b228ad0511
[Security] Cache action privilege testing for bulk items ( elastic/x-pack-elasticsearch#2526 )
...
Since we are authorising on a single shard of a single index,
and there are only 3 possible actions that an item might represent,
we can test which items are authorised with a maximum of 3 permission
evaluations, regardless of how many items are actually in the shard
request. Previously we would test them all independently which had
a much higher overhead for large bulk requests.
Relates: elastic/x-pack-elasticsearch#2369
Original commit: elastic/x-pack-elasticsearch@aceacf0aa3
2017-10-04 18:46:37 +11:00
8980357a29
[Security] Handle no-content gracefully ( elastic/x-pack-elasticsearch#2610 )
...
A number of REST requests require a body but did not explicitly validate for it.
This would typically cause a NPE if they were called with no body.
Original commit: elastic/x-pack-elasticsearch@863ac89429
2017-10-04 18:45:40 +11:00
f5864c7291
Move away from `Settings#getAsMap()` ( elastic/x-pack-elasticsearch#2661 )
...
Relates to elastic/elasticsearch#26845
Original commit: elastic/x-pack-elasticsearch@0323ea07a5
2017-10-04 01:21:59 -06:00
8268cecb80
Tests: Replace script with search transform to remove plugin in test code ( elastic/x-pack-elasticsearch#2470 )
...
The test also used the timewarp trigger for watches to be executed, but it is sufficient to just call the execute watch API to make this test faster.
Original commit: elastic/x-pack-elasticsearch@3a4165f72c
2017-10-04 09:12:13 +02:00
0be7255029
[ML] Allow dynamic updates to the xpack.ml.max_model_memory_limit setting ( elastic/x-pack-elasticsearch#2503 )
...
A key limitation with this is that the updated setting only applies when
jobs are created or updated. It does NOT automatically restrict existing
jobs.
relates elastic/x-pack-elasticsearch#2462
Original commit: elastic/x-pack-elasticsearch@73bd08db3f
2017-10-03 14:22:46 +01:00
c7b4ef9a89
Add cgroup memory usage/limit to OS stats on Linux ( elastic/x-pack-elasticsearch#2614 )
...
This change adapts the monitoring tests to account for an addition to
the OS stats made in elastic/elasticsearch#26166 .
Original commit: elastic/x-pack-elasticsearch@9e36764857
2017-10-03 12:09:59 +01:00
3e0644b891
Tests: Fix test assertion in execution service test
...
No need for exact duration value check, just make sure it is
not zero based.
relates elastic/x-pack-elasticsearch#2525
Original commit: elastic/x-pack-elasticsearch@1fe3a0bf5a
2017-10-02 14:33:10 +02:00
90b2b74e76
[ML] Tolerate a body without timestamp for get_buckets with a timestamp ( elastic/x-pack-elasticsearch#2640 )
...
When getting a single bucket, the get_buckets API can take a timestamp
either in the body or in the URL. Prior to this change, if a timestamp
was specified in the URL but a body not containing a timestamp was specified
(either empty or containing other parameters like exclude_interim or sort)
then it would cause a bad_request exception. This in turn causes problems
for clients that cannot send a body when GETting and always send a body when
POSTing.
This change fixes get_buckets to always read any timestamp in the URL, even
when a body is sent.
relates elastic/x-pack-elasticsearch#2515
Original commit: elastic/x-pack-elasticsearch@5c23dd972e
2017-09-29 09:17:36 +01:00
feabaad46a
[DOCS] Renamed X-Pack release notes
...
Original commit: elastic/x-pack-elasticsearch@485ddb14f2
2017-09-28 18:30:25 -07:00
7a67f4bce5
[DOCS] Add X-Pack release notes to Elasticsearch Reference ( elastic/x-pack-elasticsearch#2642 )
...
* [DOCS] Add X-Pack release notes to Elasticsearch Reference
* [DOCS] Added X-Pack release note links
Original commit: elastic/x-pack-elasticsearch@2c2561cb6c
2017-09-28 18:04:02 -07:00
0a89abdd7b
[ML] snapshot_id is required when reverting a model snapshot ( elastic/x-pack-elasticsearch#2641 )
...
Previously the API spec did not say this.
Original commit: elastic/x-pack-elasticsearch@eaf214411d
2017-09-28 09:24:50 +01:00
9b97f50001
[DOCS] Update type for category_id ( elastic/x-pack-elasticsearch#2197 )
...
Make category_id a long to align with the implementation.
Original commit: elastic/x-pack-elasticsearch@9873824281
2017-09-27 15:08:37 +01:00
95a5d36289
[DOCS] Add watcher and elevated privilege info ( elastic/x-pack-elasticsearch#2632 )
...
