Skip to content

Commit 338c1e9

Browse files
rjernstrjernst
committed
Merge branch 'main' into entitlements/path_setting
2 parents 9a466a9 + 9145ab7 commit 338c1e9

File tree

110 files changed

+1249
-2300
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

110 files changed

+1249
-2300
lines changed

‎.buildkite/pipelines/intake.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ steps:
7676
ES_VERSION:
7777
- "9.0.0"
7878
ES_COMMIT:
79-
- "b2cc9d9b8f00ee621f93ddca07ea9c671aab1578" # update to match last commit before lucene bump
79+
- "10352e57d85505984582616e1e38530d3ec6ca59" # update to match last commit before lucene bump / head of combat-lucene-10-0-0
8080
agents:
8181
provider: gcp
8282
image: family/elasticsearch-ubuntu-2004

‎build-tools-internal/src/main/java/org/elasticsearch/gradle/internal/DockerBase.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ public enum DockerBase {
2222
// Chainguard based wolfi image with latest jdk
2323
// This is usually updated via renovatebot
2424
// spotless:off
25-
WOLFI("docker.elastic.co/wolfi/chainguard-base:latest@sha256:ecd940be9f342ee6173397c48f3df5bb410e95000f8726fd01759b6c39b0beda",
25+
WOLFI("docker.elastic.co/wolfi/chainguard-base:latest@sha256:d74b1fda6b7fee2c90b410df258e005c049e0672fe16d79d00e58f14fb69f90b",
2626
"-wolfi",
2727
"apk"
2828
),

‎build-tools-internal/version.properties‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jna = 5.12.1
1717
netty = 4.1.115.Final
1818
commons_lang3 = 3.9
1919
google_oauth_client = 1.34.1
20-
awsv1sdk = 1.12.270
20+
awsv1sdk = 1.12.746
2121
awsv2sdk = 2.28.13
2222
reactive_streams = 1.0.4
2323

‎docs/changelog/122247.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
pr: 122247
2+
summary: Improve jwt logging on failed auth
3+
area: Authentication
4+
type: bug
5+
issues: []

‎docs/changelog/122431.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
pr: 122431
2+
summary: Upgrade AWS SDK to v1.12.746
3+
area: Snapshot/Restore
4+
type: upgrade
5+
issues: []

‎docs/changelog/122538.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
pr: 122538
2+
summary: Fix `ArrayIndexOutOfBoundsException` in `ShardBulkInferenceActionFilter`
3+
area: Ingest
4+
type: bug
5+
issues: []

‎docs/changelog/122737.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
pr: 122737
2+
summary: Bump json-smart and oauth2-oidc-sdk
3+
area: Authentication
4+
type: upgrade
5+
issues: []

