Commit graph

85689 commits

Author SHA1 Message Date
elastic-renovate-prod[bot]
de5377df45
Update docker.elastic.co/wolfi/chainguard-base:latest Docker digest to 29150cd (#126066)
This PR contains the following updates:

| Package | Update | Change | |---|---|---| |
docker.elastic.co/wolfi/chainguard-base | digest | `c4e10ec` ->
`29150cd` |

---

### Configuration

📅 **Schedule**: Branch creation - "after 1pm on tuesday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once
you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMDcuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEwNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyI6RGVsaXZlcnkvUGFja2FnaW5nIiwiPm5vbi1pc3N1ZSIsIlRlYW06RGVsaXZlcnkiLCJhdXRvLW1lcmdlLXdpdGhvdXQtYXBwcm92YWwiXX0=-->
2025-04-02 06:19:48 +11:00
David Turner
0d64aab4cc
Clean up request parsing in S3HttpHandler (#126034)
The `METHOD /path/components?and=query` string representation of a
request is becoming increasingly difficult to parse, with slight
variations in parsing between the implementation in `S3HttpHandler` and
the various other implementations. This commit gets rid of the
string-concatenate-and-split behaviour in favour of a proper object that
has predicates for testing all the different kinds of request that might
be made against S3.
2025-04-02 05:49:50 +11:00
Patrick Doyle
b8c70ae36d
Custom getCallerClass in entitlement bridge (#125139) 2025-04-01 14:45:12 -04:00
Jack Conradson
24e4887748
Remember extraneous Painless code (#126057)
This removes some leftover remnants from using StringBuilder 
as part of String concatenation. Since we no longer support JDK 8, 
this code can be safely removed.
2025-04-01 11:41:54 -07:00
Joe Gallo
5c9cdeeb87
Bump junit and hamcrest (#126055) 2025-04-01 14:05:58 -04:00
elasticsearchmachine
e9c35547fa Mute org.elasticsearch.xpack.security.authz.RBACEngineTests testGetRoleDescriptorsIntersectionForRemoteClusterHasDeterministicOrderForIndicesPrivileges #126061 2025-04-02 04:59:24 +11:00
Colleen McGinnis
d966938842
add missing mapped pages (#126054) 2025-04-01 19:41:37 +02:00
Samiul Monir
d8ae61e91f
[Semantic Text] Integration Test (#125141)
* Initial draft test with index version  setup

* Adding test in phases

* [CI] Auto commit changes from spotless

* Adding test for search functionality

* Adding test for highlighting

* Adding randomization during selection process

* Fix code styles by running spotlessApply

* Fix code styles by running spotlessApply

* Fixing forbiddenAPIcall issue

* Decoupled namedWritables to use separate fake plugin and simplified other override methods

* Updating settings string to variable and removed unused code

* Fix SemanticQueryBuilder dependencies

* fix setting maximum number of tests to run

* utilizing semantci_text index version param and removed unwanted override

---------

Co-authored-by: elasticsearchmachine <infra-root+elasticsearchmachine@elastic.co>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
2025-04-01 09:42:50 -06:00
Benjamin Trent
6415e142ba
unmuting test #125902 (#126043)
fixed by: https://github.com/elastic/elasticsearch/pull/125877

closes: https://github.com/elastic/elasticsearch/issues/125902
2025-04-02 02:26:34 +11:00
Ioana Tagirta
0a4ea188b6
Remove QueryBuilderResolver (#125955) 2025-04-01 16:55:32 +02:00
Colleen McGinnis
0e537325fc
[docs] Remove as many redirects as possible (#125663)
* remove as many assembler-related redirects as possible

* Update docs/redirects.yml

* delete more unused temp redirects

* remove more redirects

* remove all redirects to see remaining errors
2025-04-01 16:53:59 +02:00
Nikolaj Volgushev
3be4fb199c
[Failure Store] Manage-style privileges grant both data and failures access (#125900)
It's more natural for `manage` and `manage_data_stream_lifecycle` to
grant access to management style APIs both for regular data streams and
their failure stores.

This PR adds support for privileges to grant access to both data and
failures selectors (without granting access to everything, à la `all`),
and extends `manage` and `manage_data_stream_lifecycle` to grant failure
store access, in addition to regular data stream access.
`manage_failure_store` still grants failures-only access.
2025-04-02 01:46:30 +11:00
Niels Bauman
a97e006454
Fix data stream retrieval in DataStreamLifecycleServiceRuntimeSecurityIT (#125667)
This test seemed to fail because we would index another document before
the master processed the data stream rollover - which is possible
because non-master nodes expose the next cluster state a little bit
earlier than the master node.

