Entitlements from manual test runs

Author: prdoyle

libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java

@@ -130,7 +130,7 @@ private static PolicyManager createPolicyManager() {
                 ),
                 new Scope("org.apache.httpcomponents.httpclient", List.of(new OutboundNetworkEntitlement())),
                 new Scope("io.netty.transport", List.of(new InboundNetworkEntitlement(), new OutboundNetworkEntitlement())),
-                new Scope("org.apache.lucene.core", List.of(new LoadNativeLibrariesEntitlement())),
+                new Scope("org.apache.lucene.core", List.of(new LoadNativeLibrariesEntitlement(), new ManageThreadsEntitlement())),
                 new Scope("org.elasticsearch.nativeaccess", List.of(new LoadNativeLibrariesEntitlement()))
             )
         );

modules/reindex/src/main/plugin-metadata/entitlement-policy.yaml

@@ -1,2 +1,3 @@
 ALL-UNNAMED:
+  - manage_threads
   - outbound_network

modules/repository-s3/src/main/plugin-metadata/entitlement-policy.yaml

@@ -1,2 +1,3 @@
 ALL-UNNAMED:
+  - manage_threads
   - outbound_network

plugins/repository-hdfs/src/main/plugin-metadata/entitlement-policy.yaml

@@ -1,4 +1,5 @@
 ALL-UNNAMED:
+  - manage_threads
   - outbound_network
   - write_system_properties:
       properties:

x-pack/plugin/core/src/main/plugin-metadata/entitlement-policy.yaml

@@ -1,7 +1,11 @@
 org.apache.httpcomponents.httpclient:
   - outbound_network # For SamlRealm
+  - manage_threads
 org.apache.httpcomponents.httpcore.nio:
   - outbound_network
+  - manage_threads
+org.apache.httpcomponents.httpasyncclient:
+  - manage_threads
 unboundid.ldapsdk:
   - write_system_properties:
       properties:

x-pack/plugin/ml/src/main/plugin-metadata/entitlement-policy.yaml

@@ -0,0 +1,2 @@
+org.elasticsearch.ml:
+  - manage_threads

x-pack/plugin/security/src/main/plugin-metadata/entitlement-policy.yaml

@@ -1,9 +1,11 @@
 org.elasticsearch.security:
   - set_https_connection_properties # for CommandLineHttpClient
 io.netty.transport:
+  - manage_threads
   - inbound_network
   - outbound_network
 io.netty.common:
+  - manage_threads
   - inbound_network
   - outbound_network
 org.opensaml.xmlsec.impl:

x-pack/plugin/watcher/src/main/plugin-metadata/entitlement-policy.yaml

@@ -0,0 +1,2 @@
+ALL-UNNAMED:
+  - manage_threads