Fleet and Elastic Agent 8.16.2
editFleet and Elastic Agent 8.16.2
editReview important information about the Fleet and Elastic Agent 8.16.2 release.
Known Issues
editAn Elastic Agent with the Defend integration may report an Orphaned status and will not be able to be issued an upgrade action through Fleet.
Details
A known issue in the Elastic Agent may prevent it from being targetted with an upgrade action for a future release.
This may occur if the Defend integration is used and the agent is stopped on a running instance for too long.
An agent may be stopped as part of an upgrade process.
Impact
A bug fix is present in the 8.16.3 and 8.17.1 releases of Fleet that will prevent this from occuring.
If you have agents that are affected, the workaround is as follows:
# Get a Token to issue an update_by_query request:
curl -XPOST --user elastic:${SUPERUSER_PASS} -H 'x-elastic-product-origin:fleet' -H'content-type:application/json' "https://${ELASTICSEARCH_HOST}/_security/service/elastic/fleet-server/credential/token/fix-unenrolled"
# Issue an update_by_query request that targets effected agents:
curl -XPOST -H 'Authorization: Bearer ${TOKEN}' -H 'x-elastic-product-origin:fleet' -H 'content-type:application/json' "https://${ELASTICSEARCH_HOST}/.fleet-agents/_update_by_query" -d '{"query": {"bool": {"must": [{ "exists": { "field": "unenrolled_at" } }],"must_not": [{ "term": { "active": "false" } }]}},"script": {"source": "ctx._source.unenrolled_at = null;","lang": "painless"}}'
Enhancements
editIn this release we’ve introduced an image based on the hardened Wolfi image to provide additional security to our self-managed customers, and improve our supply chain security posture. Wolfi-based images require Docker version 20.10.10 or higher.
- Elastic Agent
-
- Perform check for an external package manager only at startup. #6178 #5835 #5991
- Remove some unnecessary copies when generating component configuration. #6184 #5835 #5991
- Use xxHash instead of sha256 for hashing AST nodes when generating component configuration. #6192 #5835 #5991
- Cache conditional sections when applying variables to component configuration. #6229 #5835 #5991