Skip to content

Actionable error message when attempting to inspect an unprivileged Agent as a privileged user #4888

@kaanyalti

Description

@kaanyalti

Version: 8.14.0
Operating System: macos sonoma v14.5
Platform: arm64

While working on this issue comparing root and unprivileged elastic agents, I encountered an error with the inspect command when using unprivileged agent.

Steps to Reproduce:

  1. Deploy ESS v8.14.0
  2. Create agent policy with system integration
  3. Install fleet managed agent with the unprivileged flag sudo ./elastic-agent install --unprivileged --url=<fleet url> --enrollment-token=<token>
  4. Run sudo elastic-agent inspect. You should see an error similar to what's shown below
Error: error loading agent config: error loading raw config: fail to read configuration /Library/Elastic/Agent/fleet.enc for the elastic-agent: fail to decode bytes: cipher: message authentication failed
For help, please see our troubleshooting guide at https://www.elastic.co/guide/en/fleet/8.14/fleet-troubleshooting.html

Definition of Done

Based on discussion in #4889 comments:

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions