elastic/elasticsearch

Security BWC tests with more complex cluster topologies

Open

#30,109 建立於 2017年9月28日

在 GitHub 查看
 (3 留言) (0 反應) (0 負責人)Java (25,882 fork)batch import
:Security/Security>testTeam:Securityhelp wanted

倉庫指標

Star
 (76,700 star)
PR 合併指標
 (平均合併 2天) (30 天內合併 1,000 個 PR)

描述

Original comment by @tvernum:

The change to introduce the _xpack_security system user (LINK REDACTED) seems to have had a couple of different BWC issues that weren't picked up by our tests.

  1. If a new node, tried to load security data from an old node, it would try to use the new user and fail because the old node didn't recognise the _xpack_security system user. (Fixed in LINK REDACTED) LINK REDACTED

  2. If an old node tried to load security data from a new node, it would try to use the old user and fail because the older user no longer has permission to read security data. (Also fixed in LINK REDACTED) LINK REDACTED

It would be helpful to have some security tests that run with the sorts of more complex cluster setups (dedicated coordinating nodes, dedicated master nodes) that pull out these issues.

貢獻者指南