Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for AWS session tokens #30414

Merged
merged 32 commits into from
Jul 3, 2018
Merged

Add support for AWS session tokens #30414

merged 32 commits into from
Jul 3, 2018

Commits on May 6, 2018

  1. Add support for AWS session tokens 

    AWS supports the creation and use of credentials that are only valid for a
fixed period of time. These credentials comprise three parts: the usual access
key and secret key, together with a session token. This commit adds support for
these three-part credentials to the EC2 discovery plugin and the S3 repository
plugin.

Note that session tokens are only valid for a limited period of time and yet
there is no mechanism for refreshing or rotating them when they expire without
restarting Elasticsearch.  Nonetheless, this feature is already useful for
nodes that need only run for a few days, such as for training, testing or
evaluation. elastic#29135 tracks the work towards allowing these credentials to be
refreshed at runtime.

Resolves elastic#16428
    @DaveCTurner
    DaveCTurner committed May 6, 2018
    Configuration menu
    Copy the full SHA
    2ccaeaa View commit details
    Browse the repository at this point in the history

  2. Add PR number to changelog

    @DaveCTurner
    DaveCTurner committed May 6, 2018
    Configuration menu
    Copy the full SHA
    0fbe039 View commit details
    Browse the repository at this point in the history

Commits on May 22, 2018

  1. Merge branch 'master' into 2018-05-06-aws-session-token

    @DaveCTurner
    DaveCTurner committed May 22, 2018
    Configuration menu
    Copy the full SHA
    0299a75 View commit details
    Browse the repository at this point in the history

  2. discovery-ec2 docs shouldn't refer to S3

    @DaveCTurner
    DaveCTurner committed May 22, 2018
    Configuration menu
    Copy the full SHA
    c93e568 View commit details
    Browse the repository at this point in the history

  3. Reduce scope of expectThrows

    @DaveCTurner
    DaveCTurner committed May 22, 2018
    Configuration menu
    Copy the full SHA
    ee41de6 View commit details
    Browse the repository at this point in the history

Commits on Jun 7, 2018

  1. Merge branch 'master' into 2018-05-06-aws-session-token

    @DaveCTurner
    DaveCTurner committed Jun 7, 2018
    Configuration menu
    Copy the full SHA
    ed62728 View commit details
    Browse the repository at this point in the history

  2. Support injection of session token from the environment

    @DaveCTurner
    DaveCTurner committed Jun 7, 2018
    Configuration menu
    Copy the full SHA
    85737f6 View commit details
    Browse the repository at this point in the history

  3. Extend QA tests to test using both temporary and permanent credentials

    @DaveCTurner
    DaveCTurner committed Jun 7, 2018
    Configuration menu
    Copy the full SHA
    2eea829 View commit details
    Browse the repository at this point in the history

  4. Imports

    @DaveCTurner
    DaveCTurner committed Jun 7, 2018
    Configuration menu
    Copy the full SHA
    d431f28 View commit details
    Browse the repository at this point in the history

Commits on Jun 25, 2018

  1. Merge commit 'afc91e92fb697a3241b26a5bb7cdc0a3769f4085^' into 2018-05… 

    …-06-aws-session-token
    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    ff9f8a1 View commit details
    Browse the repository at this point in the history

  2. Merge commit 'afc91e92fb697a3241b26a5bb7cdc0a3769f4085' into 2018-05-… 

    …06-aws-session-token
    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    2602b32 View commit details
    Browse the repository at this point in the history

  3. Merge commit '3378240b2954fcf879ac84f440002685c4b30cc9^' into 2018-05… 

    …-06-aws-session-token
    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    9fd5d44 View commit details
    Browse the repository at this point in the history

  4. Merge commit '3378240b2954fcf879ac84f440002685c4b30cc9' into 2018-05-… 

    …06-aws-session-token

- reverted conflicting changes and will re-make them by hand
    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    9db4a59 View commit details
    Browse the repository at this point in the history

  5. Merge branch 'master' into 2018-05-06-aws-session-token

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    c1e0a97 View commit details
    Browse the repository at this point in the history

  6. Add support for serving two buckets 

    ... so that we can give them different accessibility.
    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    552e852 View commit details
    Browse the repository at this point in the history

  7. Reinstate verification of credentials against the appropriate bucket

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    e583a0c View commit details
    Browse the repository at this point in the history

  8. Update docs

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    87b6c58 View commit details
    Browse the repository at this point in the history

  9. Add discovery-ec2 session token setting

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    7eabb56 View commit details
    Browse the repository at this point in the history

  10. Use session token in discovery-ec2 if provided

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    6915c47 View commit details
    Browse the repository at this point in the history

  11. Add assertions to Ec2DiscoveryPluginTests too

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    1475a26 View commit details
    Browse the repository at this point in the history

  12. Add support for session token to repository-s3 plugin

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    439b763 View commit details
    Browse the repository at this point in the history

  13. Extend QA tests to test both permanent and temporary credentials

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    2a93e94 View commit details
    Browse the repository at this point in the history

  14. Be pickier about auth verification in AmazonS3Fixture

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    60e7b83 View commit details
    Browse the repository at this point in the history

  15. Resolve merge conflicts manually

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    9de75c6 View commit details
    Browse the repository at this point in the history

  16. Be more certain

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    63caae2 View commit details
    Browse the repository at this point in the history

  17. Merge branch 'master' into 2018-05-06-aws-session-token

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    be7b51c View commit details
    Browse the repository at this point in the history

  18. Less hard-coding

    @DaveCTurner
    DaveCTurner committed Jun 25, 2018
    Configuration menu
    Copy the full SHA
    d6abddc View commit details
    Browse the repository at this point in the history

Commits on Jun 26, 2018

  1. Tidy imports

    @DaveCTurner
    DaveCTurner committed Jun 26, 2018
    Configuration menu
    Copy the full SHA
    aafb0aa View commit details
    Browse the repository at this point in the history

Commits on Jul 2, 2018

  1. Merge elastic#31601

    @DaveCTurner
    DaveCTurner committed Jul 2, 2018
    Configuration menu
    Copy the full SHA
    ff29696 View commit details
    Browse the repository at this point in the history

  2. Merge elastic#31601 for temp creds too

    @DaveCTurner
    DaveCTurner committed Jul 2, 2018
    Configuration menu
    Copy the full SHA
    86fa97a View commit details
    Browse the repository at this point in the history

  3. Merge branch 'master' into 2018-05-06-aws-session-token

    @DaveCTurner
    DaveCTurner committed Jul 2, 2018
    Configuration menu
    Copy the full SHA
    34ffc72 View commit details
    Browse the repository at this point in the history

Commits on Jul 3, 2018

  1. Merge branch 'master' into 2018-05-06-aws-session-token

    @DaveCTurner
    DaveCTurner committed Jul 3, 2018
    Configuration menu
    Copy the full SHA
    da791b3 View commit details
    Browse the repository at this point in the history