Original commit: elastic/x-pack-elasticsearch@2dcbace8a0
2017-09-26 13:26:02 -07:00
ea05298087
[DOCS] Fixed bad link
...
Original commit: elastic/x-pack-elasticsearch@bb733b7877
2017-09-26 09:40:12 -07:00
64e2f4c93c
Update bootstrap security details ( elastic/x-pack-elasticsearch#2430 )
...
* [DOCS] Update bootstrap security details
* [DOCS] Addressed feedback about bootstrap
* [DOCS] Update bootstrap password details
* [DOCS] Addressed feedback about setup-passwords
* [DOCS] Update security in x-pack install info
* [DOCS] Remove bootstrap.password details
* [DOCS] Update setup-passwords info
* [DOCS] Re-add bootstrap.password details
Original commit: elastic/x-pack-elasticsearch@04d3ee8509
2017-09-26 08:52:04 -07:00
b3ae022985
[ML] Remove unused member in NativeAutodetectProcessFactory ( elastic/x-pack-elasticsearch#2629 )
...
Original commit: elastic/x-pack-elasticsearch@31f265f0e5
2017-09-26 14:12:27 +01:00
5ad170a7ed
Fix compilation due to upstream change
...
Original commit: elastic/x-pack-elasticsearch@57d834841d
2017-09-26 12:11:53 +01:00
c46e09902d
[ML] Fix close job when the process has not launched yet ( elastic/x-pack-elasticsearch#2616 )
...
If a job close is requested after a job was opened but before
its process was launched, the job close returns successfully
without doing anything. The result is that the process hangs
around. This has been causing test failures as documented
int elastic/x-pack-elasticsearch#2360 and elastic/x-pack-elasticsearch#1270 .
This commit fixes this problem by refactoring the
AutodetectProcessManager. It introduces a state pattern
to make clear the states of the process and it uses locking
to ensure a close waits for the job process to be created.
relates elastic/x-pack-elasticsearch#1270
Original commit: elastic/x-pack-elasticsearch@ff858bd136
2017-09-26 11:46:01 +01:00
a3984f7baa
[Monitoring] Remove MonitoringSettings ( elastic/x-pack-elasticsearch#2596 )
...
Original commit: elastic/x-pack-elasticsearch@28dea7b699
2017-09-26 09:37:59 +02:00
048418aca7
add dummy test to LicensingTribeIT for build to pass ( elastic/x-pack-elasticsearch#2627 )
...
The true purpose of this test is to introduce another test alongside
the original, so that the test suite passes even if the other test
is skipped due to the assumption it makes about `build.snapshot`.
Original commit: elastic/x-pack-elasticsearch@709d7a5dc5
2017-09-25 22:03:46 -07:00
7b8d92a2a7
Test: fix AuthenticationService tests timeouts due to incorrect stream sizes
...
The AuthenticationService#testInvalidToken would cause a suite timeout in the case of an exception
due to a incorrect stream size as the latch was never counted down. This fixes the missing latch
countdown.
relates elastic/x-pack-elasticsearch#2615
Original commit: elastic/x-pack-elasticsearch@e838e6e912
2017-09-25 13:02:22 -06:00
6099660643
Update LicenseMetadata version check to be 6.1
...
This is related to elastic/x-pack-elasticsearch#1941 . It modifies to the version check in
LicenseMetadata because this elastic/x-pack-elasticsearch#2419 has been backported to 6.x.
Original commit: elastic/x-pack-elasticsearch@052358b550
2017-09-25 09:42:37 -06:00
9bd2da86db
[Tests] Reenable MonitoringIT
...
Checking the size of the map doesn't make sense when each filter is
checked independently right after.
Original commit: elastic/x-pack-elasticsearch@58e5d3401d
2017-09-25 16:01:18 +02:00
e7b5702f50
Adopt settings cleanups from core ( elastic/x-pack-elasticsearch#2605 )
...
Relates to elastic/elasticsearch#26739
Original commit: elastic/x-pack-elasticsearch@dd13d099de
2017-09-25 12:27:07 +02:00
1bb9c4fe71
[Tests] Mute MonitoringIT
...
see https://github.com/elastic/x-pack-elasticsearch/issues/2609
Original commit: elastic/x-pack-elasticsearch@e2e2393e62
2017-09-25 09:14:50 +02:00
e93e7cf816
Revert "reset me"
...
This reverts commit elastic/x-pack-elasticsearch@3d44c14cd9 .
Original commit: elastic/x-pack-elasticsearch@00203223b4
2017-09-25 08:56:01 +02:00
ad3eb997c6
reset me
...
Original commit: elastic/x-pack-elasticsearch@3d44c14cd9
2017-09-25 08:52:51 +02:00
b4f7d56c35
Whitelist global checkpoint sync actions
...
This commit whitelists the global checkpoint sync actions as otherwise
these actions do not have privileges to run as the system user and will
be denied as unauthorized.