Caused by #122852

Fixes #124978
2025-04-01 14:57:36 +01:00
David Kyle
c521264815
[ML] Delay copying chunked input strings (#125837)
The chunked text is only required when the actual inference request is made, 
using a string supplier means the string creation can be done much much closer 
to where the request is made reducing the lifespan of the copied string.
2025-04-01 14:53:54 +01:00
Craig Taverner
7b263b4b83
Kibana updates, remove links from JSON and split is-null/is-not-null (#125986)
In particular:
* Remove all links (both asciidoc and markdown) from the JSON definition files.
  * This required a two phase edit, from asciidoc links to markdown, and then removal of markdown (replace with markdown text). This is because the asciidoc does not have the display text, and because some links were already markdown.
* Split predicates into is_null and is_not_null
  * We kept the old combined version because the main docs still use that, so now we have both combined and separate versions, and Kibana can select the version they want.
2025-04-01 15:46:24 +02:00
David Kyle
d3a1b21a59
[ML] Move Inference Service account classes into the service package (#125928) 2025-04-01 14:38:24 +01:00
elasticsearchmachine
a45d7941de Mute org.elasticsearch.action.RejectionActionIT testSimulatedSearchRejectionLoad #125901 2025-04-02 00:26:40 +11:00
조혜온
89adec154c
[ML] Resolve duplicate key exception in GetDatafeedRunningStateAction (#125477) 2025-04-01 14:16:17 +01:00
David Kyle
fc933d436a
[ML] Remove InferenceServiceResults#transformToLegacyFormat (#125924) 2025-04-01 13:49:48 +01:00
Ben Chaplin
610ba2305a
Update renamed MockLog class (#125971) 2025-04-01 08:46:43 -04:00
Nikolaj Volgushev
4f019d15cc
[Failure Store] Authorization denial messages (#125757)
This PR makes authorization denial messages account for privileges that
grant access to the failure store. This is a minimal implementation that
only displays information around failure store privileges for requests
that include concrete names with the `::failures` selector. This avoids
including irrelevant information in regular non-failures requests. We
can improve on this in follow ups. 

Closes: ES-11158
2025-04-01 22:29:20 +11:00
Ioana Tagirta
fd1c008c35
Enable semantic search in FORK (#125960) 2025-04-01 13:10:50 +02:00
David Kyle
3fbcb3cf9a
[ML] Add job id to reverting snapshot message (#126025) 2025-04-01 12:03:56 +01:00
Jim Ferenczi
42b7b78a31
[ES|QL] Infer the score mode to use from the Lucene collector (#125930)
This change uses the Lucene collector to infer which score mode to use
when the topN collector is used.
2025-04-01 11:52:27 +01:00
Niels Bauman
8028d5adde
Fix cat allocation YAML test (#126003)
This test failed when the `disk.indices.forecast` value was a decimal number.
We adjust the regex to allow decimal values and for consistency we also allow negative values.

Fixes #125711
Fixes #125848
Fixes #125661
2025-04-01 11:25:13 +01:00
Slobodan Adamović
c864c6c3ec
Return failure store privileges via get built-in privileges API (#125852)
Return `read_failure_store` and `manage_failure_store` via 
`GET /_security/privilege/_builtin` API.
2025-04-01 10:40:39 +02:00
Ievgen Degtiarenko
8bbd47404e
Speedup field exists check (#125943) 2025-04-01 10:37:57 +02:00
Slobodan Adamović
83d7fe0d82
Prevent :: selectors in remote cluster expressions when security is off (#125968)
This PR prevents using `::` selectors in remote index expressions and adds
a basic integration test with security off.

Relates to https://github.com/elastic/elasticsearch/pull/125252
2025-04-01 10:12:23 +02:00
Luca Cavanna
b01438a95f
Re-enable parallel collection for field sorted top hits (#125916)
With #123610 we disabled parallel collection for field and script sorted top hits,
aligning its behaviour with that of top level search. This was mainly to work around
a bug in script sorting that did not support inter-segment concurrency.

The bug with script sort has been fixed with #123757 and concurrency re-enabled for it.

While sort by field is not optimized for search concurrency, top hits benefits from it
and disabling concurrency for sort by field in top hits has caused performance
regressions in our nightly benchmarks.

