elastic/elasticsearch

Security BWC tests with more complex cluster topologies

Open

#30,109 创建于 2017年9月28日

在 GitHub 查看
 (3 评论) (0 反应) (0 负责人)Java (25,882 fork)batch import
:Security/Security>testTeam:Securityhelp wanted

仓库指标

Star
 (76,700 star)
PR 合并指标
 (平均合并 2天) (30 天内合并 1,000 个 PR)

描述

Original comment by @tvernum:

The change to introduce the _xpack_security system user (LINK REDACTED) seems to have had a couple of different BWC issues that weren't picked up by our tests.

  1. If a new node, tried to load security data from an old node, it would try to use the new user and fail because the old node didn't recognise the _xpack_security system user. (Fixed in LINK REDACTED) LINK REDACTED

  2. If an old node tried to load security data from a new node, it would try to use the old user and fail because the older user no longer has permission to read security data. (Also fixed in LINK REDACTED) LINK REDACTED

It would be helpful to have some security tests that run with the sorts of more complex cluster setups (dedicated coordinating nodes, dedicated master nodes) that pull out these issues.

贡献者指南