-
Notifications
You must be signed in to change notification settings - Fork 204
Open
Labels
Team:Elastic-Agent-Control-PlaneLabel for the Agent Control Plane teamLabel for the Agent Control Plane teambugSomething isn't workingSomething isn't working
Description
When Elastic Agent attempts to stop endpoint-security (which is not always the correct thing to do - see #11266), it will tear down the connection information server and ignore errors from the stop call which invokes endpoint-security uninstall.
elastic-agent/pkg/component/runtime/service.go
Lines 169 to 174 in 271901e
| // Stop connection info | |
| s.log.Debugf("stop connection info for %s service", s.name()) | |
| cisStop() | |
| // Stop service | |
| s.stop(ctx, comm, lastCheckin, am == actionTeardown) |
This does not consider that endpoint-security uninstall may return exit code 28/284 indicating it is refusing uninstall because it is tamper protected.
When endpoint refuses uninstall, we should leave the system in a state where endpoint can continue to communicate with agent.
ebeahan
Metadata
Metadata
Assignees
Labels
Team:Elastic-Agent-Control-PlaneLabel for the Agent Control Plane teamLabel for the Agent Control Plane teambugSomething isn't workingSomething isn't working