Merge remote-tracking branch 'origin/main' into lucene_snapshot

Author: elasticsearchmachine

docs/changelog/134893.yaml

@@ -0,0 +1,5 @@
+pr: 134893
+summary: Add trust configuration for cross cluster api keys
+area: Security
+type: enhancement
+issues: []

docs/changelog/135505.yaml

@@ -0,0 +1,6 @@
+pr: 135505
+summary: Address es819 tsdb doc values format performance bug
+area: Codec
+type: bug
+issues:
+ - 135340

docs/reference/query-languages/esql/_snippets/functions/examples/copy_sign.md

@@ -18,28 +18,6 @@ ext {
 
 application {
   mainClass.set(javaMainClass)
-  applicationDefaultJvmArgs = [
-    '--add-exports', 'java.base/sun.security.util=ALL-UNNAMED',
-    '--add-opens', 'java.base/java.lang=ALL-UNNAMED',
-    '--add-opens', 'java.base/java.net=ALL-UNNAMED',
-    '--add-opens', 'java.base/java.net.spi=ALL-UNNAMED',
-    '--add-opens', 'java.base/java.util.concurrent=ALL-UNNAMED',
-    '--add-opens', 'java.base/javax.crypto=ALL-UNNAMED',
-    '--add-opens', 'java.base/javax.security.auth=ALL-UNNAMED',
-    '--add-opens', 'java.base/jdk.internal.logger=ALL-UNNAMED',
-    '--add-opens', 'java.base/sun.nio.ch=ALL-UNNAMED',
-    '--add-opens', 'jdk.management.jfr/jdk.management.jfr=ALL-UNNAMED',
-    '--add-opens', 'java.logging/java.util.logging=ALL-UNNAMED',
-    '--add-opens', 'java.logging/sun.util.logging.internal=ALL-UNNAMED',
-    '--add-opens', 'java.naming/javax.naming.ldap.spi=ALL-UNNAMED',
-    '--add-opens', 'java.rmi/sun.rmi.runtime=ALL-UNNAMED',
-    '--add-opens', 'jdk.dynalink/jdk.dynalink=ALL-UNNAMED',
-    '--add-opens', 'jdk.dynalink/jdk.dynalink.linker=ALL-UNNAMED',
-    '--add-opens', 'java.desktop/sun.awt=ALL-UNNAMED',
-    '--add-opens', 'java.sql.rowset/javax.sql.rowset.spi=ALL-UNNAMED',
-    '--add-opens', 'java.sql/java.sql=ALL-UNNAMED',
-    '--add-opens', 'java.xml.crypto/com.sun.org.apache.xml.internal.security.utils=ALL-UNNAMED'
-  ]
 }
 
 tasks.named("run").configure {

docs/reference/query-languages/esql/_snippets/functions/layout/copy_sign.md

@@ -42,6 +42,11 @@ public boolean isSystemDefault() {
         return configs.stream().allMatch(SslTrustConfig::isSystemDefault);
     }
 
+    @Override
+    public boolean hasExplicitConfig() {
+        return configs.stream().allMatch(SslTrustConfig::hasExplicitConfig);
+    }
+
     @Override
     public X509ExtendedTrustManager createTrustManager() {
         try {

docs/reference/query-languages/esql/kibana/definition/functions/copy_sign.json

@@ -129,4 +129,8 @@ public int hashCode() {
         return Objects.hash(certificateAuthorities);
     }
 
+    @Override
+    public boolean hasExplicitConfig() {
+        return true;
+    }
 }

docs/reference/query-languages/esql/kibana/docs/functions/copy_sign.md

@@ -39,6 +39,13 @@ public interface SslTrustConfig {
      */
     Collection<? extends StoredCertificate> getConfiguredCertificates();
 
+    /**
+     * @return {@code true} if this trust config is based on any explicit trust settings
+     */
+    default boolean hasExplicitConfig() {
+        return false;
+    }
+
     /**
      * @return {@code true} if this trust config is based on the system default truststore
      */