honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use system context for looking up connected nodes (#43991) 

When finding nodes in a connected cluster for cross cluster
search the requests to get cluster state on the connected
cluster should be made in the system context because
logically they are equivalent to checking a single detail
in the local cluster state and should not require that the
user who made the request that is using this method in its
implementation is authorized to view the entire cluster
state.

Fixes #43974
This commit is contained in:
David Roberts 2019-07-23 12:55:56 +01:00
parent 899c62ad02
commit 5e3010a606
1 changed files with 39 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
server/src/main/java/org/elasticsearch/transport/RemoteClusterConnection.java
View File

@ -192,9 +192,21 @@ final class RemoteClusterConnection implements TransportConnectionListener, Clos
/** /**
* Collects all nodes on the connected cluster and returns / passes a nodeID to {@link DiscoveryNode} lookup function * Collects all nodes on the connected cluster and returns / passes a nodeID to {@link DiscoveryNode} lookup function
* that returns <code>null</code> if the node ID is not found. * that returns <code>null</code> if the node ID is not found.
*
* The requests to get cluster state on the connected cluster are made in the system context because logically
* they are equivalent to checking a single detail in the local cluster state and should not require that the
* user who made the request that is using this method in its implementation is authorized to view the entire
* cluster state.
*/ */
void collectNodes(ActionListener<Function<String, DiscoveryNode>> listener) { void collectNodes(ActionListener<Function<String, DiscoveryNode>> listener) {
Runnable runnable = () -> { Runnable runnable = () -> {
final ThreadContext threadContext = threadPool.getThreadContext();
final ContextPreservingActionListener<Function<String, DiscoveryNode>> contextPreservingActionListener =
new ContextPreservingActionListener<>(threadContext.newRestorableContext(false), listener);
try (ThreadContext.StoredContext ignore = threadContext.stashContext()) {
// we stash any context here since this is an internal execution and should not leak any existing context information
threadContext.markAsSystemContext();
final ClusterStateRequest request = new ClusterStateRequest(); final ClusterStateRequest request = new ClusterStateRequest();
request.clear(); request.clear();
request.nodes(true); request.nodes(true);
@ -212,12 +224,12 @@ final class RemoteClusterConnection implements TransportConnectionListener, Clos
@Override @Override
public void handleResponse(ClusterStateResponse response) { public void handleResponse(ClusterStateResponse response) {
DiscoveryNodes nodes = response.getState().nodes(); DiscoveryNodes nodes = response.getState().nodes();
listener.onResponse(nodes::get); contextPreservingActionListener.onResponse(nodes::get);
} }
@Override @Override
public void handleException(TransportException exp) { public void handleException(TransportException exp) {
listener.onFailure(exp); contextPreservingActionListener.onFailure(exp);
} }
@Override @Override
@ -225,6 +237,7 @@ final class RemoteClusterConnection implements TransportConnectionListener, Clos
return ThreadPool.Names.SAME; return ThreadPool.Names.SAME;
} }
}); });
}
}; };
try { try {
// just in case if we are not connected for some reason we try to connect and if we fail we have to notify the listener // just in case if we are not connected for some reason we try to connect and if we fail we have to notify the listener