[CI] CliSecurityIT testDescribeDocumentExcluded failed with missing audit log #48117
Description
Many tests in the CliSecurityIT suite failed in https://gradle-enterprise.elastic.co/s/3fgucfb5u5uki
However, all of them apart from 1 say:
Previous test had an audit-related failure. All subsequent audit related assertions are bogus because we can't guarantee that we fully cleaned up after the last test.
The root cause failure appears to be CliSecurityIT.testDescribeDocumentExcluded:
1> [2019-10-16T02:52:08,327][INFO ][o.e.x.s.q.c.EmbeddedCli ] [[Thread-49]] cli exited with code [0]
1> [2019-10-16T02:52:18,688][WARN ][o.e.x.s.q.s.CliSecurityIT] [testDescribeWorksAsFullAccess] Failed to find an audit log. Skipping remaining tests in this class after this the missing auditlogs could turn up later.
1> [2019-10-16T02:52:18,921][INFO ][o.e.x.s.q.s.CliSecurityIT] [testDescribeWorksAsFullAccess] after test
2> REPRODUCE WITH: ./gradlew ':x-pack:plugin:sql:qa:security:with-ssl:integTestRunner' --tests "org.elasticsearch.xpack.sql.qa.security.CliSecurityIT.testDescribeWorksAsFullAccess" -Dtests.seed=416A789C31C5E8C1 -Dtests.security.manager=true -Dtests.locale=bs-Cyrl-BA -Dtests.timezone=America/Guadeloupe -Dcompiler.java=12 -Druntime.java=11
2> java.lang.AssertionError: Not all logs matched. Unmatched logs:
{node.id=Xxg8JBmdT0qBIqPgG5J9Ww, origin.type=local_node, user.name=_system, type=audit, user.realm=__fallback, request.id=T1yUUxPoT5a3Y6a641CLmA, event.action=access_denied, indices=[.enrich-*], request.name=GetIndexRequest, origin.address=127.0.0.1:33817, event.type=transport, action=indices:admin/get, timestamp=2019-10-16T06:52:07,688+0000, user.roles=[_system]}
The REPRO command is:
./gradlew ':x-pack:plugin:sql:qa:security:with-ssl:integTestRunner' --tests "org.elasticsearch.xpack.sql.qa.security.CliSecurityIT.testDescribeWorksAsFullAccess" \
-Dtests.seed=416A789C31C5E8C1 \
-Dtests.security.manager=true \
-Dtests.locale=bs-Cyrl-BA \
-Dtests.timezone=America/Guadeloupe \
-Dcompiler.java=12 \
-Druntime.java=11
This did not reproduce locally for me.
Metadata
Metadata
Assignees
Type
Fields
Give feedbackNo fields configured for issues without a type.