Relates elastic/x-pack-elasticsearch#2604
Original commit: elastic/x-pack-elasticsearch@598ae1ff50
2017-09-22 16:27:51 -04:00
6b2e7fbed8
Add api to upgrade from basic to trial license ( elastic/x-pack-elasticsearch#2419 )
...
This is related to elastic/x-pack-elasticsearch#1941 .
Currently we support self-generating either a basic or trial license at
cluster startup. With the addition of the basic option, it is possible
that a user would choose to self-generate and eventually register a
basic license.
This commit allows a user to upgrade to a 30-day trial license if they
have not already utilized this 30-day trial license before. Additionally
it adds a get route to check if the user is eligible to upgrade. This
route will allow kibana to implement a cleaner UI.
Original commit: elastic/x-pack-elasticsearch@7f19b33a08
2017-09-22 14:18:07 -06:00
b55ab98914
[DOCS] Formatted role mapping API ( elastic/x-pack-elasticsearch#2576 )
...
* [DOCS] Formatted role mapping API
* [DOCS] Addressed feedback in role mapping API
Original commit: elastic/x-pack-elasticsearch@baba26c8ed
2017-09-22 10:40:20 -07:00
3a6cba7bc9
[DOCS] Formatted roles API ( elastic/x-pack-elasticsearch#2577 )
...
* [DOCS] Formatted roles API
* [DOCS] Addressed feedback about roles API
Original commit: elastic/x-pack-elasticsearch@414d06bc13
2017-09-22 10:24:20 -07:00
445af3ecf5
[DOCS] Format the authenticate API ( elastic/x-pack-elasticsearch#2572 )
...
Original commit: elastic/x-pack-elasticsearch@bc486dc6be
2017-09-22 10:07:15 -07:00
62fbd5a798
[DOCS] Format the clear cache API ( elastic/x-pack-elasticsearch#2574 )
...
* [DOCS] Format the clear cache API
* [DOCS] Fixed formatting in clear cache API
Original commit: elastic/x-pack-elasticsearch@705bd8e8cf
2017-09-22 10:04:38 -07:00
85f7f9b2d1
[DOCS] Fix formatting in change password API
...
Original commit: elastic/x-pack-elasticsearch@acbe051abb
2017-09-22 10:01:49 -07:00
3e68a89a45
[DOCS] Format change password API ( elastic/x-pack-elasticsearch#2573 )
...
Original commit: elastic/x-pack-elasticsearch@d1fc1a6116
2017-09-22 10:00:04 -07:00
42f90b25e3
[DOCS] Format tokens API ( elastic/x-pack-elasticsearch#2578 )
...
* [DOCS] Format tokens API
* [DOCS] Cleaned up tokens API comment
Original commit: elastic/x-pack-elasticsearch@f818367c68
2017-09-22 09:56:32 -07:00
5630ca6322
[DOCS] Formatted users API ( elastic/x-pack-elasticsearch#2579 )
...
Original commit: elastic/x-pack-elasticsearch@922ab6c279
2017-09-22 09:51:35 -07:00
9c8b5fb98a
[DOCS] Formatted the privileges API ( elastic/x-pack-elasticsearch#2575 )
...
Original commit: elastic/x-pack-elasticsearch@9080eb9535
2017-09-22 09:46:09 -07:00
6957282b50
[Monitoring] Fix MonitoringIT on Windows
...
Original commit: elastic/x-pack-elasticsearch@7a835c179d
2017-09-22 18:21:44 +02:00
ce7b473741
[DOCS] Added logstash_admin role ( elastic/x-pack-elasticsearch#2569 )
...
Original commit: elastic/x-pack-elasticsearch@259bbba6e5
2017-09-22 08:20:31 -07:00
4cf8348209
[Monitoring] Remove Beats Support until wanted ( elastic/x-pack-elasticsearch#2592 )
...
This removes the creation and handling of the Beats monitoring template and its data until we actually expect to support it (most likely 6.2 - 6.3).
Original commit: elastic/x-pack-elasticsearch@2dc8abbb37
2017-09-22 11:12:44 -04:00
d9554955f2
make tribe-node-license validation assume snapshot context ( elastic/x-pack-elasticsearch#2589 )
...
Release tests were introduced that sets the `build.snapshot`
system property to `false` to mimic release builds. This invalidates
the hardcoded license signatures that were signed against the
integration test pub/priv keys. This commit modifies the
license-validation assertions to assume the test is running against
those test keys, and will be skipped/ignored when these assertions
fail (which should only occur with `build.snapshot=true`)
Original commit: elastic/x-pack-elasticsearch@871704a3af
2017-09-21 14:39:01 -07:00
0c96db0a1c
Fix summary_count_field -> summary_count_field_name typo ( elastic/x-pack-elasticsearch#2588 )
...
Original commit: elastic/x-pack-elasticsearch@689be8c33a
2017-09-21 16:46:13 +01:00
ce77b076ad
[ML] Adapt memory limit thresholds in test ( elastic/x-pack-elasticsearch#2581 )
...
* Adapt memory limit thresholds in test. Caused by elastic/machine-learning-cpp#305
Original commit: elastic/x-pack-elasticsearch@2984f35b2c
2017-09-21 12:52:31 +01:00
f435145060
Fixes Javadoc generation for @SuppressForb adnot ( elastic/x-pack-elasticsearch#2583 )
...
Original commit: elastic/x-pack-elasticsearch@75ce6ac028
2017-09-21 14:28:57 +03:00
a8ea4f2d90
Authz FieldExtractor support for TermInSet query ( elastic/x-pack-elasticsearch#2539 )
...
FieldExtractor for TermInSet query.
Closes : elastic/x-pack-elasticsearch#1104
Original commit: elastic/x-pack-elasticsearch@7a46361c86
2017-09-21 11:35:34 +03:00
6b51f5e6ca
Update BouncyCastle version from 1.55 to 1.58 ( elastic/x-pack-elasticsearch#2548 )
...
Update BouncyCastle version from 1.55 to 1.58
Requires regeneration of .project and .classpath files, e.g.
gradle cleanEclipse & gradle eclipse
Closes : elastic/x-pack-elasticsearch#2332
Original commit: elastic/x-pack-elasticsearch@5806fd4204
2017-09-21 11:30:42 +03:00
c84c48fa01
Usability improvement for the password bootstrap tool (reserved users) ( elastic/x-pack-elasticsearch#2444 )
...
Generate or prompt for passwords of the reserved users, validating strength
and typos, then issue change requests, keeping elastic user change request last.
Closes : elastic/x-pack-elasticsearch#2424
Original commit: elastic/x-pack-elasticsearch@1f827d393c
2017-09-21 11:26:28 +03:00
70687fbef3
[Tests] Add packaging tests for SSL/TLS communication ( elastic/x-pack-elasticsearch#2556 )
...
This commit adds a packaging test that uses the certgen tool
to set up a two nodes cluster that uses encrypted communication.
relates elastic/x-pack-elasticsearch#2485
Original commit: elastic/x-pack-elasticsearch@6d2e3c5cd0
2017-09-21 10:12:07 +02:00
34bd72e69b
[Monitoring] Remove monitoring resolvers ( elastic/x-pack-elasticsearch#2566 )
...
Now all monitoring documents are indexed in timestamped indices dedicated
to each product, the old monitoring's resolvers and all the associated plumbing
can be removed from the Elasticsearch monitoring plugin.
This pull request merges the feature branch feature/monitoring-summer-cleanup
into master. All commits have been independently reviewed as part of elastic/x-pack-elasticsearch#2226 :
* [Monitoring] Clean up monitoring doc (elastic/x-pack-elasticsearch#2208 )
* [Monitoring] Remove ClusterStatsResolver (elastic/x-pack-elasticsearch#2209 )
* [Monitoring] Remove IndexRecoveryResolver (elastic/x-pack-elasticsearch#2229 )
* [Monitoring] Remove JobStatsResolver (elastic/x-pack-elasticsearch#2230 )
* [Monitoring] Remove ShardsResolver (elastic/x-pack-elasticsearch#2233 )
* [Monitoring] Fix missing instanceof in exporter bulks
* [Monitoring] Remove NodeStatsResolver (elastic/x-pack-elasticsearch#2244 )
* [Monitoring] Remove IndexStatsResolver & IndicesStatsResolver (elastic/x-pack-elasticsearch#2247 )
* [Monitoring] Remove source node attributes and add timestamp (elastic/x-pack-elasticsearch#2285 )
* [Monitoring] Remove last resolver (elastic/x-pack-elasticsearch#2330 )
* [Monitoring] Make MonitoringDoc an abstract class (elastic/x-pack-elasticsearch#2451 )
* [Monitoring] Fix TransportMonitoringBulkActionTests
* [Monitoring] Remove old resolver tests and add a single integration test (elastic/x-pack-elasticsearch#2453 )
It does not introduce any new feature, so it could also go in 6.0.
relates elastic/x-pack-elasticsearch#2226
Original commit: elastic/x-pack-elasticsearch@e3d5cec28c
2017-09-21 09:36:03 +02:00
Tim Vernum
Simon Willnauer
Alexander Reelsen
David Roberts
lcawley
Russ Cam
Dimitris Athanasiou
Tanguy Leroux
Tal Levy
jaymode
Tim Brooks
Martijn van Groningen
Jason Tedor
Chris Earle
David Kyle
Albert Zaharovits