search

elastic / elasticsearch

Free and Open Source, Distributed, RESTful Search Engine
https://www.elastic.co/products/elasticsearch
Other
69.65k stars 24.65k forks source link

[CI] SecurityScrollTests testScrollIsPerUser failing #113338

Open elasticsearchmachine opened 3 days ago

elasticsearchmachine commented 3 days ago

Build Scans:

Reproduction Line:

./gradlew ":x-pack:plugin:security:internalClusterTest" --tests "org.elasticsearch.xpack.security.authz.SecurityScrollTests.testScrollIsPerUser" -Dtests.seed=BE95A48E7AD3013F -Dtests.locale=nl-SR -Dtests.timezone=Europe/Sofia -Druntime.java=21

Applicable branches: main

Reproduces locally?: N/A

Failure History: See dashboard&_a=(controlGroupInput:(chainingSystem:HIERARCHICAL,controlStyle:twoLine,ignoreParentSettings:(ignoreFilters:!f,ignoreQuery:!f,ignoreTimerange:!f,ignoreValidations:!t),panels:('0c0c9cb8-ccd2-45c6-9b13-96bac4abc542':(explicitInput:(dataViewId:fbbdc689-be23-4b3d-8057-aa402e9ed0c5,enhancements:(),fieldName:task.keyword,grow:!t,id:'0c0c9cb8-ccd2-45c6-9b13-96bac4abc542',searchTechnique:wildcard,selectedOptions:!(),singleSelect:!t,title:'Gradle%20Task',width:medium),grow:!t,order:0,type:optionsListControl,width:small),'144933da-5c1b-4257-a969-7f43455a7901':(explicitInput:(dataViewId:fbbdc689-be23-4b3d-8057-aa402e9ed0c5,enhancements:(),fieldName:name.keyword,grow:!t,id:'144933da-5c1b-4257-a969-7f43455a7901',searchTechnique:wildcard,selectedOptions:!('testScrollIsPerUser'),title:Test,width:medium),grow:!t,order:2,type:optionsListControl,width:medium),'4e6ad9d6-6fdc-4fcc-bf1a-aa6ca79e0850':(explicitInput:(dataViewId:fbbdc689-be23-4b3d-8057-aa402e9ed0c5,enhancements:(),fieldName:className.keyword,grow:!t,id:'4e6ad9d6-6fdc-4fcc-bf1a-aa6ca79e0850',searchTechnique:wildcard,selectedOptions:!('org.elasticsearch.xpack.security.authz.SecurityScrollTests'),title:Suite,width:medium),grow:!t,order:1,type:optionsListControl,width:medium)))))

Failure Message:

java.lang.AssertionError: failure in bulk execution:
[0]: index [foo], id [bogus_doc_ẤỄẅỲṹỜẂa2], message [org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/auto_create] is unauthorized for user [_system] with effective roles [_system], this action is granted by the index privileges [auto_configure,create_index,manage,all]]
[1]: index [foo], id [bogus_doc_ゲヅリヽォデヰa3], message [org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/auto_create] is unauthorized for user [_system] with effective roles [_system], this action is granted by the index privileges [auto_configure,create_index,manage,all]]
[2]: index [foo], id [null], message [org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/auto_create] is unauthorized for user [_system] with effective roles [_system], this action is granted by the index privileges [auto_configure,create_index,manage,all]]
[3]: index [foo], id [null], message [org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/auto_create] is unauthorized for user [_system] with effective roles [_system], this action is granted by the index privileges [auto_configure,create_index,manage,all]]
[4]: index [foo], id [null], message [org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/auto_create] is unauthorized for user [_system] with effective roles [_system], this action is granted by the index privileges [auto_configure,create_index,manage,all]]
[5]: index [foo], id [bogus_doc_ퟠퟬ퟽퟊ힱퟠퟛa1], message [org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/auto_create] is unauthorized for user [_system] with effective roles [_system], this action is granted by the index privileges [auto_configure,create_index,manage,all]]
Expected: <false>
     but: was <true>

Issue Reasons:

Note: This issue was created using new test triage automation. Please report issues or feedback to es-delivery.

elasticsearchmachine commented 3 days ago

This has been muted on branch main

Mute Reasons:

Build Scans:

elasticsearchmachine commented 3 days ago

Pinging @elastic/es-search (Team:Search)

elasticsearchmachine commented 2 days ago

Pinging @elastic/es-security (Team:Security)

jfreden commented 8 hours ago

@n1v0lg is this fixed by https://github.com/elastic/elasticsearch/pull/112924 ?

n1v0lg commented 7 hours ago

Hm no, tis unrelated I believe