Skip to content

[FIPS / CI] Add sudo fallback for ES3 cleanup#232855

Merged
Ikuni17 merged 3 commits intoelastic:mainfrom
Ikuni17:fix/fips-es3-rm-permissions
Aug 28, 2025
Merged

[FIPS / CI] Add sudo fallback for ES3 cleanup#232855
Ikuni17 merged 3 commits intoelastic:mainfrom
Ikuni17:fix/fips-es3-rm-permissions

Conversation

@Ikuni17
Copy link
Contributor

@Ikuni17 Ikuni17 commented Aug 25, 2025

Summary

The FIPS pipeline is seeing permission denied issues when cleaning up ES3 cluster_state:
https://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247

I'm not sure of the root cause, cannot reproduce locally, and not sure why this is only happening in FIPS mode. This is mainly to unblock for now. Test run:
https://buildkite.com/elastic/kibana-fips/builds/691#

@Ikuni17 Ikuni17 self-assigned this Aug 25, 2025
@Ikuni17 Ikuni17 added release_note:skip Skip the PR/issue when compiling release notes backport:prev-major labels Aug 25, 2025
@Ikuni17 Ikuni17 changed the title [CI] Add sudo fallback for ES3 cleanup [FIPS / CI] Add sudo fallback for ES3 cleanup Aug 26, 2025
@Ikuni17 Ikuni17 added the Team:Operations Kibana-Operations Team label Aug 26, 2025
@Ikuni17 Ikuni17 marked this pull request as ready for review August 26, 2025 17:36
@Ikuni17 Ikuni17 requested a review from a team as a code owner August 26, 2025 17:36
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-operations (Team:Operations)

@Ikuni17 Ikuni17 enabled auto-merge (squash) August 26, 2025 17:36
@elasticmachine
Copy link
Contributor

⏳ Build in-progress, with failures

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #58 / OneChat Endpoints Builtin Tools internal API POST /internal/chat/tools/_bulk_delete should handle mixed bulk delete with builtin and custom tools
  • [job] [logs] FTR Configs #58 / OneChat Endpoints Builtin Tools internal API POST /internal/chat/tools/_bulk_delete should handle mixed bulk delete with builtin and custom tools

cc @Ikuni17

@Ikuni17
Copy link
Contributor Author

Ikuni17 commented Aug 28, 2025

CI passed, comment didn't update

@Ikuni17 Ikuni17 merged commit c42804c into elastic:main Aug 28, 2025
12 checks passed
@kibanamachine
Copy link
Contributor

Starting backport for target branches: 8.18, 8.19, 9.0, 9.1

https://github.com/elastic/kibana/actions/runs/17306433404

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Aug 28, 2025
## Summary

The FIPS pipeline is seeing permission denied issues when cleaning up
ES3 `cluster_state`:

https://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247

I'm not sure of the root cause, or why this is only happening in FIPS
mode. This is mainly to unblock for now. Test run:
https://buildkite.com/elastic/kibana-fips/builds/691#_

(cherry picked from commit c42804c)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Aug 28, 2025
## Summary

The FIPS pipeline is seeing permission denied issues when cleaning up
ES3 `cluster_state`:

https://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247

I'm not sure of the root cause, or why this is only happening in FIPS
mode. This is mainly to unblock for now. Test run:
https://buildkite.com/elastic/kibana-fips/builds/691#_

(cherry picked from commit c42804c)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Aug 28, 2025
## Summary

The FIPS pipeline is seeing permission denied issues when cleaning up
ES3 `cluster_state`:

https://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247

I'm not sure of the root cause, or why this is only happening in FIPS
mode. This is mainly to unblock for now. Test run:
https://buildkite.com/elastic/kibana-fips/builds/691#_

(cherry picked from commit c42804c)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Aug 28, 2025
## Summary

The FIPS pipeline is seeing permission denied issues when cleaning up
ES3 `cluster_state`:

https://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247

I'm not sure of the root cause, or why this is only happening in FIPS
mode. This is mainly to unblock for now. Test run:
https://buildkite.com/elastic/kibana-fips/builds/691#_

(cherry picked from commit c42804c)
@kibanamachine
Copy link
Contributor

💚 All backports created successfully

Status Branch Result
8.18
8.19
9.0
9.1

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit that referenced this pull request Aug 28, 2025
# Backport

This will backport the following commits from `main` to `9.1`:
- [[FIPS / CI] Add sudo fallback for ES3 cleanup
(#232855)](#232855)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Brad
White","email":"Ikuni17@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-08-28T19:53:18Z","message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Operations","release_note:skip","backport:prev-major","backport:current-major","v9.2.0"],"title":"[FIPS
/ CI] Add sudo fallback for ES3
cleanup","number":232855,"url":"https://github.com/elastic/kibana/pull/232855","mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/232855","number":232855,"mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}}]}]
BACKPORT-->

Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Aug 28, 2025
# Backport

This will backport the following commits from `main` to `8.19`:
- [[FIPS / CI] Add sudo fallback for ES3 cleanup
(#232855)](#232855)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Brad
White","email":"Ikuni17@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-08-28T19:53:18Z","message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Operations","release_note:skip","backport:prev-major","backport:current-major","v9.2.0"],"title":"[FIPS
/ CI] Add sudo fallback for ES3
cleanup","number":232855,"url":"https://github.com/elastic/kibana/pull/232855","mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/232855","number":232855,"mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}}]}]
BACKPORT-->

Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Aug 28, 2025
# Backport

This will backport the following commits from `main` to `9.0`:
- [[FIPS / CI] Add sudo fallback for ES3 cleanup
(#232855)](#232855)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Brad
White","email":"Ikuni17@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-08-28T19:53:18Z","message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Operations","release_note:skip","backport:prev-major","backport:current-major","v9.2.0"],"title":"[FIPS
/ CI] Add sudo fallback for ES3
cleanup","number":232855,"url":"https://github.com/elastic/kibana/pull/232855","mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/232855","number":232855,"mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}}]}]
BACKPORT-->

Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Aug 28, 2025
# Backport

This will backport the following commits from `main` to `8.18`:
- [[FIPS / CI] Add sudo fallback for ES3 cleanup
(#232855)](#232855)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Brad
White","email":"Ikuni17@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-08-28T19:53:18Z","message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Operations","release_note:skip","backport:prev-major","backport:current-major","v9.2.0"],"title":"[FIPS
/ CI] Add sudo fallback for ES3
cleanup","number":232855,"url":"https://github.com/elastic/kibana/pull/232855","mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/232855","number":232855,"mergeCommit":{"message":"[FIPS
/ CI] Add sudo fallback for ES3 cleanup (#232855)\n\n## Summary\n\nThe
FIPS pipeline is seeing permission denied issues when cleaning up\nES3
`cluster_state`:\n\nhttps://buildkite.com/elastic/kibana-fips/builds/693#0198e5b6-3a14-44ab-87ea-552a06f6002c/5228-5247\n\nI'm
not sure of the root cause, or why this is only happening in FIPS\nmode.
This is mainly to unblock for now. Test
run:\nhttps://buildkite.com/elastic/kibana-fips/builds/691#_","sha":"c42804c3e81592b20077694849dcedf204a6cb3b"}}]}]
BACKPORT-->

Co-authored-by: Brad White <Ikuni17@users.noreply.github.com>
@Ikuni17 Ikuni17 deleted the fix/fips-es3-rm-permissions branch October 24, 2025 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release_note:skip Skip the PR/issue when compiling release notes Team:Operations Kibana-Operations Team v8.18.6 v8.19.3 v9.0.6 v9.1.3 v9.2.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants