Skip to content

Add steps and details for running 'unprivileged' Elastic Agent#1087

Merged
kilfoyle merged 15 commits intoelastic:mainfrom
kilfoyle:1077/unprivileged
Jun 27, 2024
Merged

Add steps and details for running 'unprivileged' Elastic Agent#1087
kilfoyle merged 15 commits intoelastic:mainfrom
kilfoyle:1077/unprivileged

Conversation

@kilfoyle
Copy link
Copy Markdown
Member

@kilfoyle kilfoyle commented May 27, 2024

These are ready for review now.

Main changes are in: Run Elastic Agent without administrative privileges

Smaller changes:

Closes: #1077
Closes: elastic/elastic-agent#4705
Closes: elastic/elastic-agent#4653
Closes: elastic/elastic-agent#4647
Closes: elastic/elastic-agent#4675

Target: 8.15

@github-actions
Copy link
Copy Markdown

A documentation preview will be available soon.

Request a new doc build by commenting
  • Rebuild this PR: run docs-build
  • Rebuild this PR and all Elastic docs: run docs-build rebuild

run docs-build is much faster than run docs-build rebuild. A rebuild should only be needed in rare situations.

If your PR continues to fail for an unknown reason, the doc build pipeline may be broken. Elastic employees can check the pipeline status here.

@kilfoyle kilfoyle changed the title Add steps and requirements for running 'unprivileged' Elastic Agent Add steps and details for running 'unprivileged' Elastic Agent May 27, 2024
@ycombinator ycombinator requested a review from blakerouse June 7, 2024 21:10
@ycombinator
Copy link
Copy Markdown
Contributor

Hi @kilfoyle, based on the comments in elastic/elastic-agent#4889, elastic/elastic-agent#4888, and elastic/elastic-agent#4887, we should include a section somewhere in this documentation about running Elastic Agent sub-commands using the same user as the one Agent uses when installing itself in --unprivileged mode. For specific suggestions on how to handle this scenario, see elastic/elastic-agent#4889 (comment).

@kilfoyle
Copy link
Copy Markdown
Member Author

Hi @kilfoyle, based on the comments in elastic/elastic-agent#4889, elastic/elastic-agent#4888, and elastic/elastic-agent#4887, we should include a section somewhere in this documentation about running Elastic Agent sub-commands using the same user as the one Agent uses when installing itself in --unprivileged mode. For specific suggestions on how to handle this scenario, see elastic/elastic-agent#4889 (comment).

Thanks @ycombinator! I've added a prominent warning about this in the "Run Elastic Agent in unprivileged mode` section:
Screenshot 2024-06-21 at 12 51 57 PM


And also a new section on the troubleshooting docs page:
Screenshot 2024-06-21 at 12 51 33 PM

@kilfoyle
Copy link
Copy Markdown
Member Author

Just for my own reference, updated the Command reference install command syntax and added this description:

Screenshot 2024-06-21 at 1 27 47 PM

@kilfoyle
Copy link
Copy Markdown
Member Author

Thanks @ycombinator! It seems like we're near the finish line. Do you think there's anything else we should add or change?

@ycombinator
Copy link
Copy Markdown
Contributor

Do you think there's anything else we should add or change?

Just #1087 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

5 participants