Registry Proxy Authentication

zirota · August 19, 2022, 11:22am

Hello,

Any idea how I can provide credentials to the proxy specified xpack.fleet.registryProxyUrl?

Usually when working with proxies, we make use of the username:password basic authentication in the URL such as "https://username:password@my.proxy.url:8080".
However, the schema validation validates xpack.fleet.registryProxyUrl against a RFC 3986 URI, where username:password is now deprecated. This results in the schema validation failing.

github.com

elastic/kibana/blob/main/x-pack/plugins/fleet/server/config.ts#L102


      
                  },
                  level: 'critical',
                });
              }
          
          
    return fullConfig;
            },
          ],
          schema: schema.object({
            registryUrl: schema.maybe(schema.uri({ scheme: ['http', 'https'] })),
            registryProxyUrl: schema.maybe(schema.uri({ scheme: ['http', 'https'] })),
            agents: schema.object({
              enabled: schema.boolean({ defaultValue: true }),
              elasticsearch: schema.object({
                hosts: schema.maybe(schema.arrayOf(schema.uri({ scheme: ['http', 'https'] }))),
                ca_sha256: schema.maybe(schema.string()),
              }),
              fleet_server: schema.maybe(
                schema.object({
                  hosts: schema.maybe(schema.arrayOf(schema.uri({ scheme: ['http', 'https'] }))),
                })

Currently as a work around, I am overriding the schema and setting the validation for xpack.fleet.registryProxyUrl to schema.maybe(schema.string())

system · September 16, 2022, 11:22am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.