-
Notifications
You must be signed in to change notification settings - Fork 8.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cross cluster search functional test with minimun privileges assigned to the test_user #70007
Cross cluster search functional test with minimun privileges assigned to the test_user #70007
Conversation
…r roles with no feature controls
jenkins, test this |
jenkins, test this |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
@elasticmachine merge upstream |
💚 Build SucceededBuild metricspage load asset sizebeta
History
To update your PR or re-run it, just comment with: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM - I reviewed code and Jenkins results. Due to another bug in the test framework, the results of these tests are not shown in the Jenkins job. But I found the results for x-pack ci Group4 which shows they ran and passed.
15:29:36 └-: Cross Cluster Replication app
15:29:36 └-> "before all" hook
15:29:36 └-: Home page
15:29:36 └-> "before all" hook
15:29:36 └-> "before all" hook
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/api/saved_objects/_bulk_get - Failed to load resource: the server responded with a status of 403 (Forbidden)
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/core/core.entry.js 19:16140
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js 413:77071 TypeError: Cannot read property 'missingPrivileges' of null
15:29:36 │ at http://localhost:6151/34138/bundles/plugin/esUiShared/esUiShared.plugin.js:1:834224
15:29:36 │ at Array.every (<anonymous>)
15:29:36 │ at WithPrivileges (http://localhost:6151/34138/bundles/plugin/esUiShared/esUiShared.plugin.js:1:834085)
15:29:36 │ at ua (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:59332)
15:29:36 │ at Ya (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:67554)
15:29:36 │ at xs (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:105587)
15:29:36 │ at ml (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:90018)
15:29:36 │ at hl (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:89943)
15:29:36 │ at ol (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:87291)
15:29:36 │ at http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:45733
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/core/core.entry.js 75:261558 TypeError: Failed to fetch
15:29:36 │ at Fetch._callee3$ (http://localhost:6151/34138/bundles/core/core.entry.js:26:104500)
15:29:36 │ at l (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:360:998695)
15:29:36 │ at Generator._invoke (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:360:998448)
15:29:36 │ at Generator.forEach.e.<computed> [as throw] (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:360:999052)
15:29:36 │ at fetch_asyncGeneratorStep (http://localhost:6151/34138/bundles/core/core.entry.js:26:98881)
15:29:36 │ at _throw (http://localhost:6151/34138/bundles/core/core.entry.js:26:99289)
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/api/saved_objects/_bulk_get - Failed to load resource: the server responded with a status of 403 (Forbidden)
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/core/core.entry.js 19:16140
15:29:39 └-> Loads the app
15:29:39 └-> "before each" hook: global before each
15:29:39 └- ✓ pass (63ms) "Cross Cluster Replication app Home page Loads the app"
15:29:39 └-> "after all" hook
15:29:41 └-> "after all" hook
15:29:41 └-> "after all" hook
This test when written initially had |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. Ran fine locally also with slowing down the network.
… to the test_user (elastic#70007) * using test_user with limited read permission to search profiler test * gitcheck * search profiler test using test_user * using limited roles and privileges for CCR * changed the global ccr role kibana section to be consistent with other roles with no feature controls * removed canvas role * changes to include pagination for 100 rows Co-authored-by: Elastic Machine <[email protected]>
… to the test_user (#70007) (#70268) * using test_user with limited read permission to search profiler test * gitcheck * search profiler test using test_user * using limited roles and privileges for CCR * changed the global ccr role kibana section to be consistent with other roles with no feature controls * removed canvas role * changes to include pagination for 100 rows Co-authored-by: Elastic Machine <[email protected]> Co-authored-by: Elastic Machine <[email protected]>
…ata-streams * 'master' of github.com:elastic/kibana: (50 commits) [Logs UI] [Alerting] "Group by" functionality (elastic#68250) [Discover] Deangularize Skip to bottom button (elastic#69811) Implement recursive plugin discovery (elastic#68811) Use ts-expect-error in platform code (elastic#69883) [SIEM][Detection Engine][Lists] Moves getQueryFilter to common folder for use by both front and backend [Ingest Manager][SECURITY SOLUTION] adjust config reassign link and add roundtrip to Reassignment flow (elastic#70208) [Security][Lists] Add API functions and react hooks for value list APIs (elastic#69603) [ILM] Fix bug when clearing priority field (elastic#70154) [Platform][Security] Updates cluster_manager ignorePaths to include security scripts (elastic#70139) [IngestManager] Allow to filter agent by packages (elastic#69731) [code coverage] exclude folders: test_helpers, tests_bundle (elastic#70199) [Metrics UI] UX improvements for saved views (elastic#69910) [APM] docs: unique transaction troubleshooting (elastic#69831) Cross cluster search functional test with minimun privileges assigned to the test_user (elastic#70007) [Maps] choropleth layer wizard (elastic#69699) Make custom errors by extending Error (elastic#69966) [Ingest Manager] Support updated package output structure (elastic#69864) Resolver test coverage (elastic#70246) Async Discover search test (elastic#64388) [ui-shared-deps] include styled-components (elastic#69322) ... # Conflicts: # x-pack/plugins/snapshot_restore/server/types.ts
…bana into alerting/consumer-based-rbac * 'alerting/consumer-based-rbac' of github.com:gmmorris/kibana: (49 commits) [Discover] Deangularize Skip to bottom button (elastic#69811) Implement recursive plugin discovery (elastic#68811) Use ts-expect-error in platform code (elastic#69883) [SIEM][Detection Engine][Lists] Moves getQueryFilter to common folder for use by both front and backend [Ingest Manager][SECURITY SOLUTION] adjust config reassign link and add roundtrip to Reassignment flow (elastic#70208) [Security][Lists] Add API functions and react hooks for value list APIs (elastic#69603) [ILM] Fix bug when clearing priority field (elastic#70154) [Platform][Security] Updates cluster_manager ignorePaths to include security scripts (elastic#70139) [IngestManager] Allow to filter agent by packages (elastic#69731) [code coverage] exclude folders: test_helpers, tests_bundle (elastic#70199) [Metrics UI] UX improvements for saved views (elastic#69910) [APM] docs: unique transaction troubleshooting (elastic#69831) Cross cluster search functional test with minimun privileges assigned to the test_user (elastic#70007) [Maps] choropleth layer wizard (elastic#69699) Make custom errors by extending Error (elastic#69966) [Ingest Manager] Support updated package output structure (elastic#69864) Resolver test coverage (elastic#70246) Async Discover search test (elastic#64388) [ui-shared-deps] include styled-components (elastic#69322) SECURITY-ENDPOINT: add host properties (elastic#70238) ...
… to the test_user (elastic#70007) * using test_user with limited read permission to search profiler test * gitcheck * search profiler test using test_user * using limited roles and privileges for CCR * changed the global ccr role kibana section to be consistent with other roles with no feature controls * removed canvas role * changes to include pagination for 100 rows Co-authored-by: Elastic Machine <[email protected]>
Ref meta issue: #60815
Summary
This PR replaces
elastic
superuser withtest_user
with minimum privileges assigned to thetest_user
.global_ccr_role
Checklist
Related bug filed: #70000