You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
breakingThis issue is or proposes a breaking changebugSomething isn't workinguntriagedRequire the attention of the repository maintainers and may need to be prioritizedv2.13.0Issues targeting release v2.13.0
What is the bug?
A new feature was added into OpenSearch core [1] that performs a lightweight query to see if the cluster metadata needs to be retrieved, or if local metadata can be used. A non-user facing transport action created named as cluster:monitor/term, and unless a user has been granted access any cluster metadata related requests will fail.
How can one reproduce the bug? ./gradlew test --tests org.opensearch.security.DoNotFailOnForbiddenTests.shouldPerformCatIndices_positive
Output
Tests with failures:
- org.opensearch.security.DoNotFailOnForbiddenTests.shouldPerformCatIndices_positive
Suite: Test class org.opensearch.security.DoNotFailOnForbiddenTests
2> org.opensearch.client.ResponseException: method [GET], host [https://127.0.0.1:47210/], URI [/_cat/indices], status line [HTTP/1.1 403 Forbidden]
{"error":{"root_cause":[{"type":"security_exception","reason":"no permissions for [cluster:monitor/term] and User [name=limited_user, backend_roles=[], requestedTenant=null]"}],"type":"security_exception","reason":"no permissions for [cluster:monitor/term] and User [name=limited_user, backend_roles=[], requestedTenant=null]"},"status":403}
at __randomizedtesting.SeedInfo.seed([CDF68AC8EA8DBB0:5CF195486F6DF43B]:0)
at app//org.opensearch.client.RestClient.convertResponse(RestClient.java:376)
at app//org.opensearch.client.RestClient.performRequest(RestClient.java:346)
at app//org.opensearch.client.RestClient.performRequest(RestClient.java:321)
at app//org.opensearch.security.DoNotFailOnForbiddenTests.shouldPerformCatIndices_positive(DoNotFailOnForbiddenTests.java:437)
What is the expected behavior?
This new action should not need permissions to be performed, it should be renamed to internal:monitor/term
The text was updated successfully, but these errors were encountered:
peternied
added
bug
Something isn't working
untriaged
Require the attention of the repository maintainers and may need to be prioritized
breaking
This issue is or proposes a breaking change
v2.13.0
Issues targeting release v2.13.0
labels
Mar 22, 2024
breakingThis issue is or proposes a breaking changebugSomething isn't workinguntriagedRequire the attention of the repository maintainers and may need to be prioritizedv2.13.0Issues targeting release v2.13.0
What is the bug?
A new feature was added into OpenSearch core [1] that performs a lightweight query to see if the cluster metadata needs to be retrieved, or if local metadata can be used. A non-user facing transport action created named as
cluster:monitor/term
, and unless a user has been granted access any cluster metadata related requests will fail.How can one reproduce the bug?
./gradlew test --tests org.opensearch.security.DoNotFailOnForbiddenTests.shouldPerformCatIndices_positive
Output
What is the expected behavior?
This new action should not need permissions to be performed, it should be renamed to
internal:monitor/term
Do you have any additional context?
The text was updated successfully, but these errors were encountered: