From 58bc164ba0fa37dbc788bf245d586834d1e2c1d0 Mon Sep 17 00:00:00 2001 From: Moritz Mack Date: Tue, 18 Feb 2025 13:32:05 +0100 Subject: [PATCH 1/2] [Entitlements] Add missing entitlements for trust store (#122797) Add missing entitlements for trust store if running in fips mode. Fixes #122546, fixes #122569, fixes #122568, fixes #122680, fixes #122566 (cherry picked from commit 87c58ff93f809227888af4ec912935e1515bed31) # Conflicts: # muted-tests.yml --- .../EntitlementInitialization.java | 144 +++++---- muted-tests.yml | 282 ++++++++++++++++++ .../plugin-metadata/entitlement-policy.yaml | 3 + 3 files changed, 364 insertions(+), 65 deletions(-) diff --git a/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java b/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java index 5be54e0491828..8b1721a58a4f6 100644 --- a/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java +++ b/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java @@ -53,6 +53,7 @@ import java.nio.file.spi.FileSystemProvider; import java.util.ArrayList; import java.util.Arrays; +import java.util.Collections; import java.util.HashMap; import java.util.List; import java.util.Map; @@ -137,76 +138,84 @@ private static PolicyManager createPolicyManager() { var pathLookup = new PathLookup(getUserHome(), bootstrapArgs.configDir(), bootstrapArgs.dataDirs(), bootstrapArgs.tempDir()); Path logsDir = EntitlementBootstrap.bootstrapArgs().logsDir(); - // TODO(ES-10031): Decide what goes in the elasticsearch default policy and extend it - var serverPolicy = new Policy( - "server", - List.of( - new Scope("org.elasticsearch.base", List.of(new CreateClassLoaderEntitlement())), - new Scope("org.elasticsearch.xcontent", List.of(new CreateClassLoaderEntitlement())), - new Scope( - "org.elasticsearch.server", - List.of( - new ExitVMEntitlement(), - new ReadStoreAttributesEntitlement(), - new CreateClassLoaderEntitlement(), - new InboundNetworkEntitlement(), - new OutboundNetworkEntitlement(), - new LoadNativeLibrariesEntitlement(), - new ManageThreadsEntitlement(), - new FilesEntitlement( - Stream.concat( - Stream.of( - FileData.ofPath(bootstrapArgs.tempDir(), READ_WRITE), - FileData.ofPath(bootstrapArgs.configDir(), READ), - FileData.ofPath(bootstrapArgs.logsDir(), READ_WRITE), - // OS release on Linux - FileData.ofPath(Path.of("/etc/os-release"), READ), - FileData.ofPath(Path.of("/etc/system-release"), READ), - FileData.ofPath(Path.of("/usr/lib/os-release"), READ), - // read max virtual memory areas - FileData.ofPath(Path.of("/proc/sys/vm/max_map_count"), READ), - FileData.ofPath(Path.of("/proc/meminfo"), READ), - // load averages on Linux - FileData.ofPath(Path.of("/proc/loadavg"), READ), - // control group stats on Linux. cgroup v2 stats are in an unpredicable - // location under `/sys/fs/cgroup`, so unfortunately we have to allow - // read access to the entire directory hierarchy. - FileData.ofPath(Path.of("/proc/self/cgroup"), READ), - FileData.ofPath(Path.of("/sys/fs/cgroup/"), READ), - // // io stats on Linux - FileData.ofPath(Path.of("/proc/self/mountinfo"), READ), - FileData.ofPath(Path.of("/proc/diskstats"), READ) - ), - Arrays.stream(bootstrapArgs.dataDirs()).map(d -> FileData.ofPath(d, READ)) - ).toList() - ) - ) - ), - new Scope("org.apache.httpcomponents.httpclient", List.of(new OutboundNetworkEntitlement())), - new Scope("io.netty.transport", List.of(new InboundNetworkEntitlement(), new OutboundNetworkEntitlement())), - new Scope( - "org.apache.lucene.core", - List.of( - new LoadNativeLibrariesEntitlement(), - new ManageThreadsEntitlement(), - new FilesEntitlement( - Stream.concat( - Stream.of(FileData.ofPath(bootstrapArgs.configDir(), READ)), - Arrays.stream(bootstrapArgs.dataDirs()).map(d -> FileData.ofPath(d, READ_WRITE)) - ).toList() - ) + List serverScopes = new ArrayList<>(); + Collections.addAll( + serverScopes, + new Scope("org.elasticsearch.base", List.of(new CreateClassLoaderEntitlement())), + new Scope("org.elasticsearch.xcontent", List.of(new CreateClassLoaderEntitlement())), + new Scope( + "org.elasticsearch.server", + List.of( + new ExitVMEntitlement(), + new ReadStoreAttributesEntitlement(), + new CreateClassLoaderEntitlement(), + new InboundNetworkEntitlement(), + new OutboundNetworkEntitlement(), + new LoadNativeLibrariesEntitlement(), + new ManageThreadsEntitlement(), + new FilesEntitlement( + Stream.concat( + Stream.of( + FileData.ofPath(bootstrapArgs.tempDir(), READ_WRITE), + FileData.ofPath(bootstrapArgs.configDir(), READ), + FileData.ofPath(bootstrapArgs.logsDir(), READ_WRITE), + // OS release on Linux + FileData.ofPath(Path.of("/etc/os-release"), READ), + FileData.ofPath(Path.of("/etc/system-release"), READ), + FileData.ofPath(Path.of("/usr/lib/os-release"), READ), + // read max virtual memory areas + FileData.ofPath(Path.of("/proc/sys/vm/max_map_count"), READ), + FileData.ofPath(Path.of("/proc/meminfo"), READ), + // load averages on Linux + FileData.ofPath(Path.of("/proc/loadavg"), READ), + // control group stats on Linux. cgroup v2 stats are in an unpredicable + // location under `/sys/fs/cgroup`, so unfortunately we have to allow + // read access to the entire directory hierarchy. + FileData.ofPath(Path.of("/proc/self/cgroup"), READ), + FileData.ofPath(Path.of("/sys/fs/cgroup/"), READ), + // // io stats on Linux + FileData.ofPath(Path.of("/proc/self/mountinfo"), READ), + FileData.ofPath(Path.of("/proc/diskstats"), READ) + ), + Arrays.stream(bootstrapArgs.dataDirs()).map(d -> FileData.ofPath(d, READ)) + ).toList() ) - ), - new Scope("org.apache.logging.log4j.core", List.of(new ManageThreadsEntitlement())), - new Scope( - "org.elasticsearch.nativeaccess", - List.of( - new LoadNativeLibrariesEntitlement(), - new FilesEntitlement(List.of(FileData.ofRelativePath(Path.of(""), FilesEntitlement.BaseDir.DATA, READ_WRITE))) + ) + ), + new Scope("org.apache.httpcomponents.httpclient", List.of(new OutboundNetworkEntitlement())), + new Scope("io.netty.transport", List.of(new InboundNetworkEntitlement(), new OutboundNetworkEntitlement())), + new Scope( + "org.apache.lucene.core", + List.of( + new LoadNativeLibrariesEntitlement(), + new ManageThreadsEntitlement(), + new FilesEntitlement( + Stream.concat( + Stream.of(FileData.ofPath(bootstrapArgs.configDir(), READ)), + Arrays.stream(bootstrapArgs.dataDirs()).map(d -> FileData.ofPath(d, READ_WRITE)) + ).toList() ) ) + ), + new Scope("org.apache.logging.log4j.core", List.of(new ManageThreadsEntitlement())), + new Scope( + "org.elasticsearch.nativeaccess", + List.of( + new LoadNativeLibrariesEntitlement(), + new FilesEntitlement(List.of(FileData.ofRelativePath(Path.of(""), FilesEntitlement.BaseDir.DATA, READ_WRITE))) + ) ) ); + + Path trustStorePath = trustStorePath(); + if (trustStorePath != null) { + serverScopes.add( + new Scope("org.bouncycastle.fips.tls", List.of(new FilesEntitlement(List.of(FileData.ofPath(trustStorePath, READ))))) + ); + } + + // TODO(ES-10031): Decide what goes in the elasticsearch default policy and extend it + var serverPolicy = new Policy("server", serverScopes); // agents run without a module, so this is a special hack for the apm agent // this should be removed once https://github.com/elastic/elasticsearch/issues/109335 is completed List agentEntitlements = List.of(new CreateClassLoaderEntitlement(), new ManageThreadsEntitlement()); @@ -230,6 +239,11 @@ private static Path getUserHome() { return PathUtils.get(userHome); } + private static Path trustStorePath() { + String trustStore = System.getProperty("javax.net.ssl.trustStore"); + return trustStore != null ? Path.of(trustStore) : null; + } + private static Stream fileSystemProviderChecks() throws ClassNotFoundException, NoSuchMethodException { var fileSystemProviderClass = FileSystems.getDefault().provider().getClass(); diff --git a/muted-tests.yml b/muted-tests.yml index 49a4b852e09cc..f64607c3bc431 100644 --- a/muted-tests.yml +++ b/muted-tests.yml @@ -247,6 +247,7 @@ tests: - class: org.elasticsearch.xpack.inference.InferenceRestIT method: test {p0=inference/30_semantic_text_inference_bwc/Calculates embeddings using the default ELSER 2 endpoint} issue: https://github.com/elastic/elasticsearch/issues/117349 +<<<<<<< HEAD - class: org.elasticsearch.search.basic.SearchWithRandomDisconnectsIT method: testSearchWithRandomDisconnects issue: https://github.com/elastic/elasticsearch/issues/116175 @@ -256,6 +257,287 @@ tests: - class: org.elasticsearch.discovery.ClusterDisruptionIT method: testAckedIndexing issue: https://github.com/elastic/elasticsearch/issues/117024 +======= +- class: org.elasticsearch.xpack.test.rest.XPackRestIT + method: test {p0=transform/transforms_reset/Test reset running transform} + issue: https://github.com/elastic/elasticsearch/issues/117473 +- class: org.elasticsearch.test.rest.yaml.CcsCommonYamlTestSuiteIT + method: test {p0=search.highlight/50_synthetic_source/text multi unified from vectors} + issue: https://github.com/elastic/elasticsearch/issues/117815 +- class: org.elasticsearch.xpack.ml.integration.RegressionIT + method: testTwoJobsWithSameRandomizeSeedUseSameTrainingSet + issue: https://github.com/elastic/elasticsearch/issues/117805 +- class: org.elasticsearch.packaging.test.ArchiveTests + method: test44AutoConfigurationNotTriggeredOnNotWriteableConfDir + issue: https://github.com/elastic/elasticsearch/issues/118208 +- class: org.elasticsearch.packaging.test.ArchiveTests + method: test51AutoConfigurationWithPasswordProtectedKeystore + issue: https://github.com/elastic/elasticsearch/issues/118212 +- class: org.elasticsearch.datastreams.DataStreamsClientYamlTestSuiteIT + method: test {p0=data_stream/120_data_streams_stats/Multiple data stream} + issue: https://github.com/elastic/elasticsearch/issues/118217 +- class: org.elasticsearch.xpack.searchablesnapshots.RetrySearchIntegTests + method: testSearcherId + issue: https://github.com/elastic/elasticsearch/issues/118374 +- class: org.elasticsearch.xpack.ccr.rest.ShardChangesRestIT + method: testShardChangesNoOperation + issue: https://github.com/elastic/elasticsearch/issues/118800 +- class: org.elasticsearch.cluster.service.MasterServiceTests + method: testThreadContext + issue: https://github.com/elastic/elasticsearch/issues/118914 +- class: org.elasticsearch.xpack.security.authc.ldap.ActiveDirectoryRunAsIT + issue: https://github.com/elastic/elasticsearch/issues/115727 +- class: org.elasticsearch.index.mapper.AbstractShapeGeometryFieldMapperTests + method: testCartesianBoundsBlockLoader + issue: https://github.com/elastic/elasticsearch/issues/119201 +- class: org.elasticsearch.xpack.test.rest.XPackRestIT + method: test {p0=transform/transforms_start_stop/Test start/stop/start transform} + issue: https://github.com/elastic/elasticsearch/issues/119508 +- class: org.elasticsearch.smoketest.MlWithSecurityIT + method: test {yaml=ml/sparse_vector_search/Test sparse_vector search with query vector and pruning config} + issue: https://github.com/elastic/elasticsearch/issues/119548 +- class: org.elasticsearch.xpack.ml.integration.ForecastIT + method: testOverflowToDisk + issue: https://github.com/elastic/elasticsearch/issues/117740 +- class: org.elasticsearch.xpack.security.authc.ldap.MultiGroupMappingIT + issue: https://github.com/elastic/elasticsearch/issues/119599 +- class: org.elasticsearch.multi_cluster.MultiClusterYamlTestSuiteIT + issue: https://github.com/elastic/elasticsearch/issues/119983 +- class: org.elasticsearch.xpack.test.rest.XPackRestIT + method: test {p0=transform/transforms_unattended/Test unattended put and start} + issue: https://github.com/elastic/elasticsearch/issues/120019 +- class: org.elasticsearch.xpack.ilm.actions.SearchableSnapshotActionIT + method: testUpdatePolicyToAddPhasesYieldsInvalidActionsToBeSkipped + issue: https://github.com/elastic/elasticsearch/issues/118406 +- class: org.elasticsearch.xpack.security.QueryableReservedRolesIT + method: testConfiguredReservedRolesAfterClosingAndOpeningIndex + issue: https://github.com/elastic/elasticsearch/issues/120127 +- class: org.elasticsearch.oldrepos.OldRepositoryAccessIT + method: testOldRepoAccess + issue: https://github.com/elastic/elasticsearch/issues/120148 +- class: org.elasticsearch.oldrepos.OldRepositoryAccessIT + method: testOldSourceOnlyRepoAccess + issue: https://github.com/elastic/elasticsearch/issues/120080 +- class: org.elasticsearch.xpack.test.rest.XPackRestIT + method: test {p0=snapshot/10_basic/Failed to snapshot indices with synthetic source} + issue: https://github.com/elastic/elasticsearch/issues/120332 +- class: org.elasticsearch.xpack.ccr.FollowIndexSecurityIT + method: testCleanShardFollowTaskAfterDeleteFollower + issue: https://github.com/elastic/elasticsearch/issues/120339 +- class: org.elasticsearch.search.ccs.CrossClusterIT + method: testCancel + issue: https://github.com/elastic/elasticsearch/issues/108061 +- class: org.elasticsearch.reservedstate.service.FileSettingsServiceTests + method: testInvalidJSON + issue: https://github.com/elastic/elasticsearch/issues/120482 +- class: org.elasticsearch.xpack.sql.expression.function.scalar.datetime.DateTimeToCharProcessorTests + issue: https://github.com/elastic/elasticsearch/issues/120575 +- class: org.elasticsearch.xpack.inference.DefaultEndPointsIT + method: testMultipleInferencesTriggeringDownloadAndDeploy + issue: https://github.com/elastic/elasticsearch/issues/120668 +- class: org.elasticsearch.xpack.security.authc.ldap.ADLdapUserSearchSessionFactoryTests + issue: https://github.com/elastic/elasticsearch/issues/119882 +- class: org.elasticsearch.xpack.test.rest.XPackRestIT + method: test {p0=ml/3rd_party_deployment/Test start deployment fails while model download in progress} + issue: https://github.com/elastic/elasticsearch/issues/120810 +- class: org.elasticsearch.xpack.security.authc.service.ServiceAccountIT + method: testAuthenticateShouldNotFallThroughInCaseOfFailure + issue: https://github.com/elastic/elasticsearch/issues/120902 +- class: org.elasticsearch.packaging.test.DockerTests + method: test050BasicApiTests + issue: https://github.com/elastic/elasticsearch/issues/120911 +- class: org.elasticsearch.packaging.test.DockerTests + method: test140CgroupOsStatsAreAvailable + issue: https://github.com/elastic/elasticsearch/issues/120914 +- class: org.elasticsearch.xpack.security.FileSettingsRoleMappingsRestartIT + method: testReservedStatePersistsOnRestart + issue: https://github.com/elastic/elasticsearch/issues/120923 +- class: org.elasticsearch.packaging.test.DockerTests + method: test070BindMountCustomPathConfAndJvmOptions + issue: https://github.com/elastic/elasticsearch/issues/120910 +- class: org.elasticsearch.packaging.test.DockerTests + method: test071BindMountCustomPathWithDifferentUID + issue: https://github.com/elastic/elasticsearch/issues/120918 +- class: org.elasticsearch.packaging.test.DockerTests + method: test171AdditionalCliOptionsAreForwarded + issue: https://github.com/elastic/elasticsearch/issues/120925 +- class: org.elasticsearch.action.search.SearchProgressActionListenerIT + method: testSearchProgressWithQuery + issue: https://github.com/elastic/elasticsearch/issues/120994 +- class: org.elasticsearch.backwards.MixedClusterClientYamlTestSuiteIT + method: test {p0=nodes.stats/11_indices_metrics/indices mappings exact count test for indices level} + issue: https://github.com/elastic/elasticsearch/issues/120950 +- class: org.elasticsearch.xpack.security.FileSettingsRoleMappingsRestartIT + method: testFileSettingsReprocessedOnRestartWithoutVersionChange + issue: https://github.com/elastic/elasticsearch/issues/120964 +- class: org.elasticsearch.xpack.ml.integration.PyTorchModelIT + issue: https://github.com/elastic/elasticsearch/issues/121165 +- class: org.elasticsearch.xpack.test.rest.XPackRestIT + method: test {p0=transform/*} + issue: https://github.com/elastic/elasticsearch/issues/120816 +- class: org.elasticsearch.xpack.test.rest.XPackRestIT + method: test {p0=ml/*} + issue: https://github.com/elastic/elasticsearch/issues/120816 +- class: org.elasticsearch.upgrades.VectorSearchIT + method: testBBQVectorSearch {upgradedNodes=0} + issue: https://github.com/elastic/elasticsearch/issues/121253 +- class: org.elasticsearch.upgrades.VectorSearchIT + method: testBBQVectorSearch {upgradedNodes=1} + issue: https://github.com/elastic/elasticsearch/issues/121271 +- class: org.elasticsearch.upgrades.VectorSearchIT + method: testBBQVectorSearch {upgradedNodes=2} + issue: https://github.com/elastic/elasticsearch/issues/121272 +- class: org.elasticsearch.upgrades.VectorSearchIT + method: testBBQVectorSearch {upgradedNodes=3} + issue: https://github.com/elastic/elasticsearch/issues/121273 +- class: org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySessionFactoryTests + issue: https://github.com/elastic/elasticsearch/issues/121285 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_357} + issue: https://github.com/elastic/elasticsearch/issues/121287 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/index-modules/slowlog/line_102} + issue: https://github.com/elastic/elasticsearch/issues/121288 +- class: org.elasticsearch.env.NodeEnvironmentTests + method: testGetBestDowngradeVersion + issue: https://github.com/elastic/elasticsearch/issues/121316 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/rest-api/security/invalidate-tokens/line_194} + issue: https://github.com/elastic/elasticsearch/issues/121337 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/rest-api/common-options/line_125} + issue: https://github.com/elastic/elasticsearch/issues/121338 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_751} + issue: https://github.com/elastic/elasticsearch/issues/121345 +- class: org.elasticsearch.test.rest.yaml.CcsCommonYamlTestSuiteIT + issue: https://github.com/elastic/elasticsearch/issues/121407 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/cat/health/cat-health-no-timestamp-example} + issue: https://github.com/elastic/elasticsearch/issues/121867 +- class: org.elasticsearch.analysis.common.CommonAnalysisClientYamlTestSuiteIT + method: test {yaml=analysis-common/40_token_filters/stemmer_override file access} + issue: https://github.com/elastic/elasticsearch/issues/121625 +- class: org.elasticsearch.xpack.searchablesnapshots.hdfs.SecureHdfsSearchableSnapshotsIT + issue: https://github.com/elastic/elasticsearch/issues/121967 +- class: org.elasticsearch.xpack.application.CohereServiceUpgradeIT + issue: https://github.com/elastic/elasticsearch/issues/121537 +- class: org.elasticsearch.xpack.restart.FullClusterRestartIT + method: testWatcherWithApiKey {cluster=UPGRADED} + issue: https://github.com/elastic/elasticsearch/issues/122061 +- class: org.elasticsearch.test.rest.ClientYamlTestSuiteIT + method: test {yaml=snapshot.delete/10_basic/Delete a snapshot asynchronously} + issue: https://github.com/elastic/elasticsearch/issues/122102 +- class: org.elasticsearch.search.SearchCancellationIT + method: testCancelFailedSearchWhenPartialResultDisallowed + issue: https://github.com/elastic/elasticsearch/issues/121719 +- class: org.elasticsearch.datastreams.TSDBPassthroughIndexingIT + issue: https://github.com/elastic/elasticsearch/issues/121716 +- class: org.elasticsearch.smoketest.SmokeTestMonitoringWithSecurityIT + method: testHTTPExporterWithSSL + issue: https://github.com/elastic/elasticsearch/issues/122220 +- class: org.elasticsearch.xpack.esql.action.CrossClusterAsyncQueryStopIT + method: testStopQueryLocal + issue: https://github.com/elastic/elasticsearch/issues/121672 +- class: org.elasticsearch.xpack.security.authz.IndexAliasesTests + method: testRemoveIndex + issue: https://github.com/elastic/elasticsearch/issues/122221 +- class: org.elasticsearch.blocks.SimpleBlocksIT + method: testConcurrentAddBlock + issue: https://github.com/elastic/elasticsearch/issues/122324 +- class: org.elasticsearch.xpack.searchablesnapshots.hdfs.HdfsSearchableSnapshotsIT + issue: https://github.com/elastic/elasticsearch/issues/122024 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/cat/health/cat-health-example} + issue: https://github.com/elastic/elasticsearch/issues/122335 +- class: org.elasticsearch.xpack.esql.action.CrossClusterCancellationIT + method: testCloseSkipUnavailable + issue: https://github.com/elastic/elasticsearch/issues/122336 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/alias/line_260} + issue: https://github.com/elastic/elasticsearch/issues/122343 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_488} + issue: https://github.com/elastic/elasticsearch/issues/121611 +- class: org.elasticsearch.repositories.blobstore.testkit.analyze.SecureHdfsRepositoryAnalysisRestIT + issue: https://github.com/elastic/elasticsearch/issues/122377 +- class: org.elasticsearch.repositories.blobstore.testkit.analyze.HdfsRepositoryAnalysisRestIT + issue: https://github.com/elastic/elasticsearch/issues/122378 +- class: org.elasticsearch.xpack.inference.mapper.SemanticInferenceMetadataFieldsRecoveryTests + method: testSnapshotRecovery {p0=false p1=false} + issue: https://github.com/elastic/elasticsearch/issues/122549 +- class: org.elasticsearch.xpack.inference.mapper.SemanticInferenceMetadataFieldsRecoveryTests + method: testSnapshotRecovery {p0=true p1=false} + issue: https://github.com/elastic/elasticsearch/issues/122550 +- class: org.elasticsearch.xpack.inference.mapper.SemanticInferenceMetadataFieldsRecoveryTests + method: testSnapshotRecovery {p0=false p1=true} + issue: https://github.com/elastic/elasticsearch/issues/122551 +- class: org.elasticsearch.index.mapper.ShapeGeometryFieldMapperTests + method: testCartesianBoundsBlockLoader + issue: https://github.com/elastic/elasticsearch/issues/122661 +- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT + method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_408} + issue: https://github.com/elastic/elasticsearch/issues/122681 +- class: org.elasticsearch.xpack.autoscaling.storage.ReactiveStorageIT + method: testScaleWhileShrinking + issue: https://github.com/elastic/elasticsearch/issues/122119 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testIndexUpgrade {p0=[9.1.0, 8.19.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122688 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testRestoreIndex {p0=[9.1.0, 9.1.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122689 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testClosedIndexUpgrade {p0=[9.1.0, 8.19.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122690 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testRestoreIndex {p0=[9.1.0, 8.19.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122691 +- class: org.elasticsearch.xpack.searchablesnapshots.FrozenSearchableSnapshotsIntegTests + method: testCreateAndRestorePartialSearchableSnapshot + issue: https://github.com/elastic/elasticsearch/issues/122693 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testClosedIndexUpgrade {p0=[9.1.0, 9.1.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122694 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testClosedIndexUpgrade {p0=[9.1.0, 9.1.0, 9.1.0]} + issue: https://github.com/elastic/elasticsearch/issues/122695 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testIndexUpgrade {p0=[9.1.0, 9.1.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122696 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testIndexUpgrade {p0=[9.1.0, 9.1.0, 9.1.0]} + issue: https://github.com/elastic/elasticsearch/issues/122697 +- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase + method: testRestoreIndex {p0=[9.1.0, 9.1.0, 9.1.0]} + issue: https://github.com/elastic/elasticsearch/issues/122698 +- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT + method: testSearchableSnapshotUpgrade {p0=[9.1.0, 8.19.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122700 +- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT + method: testSearchableSnapshotUpgrade {p0=[9.1.0, 9.1.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122701 +- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT + method: testMountSearchableSnapshot {p0=[9.1.0, 8.19.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122702 +- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT + method: testMountSearchableSnapshot {p0=[9.1.0, 9.1.0, 8.19.0]} + issue: https://github.com/elastic/elasticsearch/issues/122703 +- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT + method: testSearchableSnapshotUpgrade {p0=[9.1.0, 9.1.0, 9.1.0]} + issue: https://github.com/elastic/elasticsearch/issues/122704 +- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT + method: testMountSearchableSnapshot {p0=[9.1.0, 9.1.0, 9.1.0]} + issue: https://github.com/elastic/elasticsearch/issues/122705 +- class: org.elasticsearch.search.basic.SearchWithRandomDisconnectsIT + method: testSearchWithRandomDisconnects + issue: https://github.com/elastic/elasticsearch/issues/122707 +- class: org.elasticsearch.indices.recovery.IndexRecoveryIT + method: testSourceThrottling + issue: https://github.com/elastic/elasticsearch/issues/122712 +- class: org.elasticsearch.xpack.esql.action.EsqlActionBreakerIT + issue: https://github.com/elastic/elasticsearch/issues/122810 +>>>>>>> 87c58ff93f8 ([Entitlements] Add missing entitlements for trust store (#122797)) # Examples: # diff --git a/x-pack/plugin/security/src/main/plugin-metadata/entitlement-policy.yaml b/x-pack/plugin/security/src/main/plugin-metadata/entitlement-policy.yaml index 90367da4cbceb..1897e826313a6 100644 --- a/x-pack/plugin/security/src/main/plugin-metadata/entitlement-policy.yaml +++ b/x-pack/plugin/security/src/main/plugin-metadata/entitlement-policy.yaml @@ -28,3 +28,6 @@ org.opensaml.saml.impl: - relative_path: saml-metadata.xml relative_to: config mode: read + - relative_path: metadata.xml + relative_to: config + mode: read From 414758483c7246b4ad863e2143c4dcbd06d91130 Mon Sep 17 00:00:00 2001 From: Moritz Mack Date: Tue, 18 Feb 2025 14:31:23 +0100 Subject: [PATCH 2/2] fix merge --- muted-tests.yml | 282 ------------------------------------------------ 1 file changed, 282 deletions(-) diff --git a/muted-tests.yml b/muted-tests.yml index f64607c3bc431..49a4b852e09cc 100644 --- a/muted-tests.yml +++ b/muted-tests.yml @@ -247,7 +247,6 @@ tests: - class: org.elasticsearch.xpack.inference.InferenceRestIT method: test {p0=inference/30_semantic_text_inference_bwc/Calculates embeddings using the default ELSER 2 endpoint} issue: https://github.com/elastic/elasticsearch/issues/117349 -<<<<<<< HEAD - class: org.elasticsearch.search.basic.SearchWithRandomDisconnectsIT method: testSearchWithRandomDisconnects issue: https://github.com/elastic/elasticsearch/issues/116175 @@ -257,287 +256,6 @@ tests: - class: org.elasticsearch.discovery.ClusterDisruptionIT method: testAckedIndexing issue: https://github.com/elastic/elasticsearch/issues/117024 -======= -- class: org.elasticsearch.xpack.test.rest.XPackRestIT - method: test {p0=transform/transforms_reset/Test reset running transform} - issue: https://github.com/elastic/elasticsearch/issues/117473 -- class: org.elasticsearch.test.rest.yaml.CcsCommonYamlTestSuiteIT - method: test {p0=search.highlight/50_synthetic_source/text multi unified from vectors} - issue: https://github.com/elastic/elasticsearch/issues/117815 -- class: org.elasticsearch.xpack.ml.integration.RegressionIT - method: testTwoJobsWithSameRandomizeSeedUseSameTrainingSet - issue: https://github.com/elastic/elasticsearch/issues/117805 -- class: org.elasticsearch.packaging.test.ArchiveTests - method: test44AutoConfigurationNotTriggeredOnNotWriteableConfDir - issue: https://github.com/elastic/elasticsearch/issues/118208 -- class: org.elasticsearch.packaging.test.ArchiveTests - method: test51AutoConfigurationWithPasswordProtectedKeystore - issue: https://github.com/elastic/elasticsearch/issues/118212 -- class: org.elasticsearch.datastreams.DataStreamsClientYamlTestSuiteIT - method: test {p0=data_stream/120_data_streams_stats/Multiple data stream} - issue: https://github.com/elastic/elasticsearch/issues/118217 -- class: org.elasticsearch.xpack.searchablesnapshots.RetrySearchIntegTests - method: testSearcherId - issue: https://github.com/elastic/elasticsearch/issues/118374 -- class: org.elasticsearch.xpack.ccr.rest.ShardChangesRestIT - method: testShardChangesNoOperation - issue: https://github.com/elastic/elasticsearch/issues/118800 -- class: org.elasticsearch.cluster.service.MasterServiceTests - method: testThreadContext - issue: https://github.com/elastic/elasticsearch/issues/118914 -- class: org.elasticsearch.xpack.security.authc.ldap.ActiveDirectoryRunAsIT - issue: https://github.com/elastic/elasticsearch/issues/115727 -- class: org.elasticsearch.index.mapper.AbstractShapeGeometryFieldMapperTests - method: testCartesianBoundsBlockLoader - issue: https://github.com/elastic/elasticsearch/issues/119201 -- class: org.elasticsearch.xpack.test.rest.XPackRestIT - method: test {p0=transform/transforms_start_stop/Test start/stop/start transform} - issue: https://github.com/elastic/elasticsearch/issues/119508 -- class: org.elasticsearch.smoketest.MlWithSecurityIT - method: test {yaml=ml/sparse_vector_search/Test sparse_vector search with query vector and pruning config} - issue: https://github.com/elastic/elasticsearch/issues/119548 -- class: org.elasticsearch.xpack.ml.integration.ForecastIT - method: testOverflowToDisk - issue: https://github.com/elastic/elasticsearch/issues/117740 -- class: org.elasticsearch.xpack.security.authc.ldap.MultiGroupMappingIT - issue: https://github.com/elastic/elasticsearch/issues/119599 -- class: org.elasticsearch.multi_cluster.MultiClusterYamlTestSuiteIT - issue: https://github.com/elastic/elasticsearch/issues/119983 -- class: org.elasticsearch.xpack.test.rest.XPackRestIT - method: test {p0=transform/transforms_unattended/Test unattended put and start} - issue: https://github.com/elastic/elasticsearch/issues/120019 -- class: org.elasticsearch.xpack.ilm.actions.SearchableSnapshotActionIT - method: testUpdatePolicyToAddPhasesYieldsInvalidActionsToBeSkipped - issue: https://github.com/elastic/elasticsearch/issues/118406 -- class: org.elasticsearch.xpack.security.QueryableReservedRolesIT - method: testConfiguredReservedRolesAfterClosingAndOpeningIndex - issue: https://github.com/elastic/elasticsearch/issues/120127 -- class: org.elasticsearch.oldrepos.OldRepositoryAccessIT - method: testOldRepoAccess - issue: https://github.com/elastic/elasticsearch/issues/120148 -- class: org.elasticsearch.oldrepos.OldRepositoryAccessIT - method: testOldSourceOnlyRepoAccess - issue: https://github.com/elastic/elasticsearch/issues/120080 -- class: org.elasticsearch.xpack.test.rest.XPackRestIT - method: test {p0=snapshot/10_basic/Failed to snapshot indices with synthetic source} - issue: https://github.com/elastic/elasticsearch/issues/120332 -- class: org.elasticsearch.xpack.ccr.FollowIndexSecurityIT - method: testCleanShardFollowTaskAfterDeleteFollower - issue: https://github.com/elastic/elasticsearch/issues/120339 -- class: org.elasticsearch.search.ccs.CrossClusterIT - method: testCancel - issue: https://github.com/elastic/elasticsearch/issues/108061 -- class: org.elasticsearch.reservedstate.service.FileSettingsServiceTests - method: testInvalidJSON - issue: https://github.com/elastic/elasticsearch/issues/120482 -- class: org.elasticsearch.xpack.sql.expression.function.scalar.datetime.DateTimeToCharProcessorTests - issue: https://github.com/elastic/elasticsearch/issues/120575 -- class: org.elasticsearch.xpack.inference.DefaultEndPointsIT - method: testMultipleInferencesTriggeringDownloadAndDeploy - issue: https://github.com/elastic/elasticsearch/issues/120668 -- class: org.elasticsearch.xpack.security.authc.ldap.ADLdapUserSearchSessionFactoryTests - issue: https://github.com/elastic/elasticsearch/issues/119882 -- class: org.elasticsearch.xpack.test.rest.XPackRestIT - method: test {p0=ml/3rd_party_deployment/Test start deployment fails while model download in progress} - issue: https://github.com/elastic/elasticsearch/issues/120810 -- class: org.elasticsearch.xpack.security.authc.service.ServiceAccountIT - method: testAuthenticateShouldNotFallThroughInCaseOfFailure - issue: https://github.com/elastic/elasticsearch/issues/120902 -- class: org.elasticsearch.packaging.test.DockerTests - method: test050BasicApiTests - issue: https://github.com/elastic/elasticsearch/issues/120911 -- class: org.elasticsearch.packaging.test.DockerTests - method: test140CgroupOsStatsAreAvailable - issue: https://github.com/elastic/elasticsearch/issues/120914 -- class: org.elasticsearch.xpack.security.FileSettingsRoleMappingsRestartIT - method: testReservedStatePersistsOnRestart - issue: https://github.com/elastic/elasticsearch/issues/120923 -- class: org.elasticsearch.packaging.test.DockerTests - method: test070BindMountCustomPathConfAndJvmOptions - issue: https://github.com/elastic/elasticsearch/issues/120910 -- class: org.elasticsearch.packaging.test.DockerTests - method: test071BindMountCustomPathWithDifferentUID - issue: https://github.com/elastic/elasticsearch/issues/120918 -- class: org.elasticsearch.packaging.test.DockerTests - method: test171AdditionalCliOptionsAreForwarded - issue: https://github.com/elastic/elasticsearch/issues/120925 -- class: org.elasticsearch.action.search.SearchProgressActionListenerIT - method: testSearchProgressWithQuery - issue: https://github.com/elastic/elasticsearch/issues/120994 -- class: org.elasticsearch.backwards.MixedClusterClientYamlTestSuiteIT - method: test {p0=nodes.stats/11_indices_metrics/indices mappings exact count test for indices level} - issue: https://github.com/elastic/elasticsearch/issues/120950 -- class: org.elasticsearch.xpack.security.FileSettingsRoleMappingsRestartIT - method: testFileSettingsReprocessedOnRestartWithoutVersionChange - issue: https://github.com/elastic/elasticsearch/issues/120964 -- class: org.elasticsearch.xpack.ml.integration.PyTorchModelIT - issue: https://github.com/elastic/elasticsearch/issues/121165 -- class: org.elasticsearch.xpack.test.rest.XPackRestIT - method: test {p0=transform/*} - issue: https://github.com/elastic/elasticsearch/issues/120816 -- class: org.elasticsearch.xpack.test.rest.XPackRestIT - method: test {p0=ml/*} - issue: https://github.com/elastic/elasticsearch/issues/120816 -- class: org.elasticsearch.upgrades.VectorSearchIT - method: testBBQVectorSearch {upgradedNodes=0} - issue: https://github.com/elastic/elasticsearch/issues/121253 -- class: org.elasticsearch.upgrades.VectorSearchIT - method: testBBQVectorSearch {upgradedNodes=1} - issue: https://github.com/elastic/elasticsearch/issues/121271 -- class: org.elasticsearch.upgrades.VectorSearchIT - method: testBBQVectorSearch {upgradedNodes=2} - issue: https://github.com/elastic/elasticsearch/issues/121272 -- class: org.elasticsearch.upgrades.VectorSearchIT - method: testBBQVectorSearch {upgradedNodes=3} - issue: https://github.com/elastic/elasticsearch/issues/121273 -- class: org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySessionFactoryTests - issue: https://github.com/elastic/elasticsearch/issues/121285 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_357} - issue: https://github.com/elastic/elasticsearch/issues/121287 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/index-modules/slowlog/line_102} - issue: https://github.com/elastic/elasticsearch/issues/121288 -- class: org.elasticsearch.env.NodeEnvironmentTests - method: testGetBestDowngradeVersion - issue: https://github.com/elastic/elasticsearch/issues/121316 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/rest-api/security/invalidate-tokens/line_194} - issue: https://github.com/elastic/elasticsearch/issues/121337 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/rest-api/common-options/line_125} - issue: https://github.com/elastic/elasticsearch/issues/121338 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_751} - issue: https://github.com/elastic/elasticsearch/issues/121345 -- class: org.elasticsearch.test.rest.yaml.CcsCommonYamlTestSuiteIT - issue: https://github.com/elastic/elasticsearch/issues/121407 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/cat/health/cat-health-no-timestamp-example} - issue: https://github.com/elastic/elasticsearch/issues/121867 -- class: org.elasticsearch.analysis.common.CommonAnalysisClientYamlTestSuiteIT - method: test {yaml=analysis-common/40_token_filters/stemmer_override file access} - issue: https://github.com/elastic/elasticsearch/issues/121625 -- class: org.elasticsearch.xpack.searchablesnapshots.hdfs.SecureHdfsSearchableSnapshotsIT - issue: https://github.com/elastic/elasticsearch/issues/121967 -- class: org.elasticsearch.xpack.application.CohereServiceUpgradeIT - issue: https://github.com/elastic/elasticsearch/issues/121537 -- class: org.elasticsearch.xpack.restart.FullClusterRestartIT - method: testWatcherWithApiKey {cluster=UPGRADED} - issue: https://github.com/elastic/elasticsearch/issues/122061 -- class: org.elasticsearch.test.rest.ClientYamlTestSuiteIT - method: test {yaml=snapshot.delete/10_basic/Delete a snapshot asynchronously} - issue: https://github.com/elastic/elasticsearch/issues/122102 -- class: org.elasticsearch.search.SearchCancellationIT - method: testCancelFailedSearchWhenPartialResultDisallowed - issue: https://github.com/elastic/elasticsearch/issues/121719 -- class: org.elasticsearch.datastreams.TSDBPassthroughIndexingIT - issue: https://github.com/elastic/elasticsearch/issues/121716 -- class: org.elasticsearch.smoketest.SmokeTestMonitoringWithSecurityIT - method: testHTTPExporterWithSSL - issue: https://github.com/elastic/elasticsearch/issues/122220 -- class: org.elasticsearch.xpack.esql.action.CrossClusterAsyncQueryStopIT - method: testStopQueryLocal - issue: https://github.com/elastic/elasticsearch/issues/121672 -- class: org.elasticsearch.xpack.security.authz.IndexAliasesTests - method: testRemoveIndex - issue: https://github.com/elastic/elasticsearch/issues/122221 -- class: org.elasticsearch.blocks.SimpleBlocksIT - method: testConcurrentAddBlock - issue: https://github.com/elastic/elasticsearch/issues/122324 -- class: org.elasticsearch.xpack.searchablesnapshots.hdfs.HdfsSearchableSnapshotsIT - issue: https://github.com/elastic/elasticsearch/issues/122024 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/cat/health/cat-health-example} - issue: https://github.com/elastic/elasticsearch/issues/122335 -- class: org.elasticsearch.xpack.esql.action.CrossClusterCancellationIT - method: testCloseSkipUnavailable - issue: https://github.com/elastic/elasticsearch/issues/122336 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/alias/line_260} - issue: https://github.com/elastic/elasticsearch/issues/122343 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_488} - issue: https://github.com/elastic/elasticsearch/issues/121611 -- class: org.elasticsearch.repositories.blobstore.testkit.analyze.SecureHdfsRepositoryAnalysisRestIT - issue: https://github.com/elastic/elasticsearch/issues/122377 -- class: org.elasticsearch.repositories.blobstore.testkit.analyze.HdfsRepositoryAnalysisRestIT - issue: https://github.com/elastic/elasticsearch/issues/122378 -- class: org.elasticsearch.xpack.inference.mapper.SemanticInferenceMetadataFieldsRecoveryTests - method: testSnapshotRecovery {p0=false p1=false} - issue: https://github.com/elastic/elasticsearch/issues/122549 -- class: org.elasticsearch.xpack.inference.mapper.SemanticInferenceMetadataFieldsRecoveryTests - method: testSnapshotRecovery {p0=true p1=false} - issue: https://github.com/elastic/elasticsearch/issues/122550 -- class: org.elasticsearch.xpack.inference.mapper.SemanticInferenceMetadataFieldsRecoveryTests - method: testSnapshotRecovery {p0=false p1=true} - issue: https://github.com/elastic/elasticsearch/issues/122551 -- class: org.elasticsearch.index.mapper.ShapeGeometryFieldMapperTests - method: testCartesianBoundsBlockLoader - issue: https://github.com/elastic/elasticsearch/issues/122661 -- class: org.elasticsearch.smoketest.DocsClientYamlTestSuiteIT - method: test {yaml=reference/snapshot-restore/apis/get-snapshot-api/line_408} - issue: https://github.com/elastic/elasticsearch/issues/122681 -- class: org.elasticsearch.xpack.autoscaling.storage.ReactiveStorageIT - method: testScaleWhileShrinking - issue: https://github.com/elastic/elasticsearch/issues/122119 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testIndexUpgrade {p0=[9.1.0, 8.19.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122688 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testRestoreIndex {p0=[9.1.0, 9.1.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122689 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testClosedIndexUpgrade {p0=[9.1.0, 8.19.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122690 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testRestoreIndex {p0=[9.1.0, 8.19.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122691 -- class: org.elasticsearch.xpack.searchablesnapshots.FrozenSearchableSnapshotsIntegTests - method: testCreateAndRestorePartialSearchableSnapshot - issue: https://github.com/elastic/elasticsearch/issues/122693 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testClosedIndexUpgrade {p0=[9.1.0, 9.1.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122694 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testClosedIndexUpgrade {p0=[9.1.0, 9.1.0, 9.1.0]} - issue: https://github.com/elastic/elasticsearch/issues/122695 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testIndexUpgrade {p0=[9.1.0, 9.1.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122696 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testIndexUpgrade {p0=[9.1.0, 9.1.0, 9.1.0]} - issue: https://github.com/elastic/elasticsearch/issues/122697 -- class: org.elasticsearch.lucene.RollingUpgradeLuceneIndexCompatibilityTestCase - method: testRestoreIndex {p0=[9.1.0, 9.1.0, 9.1.0]} - issue: https://github.com/elastic/elasticsearch/issues/122698 -- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT - method: testSearchableSnapshotUpgrade {p0=[9.1.0, 8.19.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122700 -- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT - method: testSearchableSnapshotUpgrade {p0=[9.1.0, 9.1.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122701 -- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT - method: testMountSearchableSnapshot {p0=[9.1.0, 8.19.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122702 -- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT - method: testMountSearchableSnapshot {p0=[9.1.0, 9.1.0, 8.19.0]} - issue: https://github.com/elastic/elasticsearch/issues/122703 -- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT - method: testSearchableSnapshotUpgrade {p0=[9.1.0, 9.1.0, 9.1.0]} - issue: https://github.com/elastic/elasticsearch/issues/122704 -- class: org.elasticsearch.lucene.RollingUpgradeSearchableSnapshotIndexCompatibilityIT - method: testMountSearchableSnapshot {p0=[9.1.0, 9.1.0, 9.1.0]} - issue: https://github.com/elastic/elasticsearch/issues/122705 -- class: org.elasticsearch.search.basic.SearchWithRandomDisconnectsIT - method: testSearchWithRandomDisconnects - issue: https://github.com/elastic/elasticsearch/issues/122707 -- class: org.elasticsearch.indices.recovery.IndexRecoveryIT - method: testSourceThrottling - issue: https://github.com/elastic/elasticsearch/issues/122712 -- class: org.elasticsearch.xpack.esql.action.EsqlActionBreakerIT - issue: https://github.com/elastic/elasticsearch/issues/122810 ->>>>>>> 87c58ff93f8 ([Entitlements] Add missing entitlements for trust store (#122797)) # Examples: #