mirror of
https://github.com/honeymoose/OpenSearch.git
synced 2025-03-25 01:19:02 +00:00
706a8fd38d
Every test class was previously running against its own SUITE cluster composed of a single node due to misconfiguration. Also there were some repetitions and bugs in the settings: first of all unicast wasn't properly configured, also the plugin wasn't registered properly in the transport client, thus the "shield.user" settings wasn't properly converted into the basic auth header. For the very same reason the settings used for authc wasn't randomized for transport client. Extracted out all the needed configuration to the `ShieldSettingsSource` class, that takes care of the unicast configuration, loading of the plugin and all of the configuration files and parameters. Used the global cluster whenever possible, that has the following characteristics: - unicast discovery - ssl configured and enabled at the transport level - ssl configured but disabled at the http level (REST tests use the same cluster and don't support SSL at this time) - single user configured with an allow_all role - auditing enabled or not is randomized - the setting used to do basic auth is randomized between reuest.headers.Authorization and our own shield.user for both node and transport client Test classes that need to override defaults settings can do so by declaring scope=SUITE and overriding the nodeSettings method. Also roles, users and users_roles have specialized methods to be overridden that just return the content of the whole file if it differs from the default. Note that given that ssl is properly configured although disabled for http, tests that need it on can just enable it without any additional configuration. Closes elastic/elasticsearch#31 Original commit: elastic/x-pack-elasticsearch@fa6f162497
= Elasticsearch Security Plugin This plugins adds security features to elasticsearch You can build the plugin with `mvn package`. The documentation is put in the `docs/` directory.