From af3498ddfcb0775a758114476ff1c61494867b54 Mon Sep 17 00:00:00 2001 From: pierrehilbert <806950+pierrehilbert@users.noreply.github.com> Date: Wed, 18 Mar 2026 08:14:57 +0000 Subject: [PATCH 1/3] add the 9.2.7 Fleet Server release notes --- changelog/9.2.7.yaml | 93 +++++++++++++++++++ .../1762435732-secrets-fallback.yaml | 36 ------- .../fragments/1764192755-ssl-secrets.yaml | 32 ------- .../1764638389-secrets-fleet-ssl.yaml | 32 ------- ...Add-support-for-OTEL-secrets-handling.yaml | 33 ------- ...77135-Fix-checkin-compression-support.yaml | 33 ------- ...12-Fix-innacuracies-with-openapi-spec.yaml | 32 ------- .../_snippets/9.2.7/breaking-changes.md | 3 + .../_snippets/9.2.7/deprecations.md | 3 + docs/release-notes/_snippets/9.2.7/index.md | 31 +++++++ .../_snippets/breaking-changes/9.2.md | 3 + .../_snippets/deprecations/9.2.md | 3 + docs/release-notes/_snippets/index/9.2.md | 3 + 13 files changed, 139 insertions(+), 198 deletions(-) create mode 100644 changelog/9.2.7.yaml delete mode 100644 changelog/fragments/1762435732-secrets-fallback.yaml delete mode 100644 changelog/fragments/1764192755-ssl-secrets.yaml delete mode 100644 changelog/fragments/1764638389-secrets-fleet-ssl.yaml delete mode 100644 changelog/fragments/1771972977-Add-support-for-OTEL-secrets-handling.yaml delete mode 100644 changelog/fragments/1772577135-Fix-checkin-compression-support.yaml delete mode 100644 changelog/fragments/1772755112-Fix-innacuracies-with-openapi-spec.yaml create mode 100644 docs/release-notes/_snippets/9.2.7/breaking-changes.md create mode 100644 docs/release-notes/_snippets/9.2.7/deprecations.md create mode 100644 docs/release-notes/_snippets/9.2.7/index.md diff --git a/changelog/9.2.7.yaml b/changelog/9.2.7.yaml new file mode 100644 index 0000000000..cbf25ca23f --- /dev/null +++ b/changelog/9.2.7.yaml @@ -0,0 +1,93 @@ +version: 9.2.7 +entries: + - kind: enhancement + summary: Accept secret references in policies in either inline or path formats + description: "Elastic Agent policies can contain secret references in one of two formats: inline or path.\nWith the inline format, the reference looks like this: `: $co.elastic.secret{}`. \nWith the path format, the reference looks like this: `secrets..id:`.\nThis change ensures that Fleet Server accepts secret references in policies in either format.\n" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/6581 + - https://github.com/elastic/fleet-server/pull/6592 + - https://github.com/elastic/fleet-server/pull/6597 + issue: [] + impact: "" + action: "" + timestamp: 1762435732 + file: + name: 1762435732-secrets-fallback.yaml + checksum: 5b929a1761bf0cd924d72ba2016afee132dbb163 + - kind: feature + summary: Support secrets in agent.download section of policy + description: "" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/6581 + - https://github.com/elastic/fleet-server/pull/6592 + - https://github.com/elastic/fleet-server/pull/6597 + issue: [] + impact: "" + action: "" + timestamp: 1764192755 + file: + name: 1764192755-ssl-secrets.yaml + checksum: d5c90a81749c0e4b28b1bb2aefdc0b857463cd66 + - kind: feature + summary: Support secrets in fleet section of policy + description: "" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/6581 + - https://github.com/elastic/fleet-server/pull/6592 + - https://github.com/elastic/fleet-server/pull/6597 + issue: [] + impact: "" + action: "" + timestamp: 1764638389 + file: + name: 1764638389-secrets-fleet-ssl.yaml + checksum: b0c2b503cefaaca00701643576e74684b6b5ad8f + - kind: bug-fix + summary: Add support for OTEL secrets handling + description: | + Added functionality to replace secrets in OTEL sections (receivers, exporters, processors, extensions, connectors) of a policy. + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/6581 + - https://github.com/elastic/fleet-server/pull/6592 + - https://github.com/elastic/fleet-server/pull/6597 + issue: + - https://github.com/elastic/fleet-server/issues/6277 + impact: "" + action: "" + timestamp: 1771972977 + file: + name: 1771972977-Add-support-for-OTEL-secrets-handling.yaml + checksum: a07d04d18be234304d8c4fff8be5e4c8a823e288 + - kind: bug-fix + summary: Fix