Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security: fix joining cluster with production license #17

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

JoeNguyen93
Copy link

@JoeNguyen93 JoeNguyen93 commented Jun 18, 2018

Original PR here: elastic#31341

The changes made to disable security for trial licenses unless security
is explicitly enabled caused issues when a 6.3 node attempts to join a
cluster that already has a production license installed. The new node
starts off with a trial licenses and `xpack.security.enabled` is not
set for the node, which causes the security code to skip attaching the
user to the request. The existing cluster has security enabled and the
lack of a user attached to the requests causes the request to be
rejected.

This commit changes the security code to check if the state has been
recovered yet when making the decision on whether or not to attach a
user. If the state has not yet been recovered, the code will attach
the user to the request in case security is enabled on the cluster
being joined.

Closes elastic#31332
@JoeNguyen93 JoeNguyen93 deleted the pull-31341 branch June 20, 2018 11:40
@JoeNguyen93 JoeNguyen93 restored the pull-31341 branch June 20, 2018 11:41
@JoeNguyen93 JoeNguyen93 reopened this Jun 20, 2018
@JoeNguyen93 JoeNguyen93 changed the title Test PR 31341 Security: fix joining cluster with production license Jul 5, 2018
@softagram-bot
Copy link

Softagram Impact Report for pull/17

⭐ Visual Overview

Changed elements and changed dependencies.
Changed dependencies - click for full size
Graph legend
(Open in Softagram Desktop for full details)

⭐ Change Impact

How the changed files are used by the rest of the project
Impacted files - click for full size
Graph legend
(Open in Softagram Desktop for full details)

📄 Full report

Give feedback of this report to support@softagram.com

@softagram softagram deleted a comment from makimat Jul 19, 2018
@TommiTallgren
Copy link

TommiTallgren commented Jul 24, 2018

Video explaining the Impact report: https://youtu.be/_3OzOVIOmkQ

If you are interested, you can browse full elastic codebase in graphical format, just log in to https://opensource.softagram.com for free, then open the mode with Softagram desktop (https://softagram.com/desktop ) with your credentials

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants