-
Notifications
You must be signed in to change notification settings - Fork 39
feat: initial specs for ingest management #126
Changes from 10 commits
85351cb
1123809
4c55304
b7355e2
cf41253
778e4d9
4395d0a
c56b8bf
c57fa4d
b588a63
3359246
8b27389
974b2e7
e74ee66
8ed05c6
6fef267
4096531
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| @ingest | ||
| Feature: Enable Fleet and Deploy Agent | ||
|
|
||
| @enroll | ||
| Scenario: Deploying an agent | ||
| Given the "Fleet" Kibana setup has been executed | ||
| When an agent is deployed to Fleet | ||
| Then the agent is listed in Fleet as online | ||
| And system package dashboards are listed in Fleet | ||
| And new documents are inserted into Elasticsearch | ||
|
|
||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. there is a final step we should ideally do here, we should attempt to re-enroll the Agent with the exact same string as before, but it should fail this time with an error message on the host cli as seen in this usage: edavis-mbp:elastic-agent-7.8.0-darwin-x86_64-BC5 edavis$ ./elastic-agent enroll https://fc0fe63733904e31ac7aec80b3dbf246.us-central1.gcp.foundit.no:443 R2JSX2dISUJtNzhySTBVS0JXMGM6aEJ6NlZyb0dUUWE3anhBNWRmLU9qQQ== fail to enroll: fail to execute request to Kibana: Status code: 401, Kibana returned an error: Unauthorized, message: [security_exception] missing authentication credentials for REST request [/_security/_authenticate], with { header={ WWW-Authenticate={ 0="Bearer realm="security"" & 1="ApiKey" & 2="Basic realm="security" charset="UTF-8"" } } } I suggest if we can, we parse this message for the keywords 'fail' 'unauthorized' (lowercased). |
||
| @start-agent | ||
| Scenario: Starting the agent starts backend processes | ||
| When an agent is deployed to Fleet | ||
| Then filebeat is started | ||
| And metricbeat is started | ||
|
mdelapenya marked this conversation as resolved.
Outdated
|
||
|
|
||
| @stop-agent | ||
| Scenario: Stopping the agent stops backend processes | ||
| Given an agent is deployed to Fleet | ||
| When the agent is stopped on the host | ||
| Then filebeat is stopped | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. we would need probably more like |
||
| And metricbeat is stopped | ||
|
|
||
| @unenroll | ||
| Scenario: Un-enrolling an agent | ||
| Given an agent is deployed to Fleet | ||
| When the agent is un-enrolled | ||
| Then the agent is not listed as online in Fleet | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Hey @EricDavisX, could we reuse here the step Therefore we would have: which would be one single step. wdyt? |
||
| And no new documents are inserted into Elasticsearch | ||
|
|
||
| @reenroll | ||
| Scenario: Re-enrolling an agent | ||
| Given an agent is enrolled | ||
| And the agent is un-enrolled | ||
| And the Agent is stopped on the host | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Is this one automatically inferred from un-enrolling the agent, or must be done as a separate action? If the later, I would keep it as is (although from user's perspective it seems more -unproductive?- work) |
||
| When the agent is re-enrolled on the host | ||
| And the agent is run on the host | ||
| Then the agent is listed in Fleet as online | ||
| And new documents are inserted into Elasticsearch | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I'd like to abstract this step to a more product-related level, as I see it very technical.
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. what about something like
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I like it! What if the number of documents is not there after an amount of time (minutes)?
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. yes exactly this should fail then |
||
|
|
||
| @revoke-token | ||
| Scenario: Revoking the enrollment token for an agent | ||
| Given an agent is enrolled | ||
| When the enrollment token is revoked | ||
| And new documents are inserted into Elasticsearch | ||
| Then the agent is un-enrolled | ||
| And the agent is stopped on the host | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. |
||
| And the agent cannot be re-enrolled with the same command | ||
Uh oh!
There was an error while loading. Please reload this page.