Craig MacKenzie

Since this change looks like it is happening in elastic-agent-system-metrics, which has no mechanism to tie things to a stack release, I would like some way for us to switch...

The least disruptive option is to remove the binaries completely in 9.0 and keep them around on 8.x. If we can I would completely delete the functionbeat source code in...

No, `decompress_gzip_field` still uses' compress/gzip and a standard gzip reader. https://github.com/elastic/beats/blob/4942592a8a272b5355c0be531e5f052b2c7a1d56/libbeat/processors/actions/decompress_gzip_field.go#L22 https://github.com/elastic/beats/blob/4942592a8a272b5355c0be531e5f052b2c7a1d56/libbeat/processors/actions/decompress_gzip_field.go#L108-L111

Yeah using klauspost/compress would probably fix this, but we haven't made the switch in the place that helps this problem yet.

The first step here will be getting a test environment with both Kafka and Kerberos using Active Directory. We can then test if we can fix this by upgrading our...

It is the same as ours, `github.com/IBM/sarama` https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/5427c934ebcad5dfb77bca48e44b063349b6e4f4/internal/kafka/authentication.go#L12

Something that came out of the FIPS work is noticing that some of the packages used to implement Kerberos today use custom cryptography of questionable origin. We should try to...

The active directory work will be blocked on having a VM that supports active directory, captured in: - https://github.com/elastic/ingest-dev/issues/4700 This will additionally unblock supporting active directory for the user that...

I would like to see us evaluate if there is a better way to implement Kerberos, find out how to evaluate Active Directory, and how to test it properly before...

We need some way to test against a real ActiveDirectory setup or we have no way to know if we fixed the problem here.