Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Treat elastic-security container platforms as separate inputs #3460

Merged
merged 1 commit into from
Sep 22, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 19 additions & 11 deletions specs/endpoint-security.spec.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,13 +5,11 @@ inputs:
platforms:
- linux/amd64
- linux/arm64
- container/amd64
- container/arm64
outputs:
outputs: &outputs
- elasticsearch
- logstash
- kafka
proxied_actions:
proxied_actions: &proxied_actions
- UNENROLL
- UPGRADE
runtime:
Expand All @@ -22,7 +20,7 @@ inputs:
message: "Elastic Agent must be running as root"
- condition: ${install.in_default} == false
message: "Elastic Defend requires Elastic Agent be installed at the default installation path"
service:
service: &service
cport: 6788
log:
path: "/opt/Elastic/Endpoint/state/log/endpoint-*.log"
Expand Down Expand Up @@ -57,9 +55,7 @@ inputs:
outputs:
- elasticsearch
- logstash
proxied_actions:
- UNENROLL
- UPGRADE
proxied_actions: *proxied_actions
runtime:
preventions:
- condition: ${install.in_default} == false
Expand All @@ -76,9 +72,7 @@ inputs:
outputs:
- elasticsearch
- logstash
proxied_actions:
- UNENROLL
- UPGRADE
proxied_actions: *proxied_actions
runtime:
preventions:
- condition: ${user.root} == false
Expand All @@ -90,3 +84,17 @@ inputs:
log:
path: "C:\\Program Files\\Elastic\\Endpoint\\state\\log\\endpoint-*.log"
operations: *operations
- name: endpoint
description: "Endpoint Security"
platforms:
- container/amd64
- container/arm64
outputs: *outputs
proxied_actions: *proxied_actions
runtime:
preventions:
- condition: ${runtime.arch} == 'arm64' and ${runtime.family} == 'redhat' and ${runtime.major} == '7'
message: "No support for RHEL7 on arm64"
- condition: ${user.root} == false
message: "Elastic Agent must be running as root"
service: *service