|
| 1 | +// Use these for links to issue and pulls. |
| 2 | +:kibana-issue: https://github.com/elastic/kibana/issues/ |
| 3 | +:kibana-pull: https://github.com/elastic/kibana/pull/ |
| 4 | +:beats-issue: https://github.com/elastic/beats/issues/ |
| 5 | +:beats-pull: https://github.com/elastic/beats/pull/ |
| 6 | +:agent-libs-pull: https://github.com/elastic/elastic-agent-libs/pull/ |
| 7 | +:agent-issue: https://github.com/elastic/elastic-agent/issues/ |
| 8 | +:agent-pull: https://github.com/elastic/elastic-agent/pull/ |
| 9 | +:fleet-server-issue: https://github.com/elastic/fleet-server/issues/ |
| 10 | +:fleet-server-pull: https://github.com/elastic/fleet-server/pull/ |
| 11 | + |
| 12 | +[[release-notes]] |
| 13 | += Release notes |
| 14 | + |
| 15 | +This section summarizes the changes in each release. |
| 16 | + |
| 17 | +* <<release-notes-8.19.0>> |
| 18 | + |
| 19 | +Also see: |
| 20 | + |
| 21 | +* {kibana-ref}/release-notes.html[{kib} release notes] |
| 22 | +* {beats-ref}/release-notes.html[{beats} release notes] |
| 23 | + |
| 24 | +// begin 8.19.0 relnotes |
| 25 | + |
| 26 | +[[release-notes-8.19.0]] |
| 27 | +== {fleet} and {agent} 8.19.0 |
| 28 | + |
| 29 | +Review important information about the {fleet} and {agent} 8.19.0 release. |
| 30 | + |
| 31 | +[discrete] |
| 32 | +[[security-updates-8.19.0]] |
| 33 | +=== Security updates |
| 34 | + |
| 35 | +{agent}:: |
| 36 | +* Upgrade To Go 1.24.3. {agent-pull}8109[#8109] |
| 37 | + |
| 38 | +{fleet-server}:: |
| 39 | +* Upgrade golang.org/x/net to v0.34.0 and golang.org/x/crypto to v0.32.0. {fleet-server-pull}4405[#4405] |
| 40 | + |
| 41 | +[discrete] |
| 42 | +[[new-features-8.19.0]] |
| 43 | +=== New features |
| 44 | + |
| 45 | +The 8.19.0 release Added the following new and notable features. |
| 46 | + |
| 47 | +{agent}:: |
| 48 | +* Set replicas for Gateway Collector. {agent-pull}7011[#7011] |
| 49 | +* Add nopexporter to EDOT Collector. |
| 50 | +* Set collectors fullnameOverride for EDOT kube-stack values. {agent-pull}7754[#7754] {agent-issue}7381[#7381] |
| 51 | +* Add cumulativetodeltaprocessor to EDOT Collector. |
| 52 | +* Add apmconfig and apikeyauth OTel extensions. |
| 53 | +* Add bearertokenauth OTel extension. |
| 54 | +* Remove resource/k8s processor and use k8sattributes processor for service attributes. {agent-pull}8599[#8599] |
| 55 | ++ |
| 56 | +This PR removes the `resource/k8s` processor in honour of the k8sattributes processor that |
| 57 | +provides native support for the service attributes: |
| 58 | +https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/v0.127.0/processor/k8sattributesprocessor#configuring-recommended-resource-attributes |
| 59 | ++ |
| 60 | +This change is aligned with the respective semantic conventions' guidance: |
| 61 | +https://opentelemetry.io/docs/specs/semconv/non-normative/k8s-attributes/#service-attributes |
| 62 | +* Rename OTel collector config file in diagnostics from otel-final.yaml to otel-merged.yaml. |
| 63 | + |
| 64 | +{fleet-server}:: |
| 65 | +* Add ability for enrollment to take an agent id. {fleet-server-pull}4290[#4290] {fleet-server-issue}4226[#4226] |
| 66 | + |
| 67 | +[discrete] |
| 68 | +[[enhancements-8.19.0]] |
| 69 | +=== Enhancements |
| 70 | + |
| 71 | +{agent}:: |
| 72 | +* Allow upgrading deb or rpm agents when using Elastic Defend with tamper protection. {agent-pull}6907[#6907] {agent-issue}6394[#6394] |
| 73 | +* Include all metadata that is sent to Fleet in the agent-info.yaml file in diagnostics by default. {agent-pull}7029[#7029] |
| 74 | +* Add ApiKey prefix to Motel host configurations. {agent-pull}7063[#7063] |
| 75 | +* Add elastic.agent.fips to local_metadata. {agent-pull}9159[#9159] {agent-pull}8939[#8939] {agent-pull}9029[#9029] {agent-pull}9095[#9095] {agent-pull}8671[#8671] {agent-pull}8672[#8672] {agent-pull}9143[#9143] {agent-pull}7112[#7112] {agent-issue}7112[#7112] |
| 76 | +* Validate pbkdf2 settings when in FIPS mode. {agent-pull}7187[#7187] |
| 77 | +* FIPS compliant agent file vault. {agent-pull}7360[#7360] |
| 78 | +* With this change FIPS compliant agents will only be able to upgrade to other FIPS compliant agents. This change also restricts non-FIPS to FIPS upgrades as well. {agent-pull}7312[#7312] |
| 79 | +* Updated the error messages returned for FIPS upgrades. {agent-pull}7453[#7453] |
| 80 | +* Update OTel components to v0.121.0. |
| 81 | +* Update OTel components to v0.122.0. {agent-pull}7725[#7725] |
| 82 | +* Update OTel components to v0.123.0. {agent-pull}7996[#7996] |
| 83 | +* Retry enrollment requests on any error. {agent-pull}8056[#8056] |
| 84 | +* Update OTel components to v0.125.0. |
| 85 | +* Update OTel components to v0.127.0. |
| 86 | +* Remove deprecated OTel Elasticsearch exporter config `*_dynamic_index` from code and samples. {agent-pull}8592[#8592] |
| 87 | +* Include the forwardconnector as an EDOT collector component. {agent-pull}8753[#8753] |
| 88 | +* Update OTel components to v0.129.0. |
| 89 | +* Update apm config extension to v0.4.0. |
| 90 | +* Update Elastic trace processor to v0.7.0. |
| 91 | +* Update Elastic APM connector to v0.4.0. |
| 92 | +* Update API key auth extension to v0.2.0. |
| 93 | +* Update Elastic infra metrics processor to v0.16.0. |
| 94 | + |
| 95 | +{fleet-server}:: |
| 96 | +* Bump Go to v1.23.5. {fleet-server-pull}4353[#4353] |
| 97 | +* Clear agent.upgrade_attempts when upgrade is complete. {fleet-server-pull}4528[#4528] |
| 98 | +* Pbkdf2 settings validation is FIPS compliant. {fleet-server-pull}4542[#4542] |
| 99 | +* Update to Go v1.24.0. {fleet-server-pull}4543[#4543] |
| 100 | +* Add version metadata to version command output. {fleet-server-pull}4820[#4820] |
| 101 | +* Update Go to v1.24.3. {fleet-server-pull}4891[#4891] |
| 102 | + |
| 103 | +[discrete] |
| 104 | +[[upgrades-8.19.0]] |
| 105 | +=== Upgrades |
| 106 | + |
| 107 | +{agent}:: |
| 108 | +* Bump apmconfig extension to v0.3.0. |
| 109 | + |
| 110 | +[discrete] |
| 111 | +[[bug-fixes-8.19.0]] |
| 112 | +=== Bug fixes |
| 113 | + |
| 114 | +{agent}:: |
| 115 | +* Fix TSDB version_conflict_engine_exception caused by incorrect kube-stack Helm values. {agent-pull}9159[#9159] {agent-pull}8939[#8939] {agent-pull}9029[#9029] {agent-pull}9095[#9095] {agent-pull}8671[#8671] {agent-pull}8672[#8672] {agent-pull}9143[#9143] {agent-pull}6928[#6928] |
| 116 | +* Make enroll command backoff more conservative. {agent-pull}9159[#9159] {agent-pull}8939[#8939] {agent-pull}9029[#9029] {agent-pull}9095[#9095] {agent-pull}8671[#8671] {agent-pull}8672[#8672] {agent-pull}9143[#9143] {agent-pull}6983[#6983] {agent-issue}6761[#6761] |
| 117 | +* Add missing null checks to AST methods. {agent-pull}9159[#9159] {agent-pull}8939[#8939] {agent-pull}9029[#9029] {agent-pull}9095[#9095] {agent-pull}8671[#8671] {agent-pull}8672[#8672] {agent-pull}9143[#9143] {agent-pull}7009[#7009] {agent-issue}6999[#6999] |
| 118 | +* Fixes an issue where `fixpermissions` on Windows incorrectly returned an error message due to improper handling of Windows API return values. {agent-pull}7059[#7059] {agent-issue}6917[#6917] |
| 119 | +* Support IPv6 hosts in enroll URL. {agent-pull}7036[#7036] |
| 120 | +* Support IPv6 host in gRPC config. {agent-pull}7035[#7035] |
| 121 | +* Support IPv6 host in agent monitoring HTTP config. {agent-pull}7073[#7073] |
| 122 | +* Rotate logger output file when writing to a symbolic link. elastic-agent-pull}6938[#6938] |
| 123 | +* Do not fail Windows permission updates on missing files/paths. {agent-pull}7305[#7305] {agent-issue}7301[#7301] |
| 124 | +* Make `otelcol` executable in the Docker image. {agent-pull}9159[#9159] {agent-pull}8939[#8939] {agent-pull}9029[#9029] {agent-pull}9095[#9095] {agent-pull}8671[#8671] {agent-pull}8672[#8672] {agent-pull}9143[#9143] {agent-pull}7345[#7345] |
| 125 | +* Fix Elasticsearch exporter configuration in kube-stack values. {agent-pull}9159[#9159] {agent-pull}8939[#8939] {agent-pull}9029[#9029] {agent-pull}9095[#9095] {agent-pull}8671[#8671] {agent-pull}8672[#8672] {agent-pull}9143[#9143] {agent-pull}7380[#7380] |
| 126 | +* Ship journalctl in the elastic-agent, elastic-agent-complete, and elastic-agent-ubi Docker images to enable reading journald logs. Journalctl is not present on Wolfi images. {agent-pull}8492[#8492] https://github.com/elastic/beats/issues/44040[#44040] |
| 127 | +* Preserve agent run state on DEB and RPM upgrades. {agent-pull}7999[#7999] {agent-issue}3832[#3832] |
| 128 | +* Use --header from enrollment when communicating with Fleet Server. {agent-pull}8071[#8071] {agent-issue}6823[#6823] |
| 129 | +* Address a race condition that can occur in agent diagnostics if log rotation runs while logs are being zipped. |
| 130 | +* Use paths.tempdir for diagnostics actions. {agent-pull}8472[#8472] |
| 131 | +* Use Debian 11 to build Linux/ARM to match Linux/AMD64. Upgrades Linux/ARM64's statically linked glibc from 2.28 to 2.31. {agent-pull}8497[#8497] |
| 132 | +* Relax file ownership check to allow admin re-enrollment on Windows. {agent-pull}8503[#8503] {agent-issue}7794[#7794] |
| 133 | +* Remove incorrect logging that unprivileged installations are in beta. {agent-pull}8715[#8715] {agent-issue}8689[#8689] |
| 134 | +* Ensure standalone Elastic Agent uses log level from configuration instead of persisted state. {agent-pull}8784[#8784] {agent-issue}8137[#8137] |
| 135 | +* Resolve deadlocks in runtime checkin communication. {agent-pull}8881[#8881] {agent-issue}7944[#7944] |
| 136 | +* Removed init.d support from RPM packages. {agent-pull}8896[#8896] {agent-issue}8840[#8840] |
| 137 | + |
| 138 | +{fleet-server}:: |
| 139 | +* Added context deadline around flush bulk queue. {fleet-server-pull}5179[#5179] {fleet-server-pull}5043[#5043] {fleet-server-pull}5062[#5062] {fleet-server-pull}5063[#5063] {fleet-server-pull}3986[#3986] |
| 140 | +* Fix server.address field in HTTP logs. {fleet-server-pull}5179[#5179] {fleet-server-pull}5043[#5043] {fleet-server-pull}5062[#5062] {fleet-server-pull}5063[#5063] {fleet-server-pull}4142[#4142] |
| 141 | +* Remove race in remote bulker access. {fleet-server-pull}5179[#5179] {fleet-server-pull}5043[#5043] {fleet-server-pull}5062[#5062] {fleet-server-pull}5063[#5063] {fleet-server-pull}4171[#4171] {fleet-server-issue}4170[#4170] |
| 142 | +* Audit/unenroll should not set unenrolled_at attribute. {fleet-server-pull}4221[#4221] {fleet-server-issue}6213[#6213] |
| 143 | +* Remove auth requirement from PGP key endpoint. {fleet-server-pull}5179[#5179] {fleet-server-pull}5043[#5043] {fleet-server-pull}5062[#5062] {fleet-server-pull}5063[#5063] {fleet-server-pull}4256[#4256] {fleet-server-issue}4255[#4255] |
| 144 | +* Return HTTP 429 when connection limit is reached. {fleet-server-pull}5179[#5179] {fleet-server-pull}5062[#5062] {fleet-server-pull}5063[#5063] {fleet-server-pull}4402[#4402] {fleet-server-issue}4200[#4200] |
| 145 | +* Fix host parsing in Elasticsearch output diagnostics. {fleet-server-pull}4765[#4765] |
| 146 | +* Redact output in bootstrap config logs. {fleet-server-pull}4775[#4775] |
| 147 | +* Mutex protection for remote bulker config. {fleet-server-pull}4776[#4776] |
| 148 | +* Enable dead code elimination. {fleet-server-pull}4784[#4784] |
| 149 | +* Include the base error for JSON decode error responses. {fleet-server-pull}5069[#5069] |
| 150 | + |
| 151 | +// end 8.19.0 relnotes |
0 commit comments