elasticsearch/qa
Lorenzo Dematté 591a08f506
[Entitlements] Validation checks on paths (#126852) (#127055)
With this PR we restrict the paths we allow access to, forbidding plugins to specify/request entitlements for reading or writing to specific protected directories.

I added this validation to EntitlementInitialization, as I wanted to fail fast and this is the earliest occurrence where we have all we need: PathLookup to resolve relative paths, policies (for plugins, server, agents) and the Paths for the specific directories we want to protect.

Relates to ES-10918
2025-04-19 00:44:49 +10:00
..
ccs-common-rest Add feature flag for subobjects auto (#114616) (#114678) 2024-10-13 05:08:41 +11:00
ccs-rolling-upgrade-remote-cluster [8.x] [Gradle] Make rolling upgrade tests configuration cache compatible (#119577) (#120315) 2025-01-30 04:15:33 +11:00
ccs-unavailable-clusters Fix SearchResponse leak in CrossClusterSearchUnavailableClusterIT (#121681) (#121696) 2025-02-05 06:51:10 +11:00
custom-rest-controller Add AGPLv3 as a supported license 2024-09-13 14:30:33 -07:00
evil-tests [Entitlements] Replace Permissions with Entitlements in InstallPluginAction (#125207) (#126119) 2025-04-02 17:05:18 +02:00
full-cluster-restart [8.18] Avoid serializing empty _source fields in mappings. (#124198) 2025-03-08 08:44:20 +01:00
logging-config [8.x] [TEST] Migrated REST tests extending JsonLogsIntegTestCase (#115188) (#116025) 2024-11-04 20:59:59 +11:00
logging-spi Update Gradle wrapper to 8.12 (#118683) (#119363) 2024-12-31 08:36:31 +01:00
mixed-cluster [8.18] Non existing synonyms sets do not fail shard recovery (#125659) (#125796) 2025-03-28 07:39:43 +01:00
multi-cluster-search [8.x] Only aggregations require at least one shard request (#115314) (#115794) 2024-12-05 10:32:26 +01:00
no-bootstrap-tests Rename environment dir accessors (#121803) (#121836) 2025-02-06 10:28:25 +11:00
packaging [Entitlements] Validation checks on paths (#126852) (#127055) 2025-04-19 00:44:49 +10:00
remote-clusters Update Gradle wrapper to 8.12 (#118683) (#119363) 2024-12-31 08:36:31 +01:00
repository-multi-version [8.x] [Gradle] Remove static use of BuildParams (#115122) (#117436) 2024-11-25 18:28:51 +01:00
restricted-loggers Add AGPLv3 as a supported license 2024-09-13 14:30:33 -07:00
rolling-upgrade [8.18] Avoid serializing empty _source fields in mappings. (#124198) 2025-03-08 08:44:20 +01:00
rolling-upgrade-legacy [8.x] [Gradle] Make rolling upgrade tests configuration cache compatible (#119577) (#120315) 2025-01-30 04:15:33 +11:00
smoke-test-http Fix race condition in RestCancellableNodeClient (#126686) (#126696) 2025-04-12 02:09:05 +10:00
smoke-test-ingest-disabled [8.18] Migrate legacy QA projects to new test clusters framework (#125545) (#125718) 2025-03-27 10:07:37 -07:00
smoke-test-ingest-with-all-dependencies [8.18] Migrate legacy QA projects to new test clusters framework (#125545) (#125718) 2025-03-27 10:07:37 -07:00
smoke-test-multinode Add feature flag for subobjects auto (#114616) (#114678) 2024-10-13 05:08:41 +11:00
smoke-test-plugins [8.18] Migrate legacy QA projects to new test clusters framework (#125545) (#125718) 2025-03-27 10:07:37 -07:00
stable-api Validate that stable plugins do not break compatibility (#92776) 2023-01-18 06:48:48 -05:00
system-indices [8.18] Migrate legacy QA projects to new test clusters framework (#125545) (#125718) 2025-03-27 10:07:37 -07:00
unconfigured-node-name [8.x] [TEST] Migrated REST tests extending JsonLogsIntegTestCase (#115188) (#116025) 2024-11-04 20:59:59 +11:00
verify-version-constants [8.18] Re-enable VerifyVersionConstantsIT (#125605) (#125616) 2025-03-26 13:43:07 +11:00
build.gradle Do not create unused testCluster (#77581) 2021-09-23 03:45:59 -04:00