checkin endpoint compression support + description: | + Adds support for gzip compressed requests to the checkin endpoint. + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/6491 + issue: [] + impact: "" + action: "" + timestamp: 1772577135 + file: + name: 1772577135-Fix-checkin-compression-support.yaml + checksum: 5f7272396b0d42068d09e00b107adcf57b29f9a4 + - kind: bug-fix + summary: Fix inaccuracies with openapi spec + description: "" + component: fleet-server + pr: + - https://github.com/elastic/fleet-server/pull/6581 + - https://github.com/elastic/fleet-server/pull/6592 + - https://github.com/elastic/fleet-server/pull/6597 + issue: [] + impact: "" + action: "" + timestamp: 1772755112 + file: + name: 1772755112-Fix-innacuracies-with-openapi-spec.yaml + checksum: f867db4c96d35d5c75a59ffe1e5584144de92366 diff --git a/changelog/fragments/1762435732-secrets-fallback.yaml b/changelog/fragments/1762435732-secrets-fallback.yaml deleted file mode 100644 index 9d3ea59aaa..0000000000 --- a/changelog/fragments/1762435732-secrets-fallback.yaml +++ /dev/null @@ -1,36 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: enhancement - -# Change summary; a 80ish characters long description of the change. -summary: Accept secret references in policies in either inline or path formats - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -description: | - Elastic Agent policies can contain secret references in one of two formats: inline or path. - With the inline format, the reference looks like this: `: $co.elastic.secret{}`. - With the path format, the reference looks like this: `secrets..id:`. - This change ensures that Fleet Server accepts secret references in policies in either format. - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1764192755-ssl-secrets.yaml b/changelog/fragments/1764192755-ssl-secrets.yaml deleted file mode 100644 index d5ea36a06c..0000000000 --- a/changelog/fragments/1764192755-ssl-secrets.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: feature - -# Change summary; a 80ish characters long description of the change. -summary: Support secrets in agent.download section of policy - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1764638389-secrets-fleet-ssl.yaml b/changelog/fragments/1764638389-secrets-fleet-ssl.yaml deleted file mode 100644 index 41371f5c2a..0000000000 --- a/changelog/fragments/1764638389-secrets-fleet-ssl.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: feature - -# Change summary; a 80ish characters long description of the change. -summary: Support secrets in fleet section of policy - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1771972977-Add-support-for-OTEL-secrets-handling.yaml b/changelog/fragments/1771972977-Add-support-for-OTEL-secrets-handling.yaml deleted file mode 100644 index c1c4ad83c6..0000000000 --- a/changelog/fragments/1771972977-Add-support-for-OTEL-secrets-handling.yaml +++ /dev/null @@ -1,33 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: bug-fix - -# Change summary; a 80ish characters long description of the change. -summary: Add support for OTEL secrets handling - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -description: | - Added functionality to replace secrets in OTEL sections (receivers, exporters, processors, extensions, connectors) of a policy. - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -issue: https://github.com/elastic/fleet-server/issues/6277 diff --git a/changelog/fragments/1772577135-Fix-checkin-compression-support.yaml b/changelog/fragments/1772577135-Fix-checkin-compression-support.yaml deleted file mode 100644 index cff7a912a7..0000000000 --- a/changelog/fragments/1772577135-Fix-checkin-compression-support.yaml +++ /dev/null @@ -1,33 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: bug-fix - -# Change summary; a 80ish characters long description of the change. -summary: Fix checkin endpoint compression support - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -description: | - Adds support for gzip compressed requests to the checkin endpoint. - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -pr: https://github.com/elastic/fleet-server/pull/6491 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/changelog/fragments/1772755112-Fix-innacuracies-with-openapi-spec.yaml b/changelog/fragments/1772755112-Fix-innacuracies-with-openapi-spec.yaml deleted file mode 100644 index 40e126483c..0000000000 --- a/changelog/fragments/1772755112-Fix-innacuracies-with-openapi-spec.yaml +++ /dev/null @@ -1,32 +0,0 @@ -# Kind can be one of: -# - breaking-change: a change to previously-documented behavior -# - deprecation: functionality that is being removed in a later release -# - bug-fix: fixes a problem in a previous version -# - enhancement: extends functionality but does not break or fix existing behavior -# - feature: new functionality -# - known-issue: problems that we are aware of in a given version -# - security: impacts on the security of a product or a user’s deployment. -# - upgrade: important information for someone upgrading from a prior version -# - other: does not fit into any of the other categories -kind: bug-fix - -# Change summary; a 80ish characters long description of the change. -summary: Fix inaccuracies with openapi spec - -# Long description; in case the summary is not enough to describe the change -# this field accommodate a description without length limits. -# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment. -#description: - -# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc. -component: fleet-server - -# PR URL; optional; the PR number that added the changeset. -# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added. -# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number. -# Please provide it if you are adding a fragment for a different PR. -#pr: https://github.com/owner/repo/1234 - -# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of). -# If not present is automatically filled by the tooling with the issue linked to the PR number. -#issue: https://github.com/owner/repo/1234 diff --git a/docs/release-notes/_snippets/9.2.7/breaking-changes.md b/docs/release-notes/_snippets/9.2.7/breaking-changes.md new file mode 100644 index 0000000000..1c1e535a6b --- /dev/null +++ b/docs/release-notes/_snippets/9.2.7/breaking-changes.md @@ -0,0 +1,3 @@ +## 9.2.7 [fleet-server-9.2.7-breaking-changes] + +_No breaking changes._ diff --git a/docs/release-notes/_snippets/9.2.7/deprecations.md b/docs/release-notes/_snippets/9.2.7/deprecations.md new file mode 100644 index 0000000000..267cce2046 --- /dev/null +++ b/docs/release-notes/_snippets/9.2.7/deprecations.md @@ -0,0 +1,3 @@ +## 9.2.7 [fleet-server-9.2.7-deprecations] + +_No deprecations._ diff --git a/docs/release-notes/_snippets/9.2.7/index.md b/docs/release-notes/_snippets/9.2.7/index.md new file mode 100644 index 0000000000..79b7f78a52 --- /dev/null +++ b/docs/release-notes/_snippets/9.2.7/index.md @@ -0,0 +1,31 @@ +## 9.2.7 [fleet-server-release-notes-9.2.7] + + + +### Features and enhancements [fleet-server-9.2.7-features-enhancements] + + +* Support secrets in agent.download section of policy. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) +* Support secrets in fleet section of policy. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) +* Accept secret references in policies in either inline or path formats. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) + + Elastic Agent policies can contain secret references in one of two formats: inline or path. + With the inline format, the reference looks like this: `<path>: $co.elastic.secret{<secret ref>}`. + With the path format, the reference looks like this: `secrets.<path>.id:<secret ref>`. + This change ensures that Fleet Server accepts secret references in policies in either format. + + + +### Fixes [fleet-server-9.2.7-fixes] + + +* Add support for OTEL secrets handling. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) [#6277](https://github.com/elastic/fleet-server/issues/6277) + + Added functionality to replace secrets in OTEL sections (receivers, exporters, processors, extensions, connectors) of a policy. + +* Fix checkin endpoint compression support. [#6491](https://github.com/elastic/fleet-server/pull/6491) + + Adds support for gzip compressed requests to the checkin endpoint. + +* Fix inaccuracies with openapi spec. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) + diff --git a/docs/release-notes/_snippets/breaking-changes/9.2.md b/docs/release-notes/_snippets/breaking-changes/9.2.md index 7ad8f22e60..a828fed142 100644 --- a/docs/release-notes/_snippets/breaking-changes/9.2.md +++ b/docs/release-notes/_snippets/breaking-changes/9.2.md @@ -1,3 +1,6 @@ +:::{include} /release-notes/_snippets/9.2.7/breaking-changes.md +::: + :::{include} /release-notes/_snippets/9.2.6/breaking-changes.md ::: diff --git a/docs/release-notes/_snippets/deprecations/9.2.md b/docs/release-notes/_snippets/deprecations/9.2.md index cd57b7abce..39878e48ba 100644 --- a/docs/release-notes/_snippets/deprecations/9.2.md +++ b/docs/release-notes/_snippets/deprecations/9.2.md @@ -1,3 +1,6 @@ +:::{include} /release-notes/_snippets/9.2.7/deprecations.md +::: + :::{include} /release-notes/_snippets/9.2.6/deprecations.md ::: diff --git a/docs/release-notes/_snippets/index/9.2.md b/docs/release-notes/_snippets/index/9.2.md index cad84180e2..ddb502bb53 100644 --- a/docs/release-notes/_snippets/index/9.2.md +++ b/docs/release-notes/_snippets/index/9.2.md @@ -1,3 +1,6 @@ +:::{include} /release-notes/_snippets/9.2.7/index.md +::: + :::{include} /release-notes/_snippets/9.2.6/index.md ::: From 92b85770ebceaddba66985d65ad341dd4481e486 Mon Sep 17 00:00:00 2001 From: Pierre HILBERT Date: Wed, 18 Mar 2026 13:50:00 +0100 Subject: [PATCH 2/3] Update PR link --- changelog/9.2.7.yaml | 23 +++++++-------------- docs/release-notes/_snippets/9.2.7/index.md | 10 ++++----- 2 files changed, 12 insertions(+), 21 deletions(-) diff --git a/changelog/9.2.7.yaml b/changelog/9.2.7.yaml index cbf25ca23f..4e001fb27c 100644 --- a/changelog/9.2.7.yaml +++ b/changelog/9.2.7.yaml @@ -5,9 +5,7 @@ entries: description: "Elastic Agent policies can contain secret references in one of two formats: inline or path.\nWith the inline format, the reference looks like this: `: $co.elastic.secret{}`. \nWith the path format, the reference looks like this: `secrets..id:`.\nThis change ensures that Fleet Server accepts secret references in policies in either format.\n" component: fleet-server pr: - - https://github.com/elastic/fleet-server/pull/6581 - - https://github.com/elastic/fleet-server/pull/6592 - - https://github.com/elastic/fleet-server/pull/6597 + - https://github.com/elastic/fleet-server/pull/5852 issue: [] impact: "" action: "" @@ -20,10 +18,9 @@ entries: description: "" component: fleet-server pr: - - https://github.com/elastic/fleet-server/pull/6581 - - https://github.com/elastic/fleet-server/pull/6592 - - https://github.com/elastic/fleet-server/pull/6597 - issue: [] + - https://github.com/elastic/fleet-server/pull/5837 + issue: + - https://github.com/elastic/fleet-server/issues/4470 impact: "" action: "" timestamp: 1764192755 @@ -35,9 +32,7 @@ entries: description: "" component: fleet-server pr: - - https://github.com/elastic/fleet-server/pull/6581 - - https://github.com/elastic/fleet-server/pull/6592 - - https://github.com/elastic/fleet-server/pull/6597 + - https://github.com/elastic/fleet-server/pull/5997 issue: [] impact: "" action: "" @@ -51,9 +46,7 @@ entries: Added functionality to replace secrets in OTEL sections (receivers, exporters, processors, extensions, connectors) of a policy. component: fleet-server pr: - - https://github.com/elastic/fleet-server/pull/6581 - - https://github.com/elastic/fleet-server/pull/6592 - - https://github.com/elastic/fleet-server/pull/6597 + - https://github.com/elastic/fleet-server/pull/6419 issue: - https://github.com/elastic/fleet-server/issues/6277 impact: "" @@ -81,9 +74,7 @@ entries: description: "" component: fleet-server pr: - - https://github.com/elastic/fleet-server/pull/6581 - - https://github.com/elastic/fleet-server/pull/6592 - - https://github.com/elastic/fleet-server/pull/6597 + - https://github.com/elastic/fleet-server/pull/6517 issue: [] impact: "" action: "" diff --git a/docs/release-notes/_snippets/9.2.7/index.md b/docs/release-notes/_snippets/9.2.7/index.md index 79b7f78a52..c6ee025bbb 100644 --- a/docs/release-notes/_snippets/9.2.7/index.md +++ b/docs/release-notes/_snippets/9.2.7/index.md @@ -5,9 +5,9 @@ ### Features and enhancements [fleet-server-9.2.7-features-enhancements] -* Support secrets in agent.download section of policy. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) -* Support secrets in fleet section of policy. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) -* Accept secret references in policies in either inline or path formats. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) +* Support secrets in agent.download section of policy. [#5837](https://github.com/elastic/fleet-server/pull/5837) +* Support secrets in fleet section of policy. [#5997](https://github.com/elastic/fleet-server/pull/5997) +* Accept secret references in policies in either inline or path formats. [#5852](https://github.com/elastic/fleet-server/pull/5852) Elastic Agent policies can contain secret references in one of two formats: inline or path. With the inline format, the reference looks like this: `<path>: $co.elastic.secret{<secret ref>}`. @@ -19,7 +19,7 @@ ### Fixes [fleet-server-9.2.7-fixes] -* Add support for OTEL secrets handling. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) [#6277](https://github.com/elastic/fleet-server/issues/6277) +* Add support for OTEL secrets handling. [#6419](https://github.com/elastic/fleet-server/pull/6419) [#6277](https://github.com/elastic/fleet-server/issues/6277) Added functionality to replace secrets in OTEL sections (receivers, exporters, processors, extensions, connectors) of a policy. @@ -27,5 +27,5 @@ Adds support for gzip compressed requests to the checkin endpoint. -* Fix inaccuracies with openapi spec. [#6581](https://github.com/elastic/fleet-server/pull/6581) [#6592](https://github.com/elastic/fleet-server/pull/6592) [#6597](https://github.com/elastic/fleet-server/pull/6597) +* Fix inaccuracies with openapi spec. [#6517](https://github.com/elastic/fleet-server/pull/6517) From b066e8ad842c1d822959d50973c418bf9c00b825 Mon Sep 17 00:00:00 2001 From: ebeahan Date: Wed, 18 Mar 2026 14:31:19 -0500 Subject: [PATCH 3/3] clean up description --- changelog/9.2.7.yaml | 2 +- docs/release-notes/_snippets/9.2.7/index.md | 8 +------- 2 files changed, 2 insertions(+), 8 deletions(-) diff --git a/changelog/9.2.7.yaml b/changelog/9.2.7.yaml index 4e001fb27c..a674d97009 100644 --- a/changelog/9.2.7.yaml +++ b/changelog/9.2.7.yaml @@ -2,7 +2,7 @@ version: 9.2.7 entries: - kind: enhancement summary: Accept secret references in policies in either inline or path formats - description: "Elastic Agent policies can contain secret references in one of two formats: inline or path.\nWith the inline format, the reference looks like this: `: $co.elastic.secret{}`. \nWith the path format, the reference looks like this: `secrets..id:`.\nThis change ensures that Fleet Server accepts secret references in policies in either format.\n" + description: "" component: fleet-server pr: - https://github.com/elastic/fleet-server/pull/5852 diff --git a/docs/release-notes/_snippets/9.2.7/index.md b/docs/release-notes/_snippets/9.2.7/index.md index c6ee025bbb..b6d2523014 100644 --- a/docs/release-notes/_snippets/9.2.7/index.md +++ b/docs/release-notes/_snippets/9.2.7/index.md @@ -5,16 +5,10 @@ ### Features and enhancements [fleet-server-9.2.7-features-enhancements] -* Support secrets in agent.download section of policy. [#5837](https://github.com/elastic/fleet-server/pull/5837) +* Support secrets in agent.download section of policy. [#5837](https://github.com/elastic/fleet-server/pull/5837) * Support secrets in fleet section of policy. [#5997](https://github.com/elastic/fleet-server/pull/5997) * Accept secret references in policies in either inline or path formats. [#5852](https://github.com/elastic/fleet-server/pull/5852) - Elastic Agent policies can contain secret references in one of two formats: inline or path. - With the inline format, the reference looks like this: `<path>: $co.elastic.secret{<secret ref>}`. - With the path format, the reference looks like this: `secrets.<path>.id:<secret ref>`. - This change ensures that Fleet Server accepts secret references in policies in either format. - - ### Fixes [fleet-server-9.2.7-fixes]