Skip to content

Add seperate interface for UIAM authentication#138635

Merged
elasticsearchmachine merged 4 commits intoelastic:mainfrom
ywangd:ES-13662-expand-uiam-authentication
Nov 26, 2025
Merged

Add seperate interface for UIAM authentication#138635
elasticsearchmachine merged 4 commits intoelastic:mainfrom
ywangd:ES-13662-expand-uiam-authentication

Conversation

@ywangd
Copy link
Copy Markdown
Member

@ywangd ywangd commented Nov 26, 2025

This PR separate allowCrossProject from IndicesRequest.Replaceable into its own interface so that it can be implemented by requests that are not replaceable, such as ES|QL query request.

Relates: ES-13662

Co-authored-by: Slobodan Adamović slobodanadamovic@users.noreply.github.com

This PR separate allowCrossProject from IndicesRequest.Replaceable into
its own interface so that it can be implemented by requests that are not
replaceable, such as ES|QL query request.

Relates: ES-13662
@ywangd ywangd added >non-issue :Security/Security Security issues without another label v9.3.0 labels Nov 26, 2025
@elasticsearchmachine
Copy link
Copy Markdown
Collaborator

Pinging @elastic/es-security (Team:Security)

@elasticsearchmachine elasticsearchmachine added Team:Security Meta label for security team serverless-linked Added by automation, don't add manually labels Nov 26, 2025
Comment on lines +564 to 565
// If more exceptions are found, we can add a comment to above linked issue and relax this check further
assert replaceable.indices() == null || isNoneExpression(replaceable.indices()) : message;
Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Slobodan ran into this assertion failure. But I haven't seen it so far. This is a known issue. So I added a comment to say that we can relax it if it is triggered.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I run into this while running a newly added CPS ES|QL test.

Copy link
Copy Markdown
Contributor

@idegtiarenko idegtiarenko Dec 1, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unfortunately it looks like this is happening in #138814

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for reporting. I raised #138855

Copy link
Copy Markdown
Contributor

@slobodanadamovic slobodanadamovic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@ywangd ywangd added the auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) label Nov 26, 2025
@elasticsearchmachine elasticsearchmachine merged commit 6932053 into elastic:main Nov 26, 2025
40 checks passed
@ywangd ywangd deleted the ES-13662-expand-uiam-authentication branch November 26, 2025 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) >non-issue :Security/Security Security issues without another label serverless-linked Added by automation, don't add manually Team:Security Meta label for security team v9.3.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants