Cross cluster search functional test with minimun privileges assigned to the test_user#70007
Merged
rashmivkulkarni merged 17 commits intoelastic:masterfrom Jun 29, 2020
Merged
Conversation
68 tasks
…r roles with no feature controls
Contributor
Author
|
jenkins, test this |
Contributor
Author
|
jenkins, test this |
Contributor
Author
|
@elasticmachine merge upstream |
Contributor
Author
|
@elasticmachine merge upstream |
Contributor
Author
|
@elasticmachine merge upstream |
Contributor
Author
|
@elasticmachine merge upstream |
Contributor
Author
|
@elasticmachine merge upstream |
|
@elasticmachine merge upstream |
Contributor
💚 Build SucceededBuild metricspage load asset sizebeta
History
To update your PR or re-run it, just comment with: |
LeeDr
approved these changes
Jun 29, 2020
LeeDr
left a comment
There was a problem hiding this comment.
LGTM - I reviewed code and Jenkins results. Due to another bug in the test framework, the results of these tests are not shown in the Jenkins job. But I found the results for x-pack ci Group4 which shows they ran and passed.
15:29:36 └-: Cross Cluster Replication app
15:29:36 └-> "before all" hook
15:29:36 └-: Home page
15:29:36 └-> "before all" hook
15:29:36 └-> "before all" hook
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/api/saved_objects/_bulk_get - Failed to load resource: the server responded with a status of 403 (Forbidden)
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/core/core.entry.js 19:16140
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js 413:77071 TypeError: Cannot read property 'missingPrivileges' of null
15:29:36 │ at http://localhost:6151/34138/bundles/plugin/esUiShared/esUiShared.plugin.js:1:834224
15:29:36 │ at Array.every (<anonymous>)
15:29:36 │ at WithPrivileges (http://localhost:6151/34138/bundles/plugin/esUiShared/esUiShared.plugin.js:1:834085)
15:29:36 │ at ua (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:59332)
15:29:36 │ at Ya (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:67554)
15:29:36 │ at xs (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:105587)
15:29:36 │ at ml (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:90018)
15:29:36 │ at hl (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:89943)
15:29:36 │ at ol (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:87291)
15:29:36 │ at http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:414:45733
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/core/core.entry.js 75:261558 TypeError: Failed to fetch
15:29:36 │ at Fetch._callee3$ (http://localhost:6151/34138/bundles/core/core.entry.js:26:104500)
15:29:36 │ at l (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:360:998695)
15:29:36 │ at Generator._invoke (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:360:998448)
15:29:36 │ at Generator.forEach.e.<computed> [as throw] (http://localhost:6151/34138/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:360:999052)
15:29:36 │ at fetch_asyncGeneratorStep (http://localhost:6151/34138/bundles/core/core.entry.js:26:98881)
15:29:36 │ at _throw (http://localhost:6151/34138/bundles/core/core.entry.js:26:99289)
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/api/saved_objects/_bulk_get - Failed to load resource: the server responded with a status of 403 (Forbidden)
15:29:36 │ERROR browser[SEVERE] http://localhost:6151/34138/bundles/core/core.entry.js 19:16140
15:29:39 └-> Loads the app
15:29:39 └-> "before each" hook: global before each
15:29:39 └- ✓ pass (63ms) "Cross Cluster Replication app Home page Loads the app"
15:29:39 └-> "after all" hook
15:29:41 └-> "after all" hook
15:29:41 └-> "after all" hook
Contributor
Author
|
This test when written initially had |
cuff-links
approved these changes
Jun 29, 2020
Contributor
cuff-links
left a comment
There was a problem hiding this comment.
LGTM. Ran fine locally also with slowing down the network.
rashmivkulkarni
added a commit
to rashmivkulkarni/kibana
that referenced
this pull request
Jun 29, 2020
… to the test_user (elastic#70007) * using test_user with limited read permission to search profiler test * gitcheck * search profiler test using test_user * using limited roles and privileges for CCR * changed the global ccr role kibana section to be consistent with other roles with no feature controls * removed canvas role * changes to include pagination for 100 rows Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
rashmivkulkarni
added a commit
that referenced
this pull request
Jun 29, 2020
… to the test_user (#70007) (#70268) * using test_user with limited read permission to search profiler test * gitcheck * search profiler test using test_user * using limited roles and privileges for CCR * changed the global ccr role kibana section to be consistent with other roles with no feature controls * removed canvas role * changes to include pagination for 100 rows Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com> Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
jloleysens
added a commit
to jloleysens/kibana
that referenced
this pull request
Jun 30, 2020
…ata-streams * 'master' of github.com:elastic/kibana: (50 commits) [Logs UI] [Alerting] "Group by" functionality (elastic#68250) [Discover] Deangularize Skip to bottom button (elastic#69811) Implement recursive plugin discovery (elastic#68811) Use ts-expect-error in platform code (elastic#69883) [SIEM][Detection Engine][Lists] Moves getQueryFilter to common folder for use by both front and backend [Ingest Manager][SECURITY SOLUTION] adjust config reassign link and add roundtrip to Reassignment flow (elastic#70208) [Security][Lists] Add API functions and react hooks for value list APIs (elastic#69603) [ILM] Fix bug when clearing priority field (elastic#70154) [Platform][Security] Updates cluster_manager ignorePaths to include security scripts (elastic#70139) [IngestManager] Allow to filter agent by packages (elastic#69731) [code coverage] exclude folders: test_helpers, tests_bundle (elastic#70199) [Metrics UI] UX improvements for saved views (elastic#69910) [APM] docs: unique transaction troubleshooting (elastic#69831) Cross cluster search functional test with minimun privileges assigned to the test_user (elastic#70007) [Maps] choropleth layer wizard (elastic#69699) Make custom errors by extending Error (elastic#69966) [Ingest Manager] Support updated package output structure (elastic#69864) Resolver test coverage (elastic#70246) Async Discover search test (elastic#64388) [ui-shared-deps] include styled-components (elastic#69322) ... # Conflicts: # x-pack/plugins/snapshot_restore/server/types.ts
gmmorris
added a commit
to gmmorris/kibana
that referenced
this pull request
Jun 30, 2020
…bana into alerting/consumer-based-rbac * 'alerting/consumer-based-rbac' of github.com:gmmorris/kibana: (49 commits) [Discover] Deangularize Skip to bottom button (elastic#69811) Implement recursive plugin discovery (elastic#68811) Use ts-expect-error in platform code (elastic#69883) [SIEM][Detection Engine][Lists] Moves getQueryFilter to common folder for use by both front and backend [Ingest Manager][SECURITY SOLUTION] adjust config reassign link and add roundtrip to Reassignment flow (elastic#70208) [Security][Lists] Add API functions and react hooks for value list APIs (elastic#69603) [ILM] Fix bug when clearing priority field (elastic#70154) [Platform][Security] Updates cluster_manager ignorePaths to include security scripts (elastic#70139) [IngestManager] Allow to filter agent by packages (elastic#69731) [code coverage] exclude folders: test_helpers, tests_bundle (elastic#70199) [Metrics UI] UX improvements for saved views (elastic#69910) [APM] docs: unique transaction troubleshooting (elastic#69831) Cross cluster search functional test with minimun privileges assigned to the test_user (elastic#70007) [Maps] choropleth layer wizard (elastic#69699) Make custom errors by extending Error (elastic#69966) [Ingest Manager] Support updated package output structure (elastic#69864) Resolver test coverage (elastic#70246) Async Discover search test (elastic#64388) [ui-shared-deps] include styled-components (elastic#69322) SECURITY-ENDPOINT: add host properties (elastic#70238) ...
Bamieh
pushed a commit
to Bamieh/kibana
that referenced
this pull request
Jul 1, 2020
… to the test_user (elastic#70007) * using test_user with limited read permission to search profiler test * gitcheck * search profiler test using test_user * using limited roles and privileges for CCR * changed the global ccr role kibana section to be consistent with other roles with no feature controls * removed canvas role * changes to include pagination for 100 rows Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Ref meta issue: #60815
Summary
This PR replaces
elasticsuperuser withtest_userwith minimum privileges assigned to thetest_user.global_ccr_roleChecklist
Related bug filed: #70000