This commit re-enables concurrency for top hits with sort by field is used. This
introduces back a discrepancy between top level search and top hits, in that concurrency
is applied for top hits despite sort by field normally disables it. The key difference
is the context where sorting is applied, and the fact that concurrency is disabled
only for performance reasons on top level searches and not for functional reasons.
2025-04-01 09:27:43 +02:00
elasticsearchmachine
61d92d6613 Mute org.elasticsearch.packaging.test.DockerTests test021InstallPlugin #116147 2025-04-01 10:50:52 +11:00
Jack Conradson
0e5bd3cbf3
Add exclusive file entitlement for settings (#125272)
Adds changes to ensure the correct caller's module is checked for exclusive file settings.
2025-03-31 14:54:14 -07:00
elasticsearchmachine
e6096a2ed8 Mute org.elasticsearch.search.SearchServiceSingleNodeTests testSlicingBehaviourForParallelCollection #125899 2025-04-01 08:28:00 +11:00
Mark Vieira
66ba3c2a53
Convert CCR module tests to new testing framework (#125894) 2025-03-31 14:16:19 -07:00
Mark Tozzi
70de5a82b4
Esql - add capability checks (#125987)
Add some capability checks that should resolve the CI failures around these tests.
2025-03-31 16:50:24 -04:00
Keith Massey
7a9edb5d95
Adding a cleanup method to EnterpriseGeoIpDownloaderIT (#125958) 2025-03-31 14:28:14 -05:00
Mark Vieira
421392af99
Convert more x-pack modules to new test framework (#125874) 2025-03-31 12:27:11 -07:00
Rene Groeschke
511c50967d
[CI] Fix LegacyYamlRestTestPluginFuncTest failure for not available java toolchain (#125976)
Wire in toolchain plugins into AbstractRestResourcesFuncTest to allow
resolving jdk

fixes #125534 , #125533 ,  #125532, #125531
2025-04-01 05:30:49 +11:00
Mark Vieira
e75891e49a
Convert x-pack fleet project to new test framework (#125743) 2025-03-31 10:30:38 -07:00
elasticsearchmachine
228d5e1ecb Mute org.elasticsearch.xpack.test.rest.XPackRestIT test {p0=transform/transforms_stats/Test get transform stats with timeout} #125975 2025-04-01 04:13:41 +11:00
Ryan Ernst
425cb70d50
Return null from transformer when not transforming (#125961)
The transform API for instrumentation should return null when no
transformation occurs. This commit fixes our entitlement transformer to
return null instead of the original buffer.

closes #125920
2025-03-31 18:09:11 +01:00
Iraklis Psaroudakis
11942e82ab
Introduce permitAcquired in ensureMutable (#125801)
Relates ES-11159
2025-03-31 19:38:36 +03:00
Rene Groeschke
f79ff970ea
Ignore Fips docker images in packages tests for now (#125942)
* Ignore Fips docker images in packages tests for now

Handled in a later work package

* Fix typo
2025-03-31 18:23:26 +02:00
elasticsearchmachine
9b7ee210d3 Mute org.elasticsearch.xpack.ilm.actions.SearchableSnapshotActionIT testResumingSearchableSnapshotFromPartialToFull #125789 2025-04-01 02:41:35 +11:00
Sam Xiao
bddc14c232
Add multi-project support for health indicator shards_availability (#125512) 2025-03-31 11:12:52 -04:00
Niels Bauman
fd2492f935
Optimize usage calculation in ILM policies retrieval API (#106953)
Optimize calculating the usage of ILM policies in the `GET _ilm/policy` and `GET _ilm/policy/<policy_id>` endpoints by xtracting a separate class that pre-computes some parts on initialization (i.e. only once per request) and then uses those pre-computed parts when calculating the usage for an individual policy. By precomputing all the usages, the class makes a tradeoff by using a little bit more memory to significantly improve the overall processing time.
2025-03-31 16:11:41 +01:00
Stanislav Malyshev
242a195ad8
Unmute CrossClusterAsyncQueryStopIT tests (#125895) 2025-03-31 16:06:35 +01:00
Keith Massey
939dc8bb8e
Re-enabling EnterpriseGeoIpDownloaderIT with verbose logging (#125884) 2025-03-31 09:47:53 -05:00
Mark Tozzi
f37564d938
Lower logging level (#125940)
In #125595 I accidentally left some logging at WARN level; this PR corrects that to TRACE.
2025-03-31 14:58:45 +01:00
Niels Bauman
a8f5db2604
Make data stream lifecycle project-aware (#125476)
Now that all actions that DLM depends on are project-aware, we can make DLM itself project-aware.
There still exists only one instance of `DataStreamLifecycleService`, it just loops over all the projects - which matches the approach we've taken for similar scenarios thus far.
2025-03-31 14:52:43 +01:00
elasticsearchmachine
be9ebd0084 Mute org.elasticsearch.xpack.esql.action.ManyShardsIT testCancelUnnecessaryRequests #125947 2025-04-01 00:46:24 +11:00