Dynamic entitlement agent (#116125)

* Refactor: treat "maybe" JVM options uniformly

* WIP

* Get entitlement running with bridge all the way through, with qualified
exports

* Cosmetic changes to SystemJvmOptions

* Disable entitlements by default

* Bridge module comments

* Fixup forbidden APIs

* spotless

* Rename EntitlementChecker

* Fixup InstrumenterTests

* exclude recursive dep

* Fix some compliance stuff

* Rename asm-provider

* Stop using bridge in InstrumenterTests

* Generalize readme for asm-provider

* InstrumenterTests doesn't need EntitlementCheckerHandle

* Better javadoc

* Call parseBoolean

* Add entitlement to internal module list

* Docs as requested by Lorenzo

* Changes from Jack

* Rename ElasticsearchEntitlementChecker

* Remove logging javadoc

* exportInitializationToAgent should reference EntitlementInitialization, not EntitlementBootstrap.

They're currently in the same module, but if that ever changes, this code would have become wrong.

* Some suggestions from Mark

---------

Co-authored-by: Ryan Ernst <ryan@iernst.net>
This commit is contained in:
Patrick Doyle 2024-11-05 18:07:52 -05:00 committed by GitHub
parent 2ccb089969
commit 338c0538b7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
42 changed files with 459 additions and 293 deletions

View file

@ -31,6 +31,7 @@ module org.elasticsearch.server {
requires org.elasticsearch.grok;
requires org.elasticsearch.tdigest;
requires org.elasticsearch.simdvec;
requires org.elasticsearch.entitlement;
requires hppc;
requires HdrHistogram;