Skip to content

Conversation

mosche
Copy link
Contributor

@mosche mosche commented Jul 29, 2025

Backports the following commits to 9.1:

Previously, entitlement checks got disabled when resetting the policy manager (which defaults to inactive). This change makes sure entitlements are correctly enabled during tests.

Due to the lack of entitlement delegation (and usage of server's FileSystemUtils and similar in test code), there's a few remaining issues:
- various tests have to run without entitlements
- node base dirs cannot be removed immediately when shutting down the node due to pending cleanups (wipePendingDataDirectories)

Due to Netty dependency issues (ES-12435), azure and inference tests have to run without entitlements.
@mosche mosche requested a review from a team as a code owner July 29, 2025 12:02
@mosche mosche added :Core/Infra/Entitlements Entitlements infrastructure >refactoring auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport Team:Core/Infra Meta label for core/infra team test-fips Trigger CI checks for FIPS test-windows Trigger CI checks on Windows labels Jul 29, 2025
@elasticsearchmachine elasticsearchmachine merged commit 2479ec4 into elastic:9.1 Jul 29, 2025
46 checks passed
@mosche mosche deleted the backport/9.1/pr-131539 branch July 29, 2025 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport :Core/Infra/Entitlements Entitlements infrastructure >refactoring Team:Core/Infra Meta label for core/infra team test-fips Trigger CI checks for FIPS test-windows Trigger CI checks on Windows v9.1.1
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants