Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

container.security context.privileged boolean #2246

Merged
merged 3 commits into from
Aug 10, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion CHANGELOG.next.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ Thanks, you're awesome :-) -->
#### Bugfixes

#### Added
* Added `container.security_context.privileged` to indicated whether a container was started in privileged mode. #2219, #2225
* Added `container.security_context.privileged` to indicated whether a container was started in privileged mode. #2219, #2225, #2246
* Added `process.thread.capabilities.permitted` to contain the current thread's possible capabilities. #2245
* Added `process.thread.capabilities.effective` to contain the current thread's effective capabilities. #2245

Expand Down
2 changes: 1 addition & 1 deletion docs/fields/field-details.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -1239,7 +1239,7 @@ example: `docker`

a| Indicates whether the container is running in privileged mode.

type: bool
type: boolean



Expand Down
2 changes: 1 addition & 1 deletion experimental/generated/beats/fields.ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -952,7 +952,7 @@
example: docker
- name: security_context.privileged
level: extended
type: bool
type: boolean
description: Indicates whether the container is running in privileged mode.
default_field: false
- name: data_stream
Expand Down
2 changes: 1 addition & 1 deletion experimental/generated/csv/fields.csv
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,7 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description
8.10.0-dev+exp,true,container,container.network.egress.bytes,long,extended,,,The number of bytes sent on all network interfaces.
8.10.0-dev+exp,true,container,container.network.ingress.bytes,long,extended,,,The number of bytes received on all network interfaces.
8.10.0-dev+exp,true,container,container.runtime,keyword,extended,,docker,Runtime managing this container.
8.10.0-dev+exp,true,container,container.security_context.privileged,bool,extended,,,Indicates whether the container is running in privileged mode.
8.10.0-dev+exp,true,container,container.security_context.privileged,boolean,extended,,,Indicates whether the container is running in privileged mode.
8.10.0-dev+exp,true,data_stream,data_stream.dataset,constant_keyword,extended,,nginx.access,The field can contain anything that makes sense to signify the source of the data.
8.10.0-dev+exp,true,data_stream,data_stream.namespace,constant_keyword,extended,,production,A user defined namespace. Namespaces are useful to allow grouping of data.
8.10.0-dev+exp,true,data_stream,data_stream.type,constant_keyword,extended,,logs,An overarching type for the data stream.
Expand Down
2 changes: 1 addition & 1 deletion experimental/generated/ecs/ecs_flat.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1202,7 +1202,7 @@ container.security_context.privileged:
name: security_context.privileged
normalize: []
short: Indicates whether the container is running in privileged mode.
type: bool
type: boolean
data_stream.dataset:
dashed_name: data-stream-dataset
description: "The field can contain anything that makes sense to signify the source\
Expand Down
2 changes: 1 addition & 1 deletion experimental/generated/ecs/ecs_nested.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1581,7 +1581,7 @@ container:
name: security_context.privileged
normalize: []
short: Indicates whether the container is running in privileged mode.
type: bool
type: boolean
group: 2
name: container
prefix: container.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -98,7 +98,7 @@
"security_context": {
"properties": {
"privileged": {
"type": "bool"
"type": "boolean"
}
}
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -567,7 +567,7 @@
"security_context": {
"properties": {
"privileged": {
"type": "bool"
"type": "boolean"
}
}
}
Expand Down
2 changes: 1 addition & 1 deletion generated/beats/fields.ecs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -902,7 +902,7 @@
example: docker
- name: security_context.privileged
level: extended
type: bool
type: boolean
description: Indicates whether the container is running in privileged mode.
default_field: false
- name: data_stream
Expand Down
2 changes: 1 addition & 1 deletion generated/csv/fields.csv
Original file line number Diff line number Diff line change
Expand Up @@ -93,7 +93,7 @@ ECS_Version,Indexed,Field_Set,Field,Type,Level,Normalization,Example,Description
8.10.0-dev,true,container,container.network.egress.bytes,long,extended,,,The number of bytes sent on all network interfaces.
8.10.0-dev,true,container,container.network.ingress.bytes,long,extended,,,The number of bytes received on all network interfaces.
8.10.0-dev,true,container,container.runtime,keyword,extended,,docker,Runtime managing this container.
8.10.0-dev,true,container,container.security_context.privileged,bool,extended,,,Indicates whether the container is running in privileged mode.
8.10.0-dev,true,container,container.security_context.privileged,boolean,extended,,,Indicates whether the container is running in privileged mode.
8.10.0-dev,true,data_stream,data_stream.dataset,constant_keyword,extended,,nginx.access,The field can contain anything that makes sense to signify the source of the data.
8.10.0-dev,true,data_stream,data_stream.namespace,constant_keyword,extended,,production,A user defined namespace. Namespaces are useful to allow grouping of data.
8.10.0-dev,true,data_stream,data_stream.type,constant_keyword,extended,,logs,An overarching type for the data stream.
Expand Down
2 changes: 1 addition & 1 deletion generated/ecs/ecs_flat.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1133,7 +1133,7 @@ container.security_context.privileged:
name: security_context.privileged
normalize: []
short: Indicates whether the container is running in privileged mode.
type: bool
type: boolean
data_stream.dataset:
dashed_name: data-stream-dataset
description: "The field can contain anything that makes sense to signify the source\
Expand Down
2 changes: 1 addition & 1 deletion generated/ecs/ecs_nested.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1501,7 +1501,7 @@ container:
name: security_context.privileged
normalize: []
short: Indicates whether the container is running in privileged mode.
type: bool
type: boolean
group: 2
name: container
prefix: container.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -98,7 +98,7 @@
"security_context": {
"properties": {
"privileged": {
"type": "bool"
"type": "boolean"
}
}
}
Expand Down
2 changes: 1 addition & 1 deletion generated/elasticsearch/legacy/template.json
Original file line number Diff line number Diff line change
Expand Up @@ -525,7 +525,7 @@
"security_context": {
"properties": {
"privileged": {
"type": "bool"
"type": "boolean"
}
}
}
Expand Down
2 changes: 1 addition & 1 deletion schemas/container.yml
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,7 @@
container since the last metric collection.

- name: security_context.privileged
type: bool
type: boolean
level: extended
short: Indicates whether the container is running in privileged mode.
description: >
Expand Down