‎gradle/verification-metadata.xml‎

Lines changed: 29 additions & 81 deletions
Original file line numberDiff line numberDiff line change
@@ -89,29 +89,29 @@
8989
<sha256 value="ccc7efe5cd3ce22d6046cafd4d2f8bff5adcb43e0d27da482178fac5daadef81" origin="Generated by Gradle"/>
9090
</artifact>
9191
</component>
92-
<component group="com.amazonaws" name="aws-java-sdk-core" version="1.12.270">
93-
<artifact name="aws-java-sdk-core-1.12.270.jar">
94-
<sha256 value="4e41d9f54606151674fc550e5e6291b0ddf917d55a2a3465a45a4e6ac98c9f8f" origin="Generated by Gradle"/>
92+
<component group="com.amazonaws" name="aws-java-sdk-core" version="1.12.746">
93+
<artifact name="aws-java-sdk-core-1.12.746.jar">
94+
<sha256 value="798fd30dafcf6816e760ad8aef8b3f09c43351ed2e166993bddc4527dbafb0be" origin="Generated by Gradle"/>
9595
</artifact>
9696
</component>
97-
<component group="com.amazonaws" name="aws-java-sdk-ec2" version="1.12.270">
98-
<artifact name="aws-java-sdk-ec2-1.12.270.jar">
99-
<sha256 value="faadf443751822e205338e80d2cea5eabd6373c1c3cef6348c24809ca82a9dd0" origin="Generated by Gradle"/>
97+
<component group="com.amazonaws" name="aws-java-sdk-ec2" version="1.12.746">
98+
<artifact name="aws-java-sdk-ec2-1.12.746.jar">
99+
<sha256 value="cec22d57e05ed75417b1342e9dd468c6fe7f2fab97c626c065d6495e44d732ad" origin="Generated by Gradle"/>
100100
</artifact>
101101
</component>
102-
<component group="com.amazonaws" name="aws-java-sdk-s3" version="1.12.270">
103-
<artifact name="aws-java-sdk-s3-1.12.270.jar">
104-
<sha256 value="41bbea44bac7cfce3898e2e598a17526984337e265f6b16814839c17168a570e" origin="Generated by Gradle"/>
102+
<component group="com.amazonaws" name="aws-java-sdk-s3" version="1.12.746">
103+
<artifact name="aws-java-sdk-s3-1.12.746.jar">
104+
<sha256 value="dcd839802c71ffc4d3e6bebc8769a2149bc423baf95f3e6c8214f9c91536bc38" origin="Generated by Gradle"/>
105105
</artifact>
106106
</component>
107-
<component group="com.amazonaws" name="aws-java-sdk-sts" version="1.12.270">
108-
<artifact name="aws-java-sdk-sts-1.12.270.jar">
109-
<sha256 value="8cf2d3705381b81808c2e75a5e25a7097385b121ef15c001b18fde3d79657571" origin="Generated by Gradle"/>
107+
<component group="com.amazonaws" name="aws-java-sdk-sts" version="1.12.746">
108+
<artifact name="aws-java-sdk-sts-1.12.746.jar">
109+
<sha256 value="2916c28f9a6b6ade40c7e2ffdea3788b198a98b2b16830e02a24ec49fc0fb06f" origin="Generated by Gradle"/>
110110
</artifact>
111111
</component>
112-
<component group="com.amazonaws" name="jmespath-java" version="1.12.270">
113-
<artifact name="jmespath-java-1.12.270.jar">
114-
<sha256 value="515d1afb0cd0176630c0707acabd4a3e48424ea938b89359774f61a24b6450f1" origin="Generated by Gradle"/>
112+
<component group="com.amazonaws" name="jmespath-java" version="1.12.746">
113+
<artifact name="jmespath-java-1.12.746.jar">
114+
<sha256 value="d4239a7a1bfacbb9cd1f0e48a46ac95960ab7942c6fbb41ea825161efea72351" origin="Generated by Gradle"/>
115115
</artifact>
116116
</component>
117117
<component group="com.avast.gradle" name="gradle-docker-compose-plugin" version="0.17.5">
@@ -984,36 +984,19 @@
984984
<sha256 value="e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31" origin="Generated by Gradle"/>
985985
</artifact>
986986
</component>
