Skip to content

Conversation

@ywangd
Copy link
Member

@ywangd ywangd commented Mar 31, 2022

CCR user on the leader cluster needs more privileges than what are
documented (#61308). Specifically it needs to renew the retention lease
at a fixed time interval. This PR fixes it by granting the "manage"
index privilege to the CCR user on the leader cluster.

Note we still want to revisit privileges required CCR or at least fix
our documentation. This will be tracked with #61308.

Resolves: #84156

Backport: #84467

…ic#84467)

CCR user on the leader cluster needs more privileges than what are
documented (elastic#61308). Specifically it needs to renew the retention lease
at a fixed time interval. This PR fixes it by granting the "manage"
index privilege to the CCR user on the leader cluster.

Note we still want to revisit privileges required CCR or at least fix
our documentation. This will be tracked with elastic#61308.

Resolves: elastic#84156
@ywangd ywangd added backport auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) labels Mar 31, 2022
@elasticsearchmachine elasticsearchmachine merged commit debaab0 into elastic:7.17 Mar 31, 2022
@ywangd ywangd deleted the es-84156-follower-security-7.17 branch March 31, 2022 01:07
tlrx added a commit to tlrx/elasticsearch that referenced this pull request Apr 25, 2022
Now elastic#84467 has been backported to 7.17 (elastic#85514) the recent failures
are always due to monitoring docs not being indexed in monitoring
indices within 30s.

Similarly to what has been done for `AutoFollowIT.testAutoFollowPatterns()`
in elastic#85278 which reduced the number of failures, we can wait longer in
`FollowIndexSecurityIT.testAutoFollowPatterns()` for monitoring docs
to be indexed.

Closes elastic#84888
tlrx added a commit that referenced this pull request Apr 26, 2022
…86140)

Now #84467 has been backported to 7.17 (#85514) the recent failures
are always due to monitoring docs not being indexed in monitoring
indices within 30s.

Similarly to what has been done for `AutoFollowIT.testAutoFollowPatterns()`
in #85278 which reduced the number of failures, we can wait longer in
`FollowIndexSecurityIT.testAutoFollowPatterns()` for monitoring docs
to be indexed.

Closes #84888
tlrx added a commit to tlrx/elasticsearch that referenced this pull request Apr 26, 2022
…lastic#86140)

Now elastic#84467 has been backported to 7.17 (elastic#85514) the recent failures
are always due to monitoring docs not being indexed in monitoring
indices within 30s.

Similarly to what has been done for `AutoFollowIT.testAutoFollowPatterns()`
in elastic#85278 which reduced the number of failures, we can wait longer in
`FollowIndexSecurityIT.testAutoFollowPatterns()` for monitoring docs
to be indexed.

Closes elastic#84888
tlrx added a commit to tlrx/elasticsearch that referenced this pull request Apr 26, 2022
…lastic#86140)

Now elastic#84467 has been backported to 7.17 (elastic#85514) the recent failures
are always due to monitoring docs not being indexed in monitoring
indices within 30s.

Similarly to what has been done for `AutoFollowIT.testAutoFollowPatterns()`
in elastic#85278 which reduced the number of failures, we can wait longer in
`FollowIndexSecurityIT.testAutoFollowPatterns()` for monitoring docs
to be indexed.

Closes elastic#84888
elasticsearchmachine pushed a commit that referenced this pull request Apr 26, 2022
…86140) (#86172)

Now #84467 has been backported to 7.17 (#85514) the recent failures
are always due to monitoring docs not being indexed in monitoring
indices within 30s.

Similarly to what has been done for `AutoFollowIT.testAutoFollowPatterns()`
in #85278 which reduced the number of failures, we can wait longer in
`FollowIndexSecurityIT.testAutoFollowPatterns()` for monitoring docs
to be indexed.

Closes #84888
elasticsearchmachine pushed a commit that referenced this pull request Apr 26, 2022
…86140) (#86174)

Now #84467 has been backported to 7.17 (#85514) the recent failures
are always due to monitoring docs not being indexed in monitoring
indices within 30s.

Similarly to what has been done for `AutoFollowIT.testAutoFollowPatterns()`
in #85278 which reduced the number of failures, we can wait longer in
`FollowIndexSecurityIT.testAutoFollowPatterns()` for monitoring docs
to be indexed.

Closes #84888
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport v7.17.3

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants