Skip to content

[8.18] Add known issue for Elastic Agent failing to enroll into Fleet (backport #1801) #1815

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 4, 2025
Merged

[8.18] Add known issue for Elastic Agent failing to enroll into Fleet (backport #1801) #1815

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
201 changes: 193 additions & 8 deletions docs/en/ingest-management/release-notes/release-notes-8.17.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@

This section summarizes the changes in each release.

* <<release-notes-8.17.7>>
* <<release-notes-8.17.6>>
* <<release-notes-8.17.5>>
* <<release-notes-8.17.4>>
Expand All @@ -40,6 +41,34 @@ Review important information about the 8.17.7 release.

* Upgrade Go version to v1.24.3 in {{agent}}. {agent-pull}8109[https://github.com/elastic/elastic-agent/pull/8109]

[discrete]
[[known-issues-8.17.7]]
=== Known issues

[[known-issue-1800-8-17-7]]
.On Windows, {agent} is unable to re-enroll into {fleet}
[%collapsible]
====

*Details* +
There is a known issue where an {agent} installed on Windows and previously enrolled into {fleet} is unable to re-enroll. Attempting to enroll the {agent} fails with the following error:

[source,shell]
----
Error: the command is executed as root but the program files are not owned by the root user.
----

*Impact* +
The issue affects {agent} installed on Windows. Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory:

[source,shell]
----
icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l
----

After the output confirms all files were successfully processed, run the `enroll` command again.

====

[discrete]
[[bug-fixes-8.17.7]]
Expand All @@ -56,6 +85,35 @@ Review important information about the 8.17.7 release.

Review important information about the 8.17.6 release.

[discrete]
[[known-issues-8.17.6]]
=== Known issues

[[known-issue-1800-8-17-6]]
.On Windows, {agent} is unable to re-enroll into {fleet}
[%collapsible]
====

*Details* +
There is a known issue where an {agent} installed on Windows and previously enrolled into {fleet} is unable to re-enroll. Attempting to enroll the {agent} fails with the following error:

[source,shell]
----
Error: the command is executed as root but the program files are not owned by the root user.
----

*Impact* +
The issue affects {agent} installed on Windows. Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory:

[source,shell]
----
icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l
----

After the output confirms all files were successfully processed, run the `enroll` command again.

====

[discrete]
[[enhancements-8.17.6]]
=== Enhancements
Expand All @@ -65,16 +123,42 @@ Review important information about the 8.17.6 release.

// end 8.17.6 relnotes




// begin 8.17.5 relnotes

[[release-notes-8.17.5]]
== {fleet} and {agent} 8.17.5

Review important information about the 8.17.5 release.

[discrete]
[[known-issues-8.17.5]]
=== Known issues

[[known-issue-1800-8-17-5]]
.On Windows, {agent} is unable to re-enroll into {fleet}
[%collapsible]
====

*Details* +
There is a known issue where an {agent} installed on Windows and previously enrolled into {fleet} is unable to re-enroll. Attempting to enroll the {agent} fails with the following error:

[source,shell]
----
Error: the command is executed as root but the program files are not owned by the root user.
----

*Impact* +
The issue affects {agent} installed on Windows. Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory:

[source,shell]
----
icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l
----

After the output confirms all files were successfully processed, run the `enroll` command again.

====

[discrete]
[[enhancements-8.17.5]]
=== Enhancements
Expand Down Expand Up @@ -102,8 +186,6 @@ Review important information about the 8.17.5 release.

// end 8.17.5 relnotes



// begin 8.17.4 relnotes

[[release-notes-8.17.4]]
Expand Down Expand Up @@ -138,6 +220,31 @@ In the 9.x releases, the option that appears in the UI for an upgrade across a m

====

[[known-issue-1800-8-17-4]]
.On Windows, {agent} is unable to re-enroll into {fleet}
[%collapsible]
====

*Details* +
There is a known issue where an {agent} installed on Windows and previously enrolled into {fleet} is unable to re-enroll. Attempting to enroll the {agent} fails with the following error:

[source,shell]
----
Error: the command is executed as root but the program files are not owned by the root user.
----

*Impact* +
The issue affects {agent} installed on Windows. Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory:

[source,shell]
----
icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l
----

After the output confirms all files were successfully processed, run the `enroll` command again.

====

[discrete]
[[new-features-8.17.4]]
=== New features
Expand Down Expand Up @@ -209,6 +316,31 @@ In the 9.x releases, the option that appears in the UI for an upgrade across a m

====

[[known-issue-1800-8-17-3]]
.On Windows, {agent} is unable to re-enroll into {fleet}
[%collapsible]
====

*Details* +
There is a known issue where an {agent} installed on Windows and previously enrolled into {fleet} is unable to re-enroll. Attempting to enroll the {agent} fails with the following error:

[source,shell]
----
Error: the command is executed as root but the program files are not owned by the root user.
----

*Impact* +
The issue affects {agent} installed on Windows. Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory:

[source,shell]
----
icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l
----

After the output confirms all files were successfully processed, run the `enroll` command again.

====

[discrete]
[[enhancements-8.17.3]]
=== Enhancements
Expand Down Expand Up @@ -240,6 +372,34 @@ Review important information about the {fleet} and {agent} 8.17.2 release.
{fleet-server}::
* Upgrade `golang.org/x/net` to v0.34.0 and `golang.org/x/crypto` to v0.32.0. {fleet-server-pull}4405[#4405]

[discrete]
[[known-issues-8.17.2]]
=== Known issues

[[known-issue-1800-8-17-2]]
.On Windows, {agent} is unable to re-enroll into {fleet}
[%collapsible]
====

*Details* +
There is a known issue where an {agent} installed on Windows and previously enrolled into {fleet} is unable to re-enroll. Attempting to enroll the {agent} fails with the following error:

[source,shell]
----
Error: the command is executed as root but the program files are not owned by the root user.
----

*Impact* +
The issue affects {agent} installed on Windows. Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory:

[source,shell]
----
icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l
----

After the output confirms all files were successfully processed, run the `enroll` command again.

====

[discrete]
[[enhancements-8.17.2]]
Expand Down Expand Up @@ -296,6 +456,31 @@ As a workaround, you can upgrade your deployment to 8.17.1 in which this issue h

====

[[known-issue-1800-8-17-1]]
.On Windows, {agent} is unable to re-enroll into {fleet}
[%collapsible]
====

*Details* +
There is a known issue where an {agent} installed on Windows and previously enrolled into {fleet} is unable to re-enroll. Attempting to enroll the {agent} fails with the following error:

[source,shell]
----
Error: the command is executed as root but the program files are not owned by the root user.
----

*Impact* +
The issue affects {agent} installed on Windows. Until a bug fix is available in a later release, you can temporarily resolve the issue by changing the ownership of the {agent} directory:

[source,shell]
----
icacls "C:\Program Files\Elastic\Agent" /setowner "NT AUTHORITY\SYSTEM" /t /l
----

After the output confirms all files were successfully processed, run the `enroll` command again.

====

[discrete]
[[new-features-8.17.1]]
=== New features
Expand All @@ -320,7 +505,7 @@ The 8.17.1 release added the following new and notable features.

{fleet-server}::
* Do not set the `unenrolled_at` attribute when the audit/unenroll API is called. {fleet-server-pull}4221[#4221] {agent-issue}6213[#6213]
* Remove PGP endpoint auth requirement so that air-gapped {agents} can retreive a PGP key from {fleet-server}. {fleet-server-pull}4256[#4256] {fleet-server-issue}4255[#4255]
* Remove PGP endpoint auth requirement so that air-gapped {agents} can retrieve a PGP key from {fleet-server}. {fleet-server-pull}4256[#4256] {fleet-server-issue}4255[#4255]

{agent}::
* During uninstall, call the audit or unenroll API before components are stopped, if {agent} is running a {fleet-server} instance. {agent-pull}6085[#6085] {agent-issue}5752[#5752]
Expand Down Expand Up @@ -357,12 +542,12 @@ impact to your application.
[%collapsible]
====
*Details* +
A known issue in the {agent} may prevent it from being targetted with an upgrade action for a future release.
A known issue in the {agent} may prevent it from being targeted with an upgrade action for a future release.
This may occur if the Defend integration is used and the agent is stopped on a running instance for too long.
An agent may be stopped as part of an upgrade process.

*Impact* +
A bug fix is present in the 8.17.1 release of {fleet} that will prevent this from occuring.
A bug fix is present in the 8.17.1 release of {fleet} that will prevent this from occurring.

If you have agents that are affected, the workaround is as follows:
[source,shell]
Expand Down
Loading