987+
<component group="com.nimbusds" name="nimbus-jose-jwt" version="10.0.1">
988+
<artifact name="nimbus-jose-jwt-10.0.1.jar">
989+
<sha256 value="f28dbd9ab128324f05050d76b78469d3a9cd83e0319aabc68d1c276e3923e13a" origin="Generated by Gradle"/>
990+
</artifact>
991+
</component>
987992
<component group="com.nimbusds" name="nimbus-jose-jwt" version="4.41.1">
988993
<artifact name="nimbus-jose-jwt-4.41.1.jar">
989994
<sha256 value="fbfd0d5f2b2f86758b821daa5e79b5d7c965edd9dc1b2cc80b515df1c6ddc22d" origin="Generated by Gradle"/>
990995
</artifact>
991996
</component>
992-
<component group="com.nimbusds" name="nimbus-jose-jwt" version="9.37.3">
993-
<artifact name="nimbus-jose-jwt-9.37.3.jar">
994-
<sha256 value="12ae4a3a260095d7aeba2adea7ae396e8b9570db8b7b409e09a824c219cc0444" origin="Generated by Gradle">
995-
<also-trust value="afc63b689d881439b95f343b1dca750391edac63b87392be4d90d19c94ccafbe"/>
996-
</sha256>
997-
</artifact>
998-
</component>
999-
<component group="com.nimbusds" name="nimbus-jose-jwt" version="9.8.1">
1000-
<artifact name="nimbus-jose-jwt-9.8.1.jar">
1001-
<sha256 value="7664cf8c6f2adadf600287812b32878277beda54912eab9d4c2932cd50cb704a" origin="Generated by Gradle"/>
1002-
</artifact>
1003-
</component>
1004-
<component group="com.nimbusds" name="oauth2-oidc-sdk" version="11.10.1">
1005-
<artifact name="oauth2-oidc-sdk-11.10.1.jar">
1006-
<sha256 value="9e51b2c17503cdd3eb97f41491c712aff7783bb3c67185d789f44ccf2a603b26" origin="Generated by Gradle"/>
1007-
</artifact>
1008-
</component>
1009-
<component group="com.nimbusds" name="oauth2-oidc-sdk" version="11.9.1">
1010-
<artifact name="oauth2-oidc-sdk-11.9.1.jar">
1011-
<sha256 value="0820c9690966304d075347b88e81ae490213440fc4d2c84f3d370d41941b2b9c" origin="Generated by Gradle"/>
1012-
</artifact>
1013-
</component>
1014-
<component group="com.nimbusds" name="oauth2-oidc-sdk" version="9.37">
1015-
<artifact name="oauth2-oidc-sdk-9.37.jar">
1016-
<sha256 value="44a04bbed5ae3f6d198aa73ee6b545c476e528ec1a267ef3e9f7033f886dd6fe" origin="Generated by Gradle"/>
997+
<component group="com.nimbusds" name="oauth2-oidc-sdk" version="11.22.2">
998+
<artifact name="oauth2-oidc-sdk-11.22.2.jar">
999+
<sha256 value="64fab42f17bf8e0efb193dd34da716ef7abb7515234036119df1776b808dc066" origin="Generated by Gradle"/>
10171000
</artifact>
10181001
</component>
10191002
<component group="com.perforce" name="p4java" version="2015.2.1365273">
@@ -1779,34 +1762,24 @@
17791762
<sha256 value="0972bbc99437c4163acd09b630e6c77eab4cfab8a9594621c95466c0c6645396" origin="Generated by Gradle"/>
17801763
</artifact>
17811764
</component>
1782-
<component group="net.minidev" name="accessors-smart" version="2.5.0">
1783-
<artifact name="accessors-smart-2.5.0.jar">
1784-
<sha256 value="12314fc6881d66a413fd66370787adba16e504fbf7e138690b0f3952e3fbd321" origin="Generated by Gradle"/>
1765+
<component group="net.minidev" name="accessors-smart" version="2.5.2">
1766+
<artifact name="accessors-smart-2.5.2.jar">
1767+
<sha256 value="9b8a7bc43861d6156c021166d941fb7dddbe4463e2fa5ee88077e4b01452a836" origin="Generated by Gradle"/>
17851768
</artifact>
17861769
</component>
17871770
<component group="net.minidev" name="json-smart" version="2.3">
17881771
<artifact name="json-smart-2.3.jar">
17891772
<sha256 value="903f48c8aa4c3f6426440b8d32de89fa1dc23b1169abde25e4e1d068aa67708b" origin="Generated by Gradle"/>
17901773
</artifact>
17911774
</component>
1792-
<component group="net.minidev" name="json-smart" version="2.4.10">
1793-
<artifact name="json-smart-2.4.10.jar">
1794-
<sha256 value="70cab5e9488630dc631b1fc6e7fa550d95cddd19ba14db39ceca7cabfbd4e5ae" origin="Generated by Gradle"/>
1795-
</artifact>
1796-
</component>
17971775
<component group="net.minidev" name="json-smart" version="2.4.2">
17981776
<artifact name="json-smart-2.4.2.jar">
17991777
<sha256 value="64072f56d9dff5040b2acec477c5d5e6bcebfc88c508f12acb26072d07942146" origin="Generated by Gradle"/>
18001778
</artifact>
18011779
</component>
1802-
<component group="net.minidev" name="json-smart" version="2.5.0">
1803-
<artifact name="json-smart-2.5.0.jar">
1804-
<sha256 value="432b9e545848c4141b80717b26e367f83bf33f19250a228ce75da6e967da2bc7" origin="Generated by Gradle"/>
1805-
</artifact>
1806-
</component>
1807-
<component group="net.minidev" name="json-smart" version="2.5.1">
1808-
<artifact name="json-smart-2.5.1.jar">
1809-
<sha256 value="86c0c189581b79b57b0719f443a724e9f628ffbb9eef645cf79194f5973a1001" origin="Generated by Gradle"/>
1780+
<component group="net.minidev" name="json-smart" version="2.5.2">
1781+
<artifact name="json-smart-2.5.2.jar">
1782+
<sha256 value="4fbdedb0105cedc7f766b95c297d2e88fb6a560da48f3bbaa0cc538ea8b7bf71" origin="Generated by Gradle"/>
18101783
</artifact>
18111784
</component>
18121785
<component group="net.nextencia" name="rrdiagram" version="0.9.4">
@@ -4408,31 +4381,6 @@
44084381
<sha256 value="ca5b8d11569e53921b0e3486469e7c674361c79845dad3d514f38ab6e0c8c10a" origin="Generated by Gradle"/>
44094382
</artifact>
44104383
</component>
4411-
<component group="org.ow2.asm" name="asm" version="9.2">
4412-
<artifact name="asm-9.2.jar">
4413-
<sha256 value="b9d4fe4d71938df38839f0eca42aaaa64cf8b313d678da036f0cb3ca199b47f5" origin="Generated by Gradle"/>
4414-
</artifact>
4415-
</component>
4416-
<component group="org.ow2.asm" name="asm" version="9.3">
4417-
<artifact name="asm-9.3.jar">
4418-
<sha256 value="1263369b59e29c943918de11d6d6152e2ec6085ce63e5710516f8c67d368e4bc" origin="Generated by Gradle"/>
4419-
</artifact>
4420-
</component>
4421-
<component group="org.ow2.asm" name="asm" version="9.4">
4422-
<artifact name="asm-9.4.jar">
4423-
<sha256 value="39d0e2b3dc45af65a09b097945750a94a126e052e124f93468443a1d0e15f381" origin="Generated by Gradle"/>
4424-
</artifact>
4425-
</component>
4426-
<component group="org.ow2.asm" name="asm" version="9.5">
4427-
<artifact name="asm-9.5.jar">
4428-
<sha256 value="b62e84b5980729751b0458c534cf1366f727542bb8d158621335682a460f0353" origin="Generated by Gradle"/>
4429-
</artifact>
4430-
</component>
4431-
<component group="org.ow2.asm" name="asm" version="9.6">
4432-
<artifact name="asm-9.6.jar">
4433-
<sha256 value="3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1" origin="Generated by Gradle"/>
4434-
</artifact>
4435-
</component>
44364384
<component group="org.ow2.asm" name="asm" version="9.7.1">
44374385
<artifact name="asm-9.7.1.jar">
44384386
<sha256 value="8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281" origin="Generated by Gradle"/>

‎libs/entitlement/bridge/src/main/java/org/elasticsearch/entitlement/bridge/EntitlementChecker.java‎

Lines changed: 71 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,9 @@
1010
package org.elasticsearch.entitlement.bridge;
1111

1212
import java.io.File;
13+
import java.io.FileDescriptor;
14+
import java.io.FileFilter;
15+
import java.io.FilenameFilter;
1316
import java.io.InputStream;
1417
import java.io.PrintStream;
1518
import java.io.PrintWriter;
@@ -512,6 +515,12 @@ public interface EntitlementChecker {
512515
//
513516

514517
// old io (ie File)
518+
void check$java_io_File$canExecute(Class<?> callerClass, File file);
519+
520+
void check$java_io_File$canRead(Class<?> callerClass, File file);
521+
522+
void check$java_io_File$canWrite(Class<?> callerClass, File file);
523+
515524
void check$java_io_File$createNewFile(Class<?> callerClass, File file);
516525

517526
void check$java_io_File$$createTempFile(Class<?> callerClass, String prefix, String suffix, File directory);
@@ -520,6 +529,28 @@ public interface EntitlementChecker {
520529

521530
void check$java_io_File$deleteOnExit(Class<?> callerClass, File file);
522531

532+
void check$java_io_File$exists(Class<?> callerClass, File file);
533+
534+
void check$java_io_File$isDirectory(Class<?> callerClass, File file);
535+
536+
void check$java_io_File$isFile(Class<?> callerClass, File file);
537+
538+
void check$java_io_File$isHidden(Class<?> callerClass, File file);
539+
540+
void check$java_io_File$lastModified(Class<?> callerClass, File file);
541+
542+
void check$java_io_File$length(Class<?> callerClass, File file);
543+
544+
void check$java_io_File$list(Class<?> callerClass, File file);
545+
546+
void check$java_io_File$list(Class<?> callerClass, File file, FilenameFilter filter);
547+
548+
void check$java_io_File$listFiles(Class<?> callerClass, File file);
549+
550+
void check$java_io_File$listFiles(Class<?> callerClass, File file, FileFilter filter);
551+
552+
void check$java_io_File$listFiles(Class<?> callerClass, File file, FilenameFilter filter);
553+
523554
void check$java_io_File$mkdir(Class<?> callerClass, File file);
524555

525556
void check$java_io_File$mkdirs(Class<?> callerClass, File file);
@@ -542,14 +573,54 @@ public interface EntitlementChecker {
542573

543574
void check$java_io_File$setWritable(Class<?> callerClass, File file, boolean writable, boolean ownerOnly);
544575

576+
void check$java_io_FileInputStream$(Class<?> callerClass, File file);
577+
578+
void check$java_io_FileInputStream$(Class<?> callerClass, FileDescriptor fd);
579+
580+
void check$java_io_FileInputStream$(Class<?> callerClass, String name);
581+
545582
void check$java_io_FileOutputStream$(Class<?> callerClass, File file);
546583

547584
void check$java_io_FileOutputStream$(Class<?> callerClass, File file, boolean append);
548585

586+
void check$java_io_FileOutputStream$(Class<?> callerClass, FileDescriptor fd);
587+
549588
void check$java_io_FileOutputStream$(Class<?> callerClass, String name);
550589

551590
void check$java_io_FileOutputStream$(Class<?> callerClass, String name, boolean append);
552591

592+
void check$java_io_FileReader$(Class<?> callerClass, File file);
593+
594+
void check$java_io_FileReader$(Class<?> callerClass, File file, Charset charset);
595+
596+
void check$java_io_FileReader$(Class<?> callerClass, FileDescriptor fd);
597+
598+
void check$java_io_FileReader$(Class<?> callerClass, String name);
599+
600+
void check$java_io_FileReader$(Class<?> callerClass, String name, Charset charset);
601+
602+
void check$java_io_FileWriter$(Class<?> callerClass, File file);
603+
604+
void check$java_io_FileWriter$(Class<?> callerClass, File file, boolean append);
605+
606+
void check$java_io_FileWriter$(Class<?> callerClass, File file, Charset charset);
607+
608+
void check$java_io_FileWriter$(Class<?> callerClass, File file, Charset charset, boolean append);
609+
610+
void check$java_io_FileWriter$(Class<?> callerClass, FileDescriptor fd);
611+
612+
void check$java_io_FileWriter$(Class<?> callerClass, String name);
613+
614+
void check$java_io_FileWriter$(Class<?> callerClass, String name, boolean append);
615+
616+
void check$java_io_FileWriter$(Class<?> callerClass, String name, Charset charset);
617+
618+
void check$java_io_FileWriter$(Class<?> callerClass, String name, Charset charset, boolean append);
619+
620+
void check$java_io_RandomAccessFile$(Class<?> callerClass, String name, String mode);
621+
622+
void check$java_io_RandomAccessFile$(Class<?> callerClass, File file, String mode);
623+
553624
void check$java_util_Scanner$(Class<?> callerClass, File source);
554625

555626
void check$java_util_Scanner$(Class<?> callerClass, File source, String charsetName);

0 commit comments

Comments
 (0)