiving node.

When a system key is present, the system key is used for signing and the preexisting behavior
is maintained.

Closes elastic/elasticsearch#711

Original commit: elastic/x-pack-elasticsearch@c41fdc0ac3
2015-10-14 06:44:22 -04:00
Simon Willnauer baa06fb6fb Delegate CoreCacheKey for all reader wrappers
This change removes obsolete forbidden API usage, cuts over
from an interface to an abstract class for IndexSearcherWrapper and
delegates all core cache keys to the wrapped reader.

Relates to elastic/elasticsearch#774

Original commit: elastic/x-pack-elasticsearch@3799bab0d9
2015-10-14 10:29:47 +02:00