Skip to content

Conversation

@mark-vieira
Copy link
Contributor

The issue with this test failure is actually that we were silently failing to install the plugin under test into the cluster. The root cause here was the FIPS security policy file was not copied into cluster config directory before we attempting to run the plugin installer. Since we pass the FIPS JVM arguments to all CLI tools as well this caused plugin installation to fail. We now ensure that these files are copied before we attempt to run any ES tools.

Closes #93303

@mark-vieira mark-vieira added >test Issues or PRs that are addressing/adding tests :Delivery/Build Build or test infrastructure Team:Security Meta label for security team :Security/FIPS Running ES in FIPS 140-2 mode auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) auto-backport-and-merge v8.6.2 v7.17.10 labels Jan 30, 2023
@elasticsearchmachine elasticsearchmachine added Team:Delivery Meta label for Delivery team v8.7.0 labels Jan 30, 2023
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-delivery (Team:Delivery)

@elasticsearchmachine elasticsearchmachine merged commit 91d111e into elastic:main Jan 30, 2023
@mark-vieira mark-vieira deleted the even_more_fips_fixes branch January 30, 2023 23:53
mark-vieira added a commit to mark-vieira/elasticsearch that referenced this pull request Jan 30, 2023
The issue with this test failure is actually that we were silently
failing to install the plugin under test into the cluster. The root
cause here was the FIPS security policy file was not copied into cluster
config directory before we attempting to run the plugin installer. Since
we pass the FIPS JVM arguments to all CLI tools as well this caused
plugin installation to fail. We now ensure that these files are copied
before we attempt to run _any_ ES tools.

Closes elastic#93303
mark-vieira added a commit to mark-vieira/elasticsearch that referenced this pull request Jan 30, 2023
The issue with this test failure is actually that we were silently
failing to install the plugin under test into the cluster. The root
cause here was the FIPS security policy file was not copied into cluster
config directory before we attempting to run the plugin installer. Since
we pass the FIPS JVM arguments to all CLI tools as well this caused
plugin installation to fail. We now ensure that these files are copied
before we attempt to run _any_ ES tools.

Closes elastic#93303
@elasticsearchmachine
Copy link
Collaborator

💚 Backport successful

Status Branch Result
8.6
7.17

elasticsearchmachine pushed a commit that referenced this pull request Jan 31, 2023
…3365)

The issue with this test failure is actually that we were silently
failing to install the plugin under test into the cluster. The root
cause here was the FIPS security policy file was not copied into cluster
config directory before we attempting to run the plugin installer. Since
we pass the FIPS JVM arguments to all CLI tools as well this caused
plugin installation to fail. We now ensure that these files are copied
before we attempt to run _any_ ES tools.

Closes #93303
elasticsearchmachine pushed a commit that referenced this pull request Jan 31, 2023
…3364)

The issue with this test failure is actually that we were silently
failing to install the plugin under test into the cluster. The root
cause here was the FIPS security policy file was not copied into cluster
config directory before we attempting to run the plugin installer. Since
we pass the FIPS JVM arguments to all CLI tools as well this caused
plugin installation to fail. We now ensure that these files are copied
before we attempt to run _any_ ES tools.

Closes #93303
mark-vieira added a commit to mark-vieira/elasticsearch that referenced this pull request Jan 31, 2023
The issue with this test failure is actually that we were silently
failing to install the plugin under test into the cluster. The root
cause here was the FIPS security policy file was not copied into cluster
config directory before we attempting to run the plugin installer. Since
we pass the FIPS JVM arguments to all CLI tools as well this caused
plugin installation to fail. We now ensure that these files are copied
before we attempt to run _any_ ES tools.

Closes elastic#93303
@javanna
Copy link
Member

javanna commented Jan 31, 2023

Thanks for fixing @mark-vieira !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) :Delivery/Build Build or test infrastructure :Security/FIPS Running ES in FIPS 140-2 mode Team:Delivery Meta label for Delivery team Team:Security Meta label for security team >test Issues or PRs that are addressing/adding tests v7.17.10 v8.6.2 v8.7.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[CI] MapperSizeClientYamlTestSuiteIT test {yaml=mapper_size/10_basic/Mapper Size} failing

3 participants