Flaky Test [Build&Test / libbeat-build / TestClientPublishEventKerberosAware – elasticsearch]

[jsoriano]

Flaky Test

• Test Name: TestClientPublishEventKerberosAware
• Link:

  beats/libbeat/outputs/elasticsearch/client_integration_test.go

  Line 57 in a9db1b1

  func TestClientPublishEventKerberosAware(t *testing.T) {

• Branch: Failing in many PRs, for example here.
• Notes:
  • It is failing quite frequently in travis and jenkins. Not able to reproduce it locally, but same trace can be reproduced removing the kerberos settings, so it looks like if the kerberos settings are lost at some point, or somehow a client without kerberos credentials is used.
  • May be related to Fix libbeat.output.*.bytes metrics for ES #21197.

Stack Trace

client_integration_test.go:97: 401 Unauthorized: {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/_bulk]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Negotiate"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/_bulk]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Negotiate"]}},"status":401}

[elasticmachine]

Pinging @elastic/integrations-services (Team:Services)

[v1v]

Probably #21838 is also affected since the docker image doesn't start.

[elasticmachine]

Flaky Test

• Test Name: Build&Test / libbeat-build / TestClientPublishEventKerberosAware – elasticsearch
• Artifact Link: https://beats-ci.elastic.co/blue/organizations/jenkins/Beats%2Fbeats%2FPR-22623/detail/PR-22623/1/
• PR: Revert "Cherry-pick to 7.10: [CI] ensure one shot-worker (#22588)" #22623
• Commit: 42a8a02

Error details

Failed

Stack Trace

    client_integration_test.go:97: 403 Forbidden: {"error":{"root_cause":[{"type":"security_exception","reason":"action [indices:data/write/bulk] is unauthorized for user [beats@ELASTIC]"}],"type":"security_exception","reason":"action [indices:data/write/bulk] is unauthorized for user [beats@ELASTIC]"},"status":403}

[jlind23]

Backlog grooming: Closing for now.