SecuritySettingsSource license.self_generated: trial (#38233) #38397
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Authn is enabled only if `license_type` is non `basic`, but `basic` is what the `LicenseService` generates implicitly. This commit explicitly sets license type to `trial`, which allows for authn, in the `SecuritySettingsSource` which is the settings configuration parameter for `InternalTestCluster`s. The real problem, that had created tests failures like elastic#31028 and elastic#32685, is that the check `licenseState.isAuthAllowed()` can change sporadically. If it were to return `true` or `false` during the whole test there would be no problem. The problem manifests when it turns from `true` to `false` right before `Realms.asList()`. There are other license checks before this one (request filter, token service, etc) that would not cause a problem if they would suddenly see the check as `false`. But switching to `false` before `Realms.asList()` makes it appear that no installed realms could have handled the authn token which is an authentication error, as can be seen in the failing tests. Closes elastic#31028 elastic#32685
albertzaharovits
added
:Security/Security
|
Pinging @elastic/es-security |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Authn is enabled only if
license_typeis nonbasic, butbasiciswhat the
LicenseServicegenerates implicitly. This commit explicitly setslicense type to
trial, which allows for authn, in theSecuritySettingsSourcewhich is the settings configuration parameter for
InternalTestClusters.The real problem, that had created tests failures like #31028 and #32685, is
that the check
licenseState.isAuthAllowed()can change sporadically. If it wereto return
trueorfalseduring the whole test there would be no problem.The problem manifests when it turns from
truetofalseright beforeRealms.asList().There are other license checks before this one (request filter, token service, etc)
that would not cause a problem if they would suddenly see the check as
false.But switching to
falsebeforeRealms.asList()makes it appear that no installedrealms could have handled the authn token which is an authentication error, as can
be seen in the failing tests.
Closes #31028 #32685