mirror of
https://github.com/honeymoose/OpenSearch.git
synced 2025-02-21 12:27:37 +00:00
f2cbe20ea0
This is related to elastic/x-pack-elasticsearch#1217. This PR removes the default password of "changeme" from the reserved users. This PR adds special behavior for authenticating the reserved users. No ReservedRealm user can be authenticated until its password is set. The one exception to this is the elastic user. The elastic user can be authenticated with an empty password if the action is a rest request originating from localhost. In this scenario where an elastic user is authenticated with a default password, it will have metadata indicating that it is in setup mode. An elastic user in setup mode is only authorized to execute a change password request. Original commit: elastic/x-pack-elasticsearch@e1e101a237
87 lines
4.5 KiB
Groovy
87 lines
4.5 KiB
Groovy
apply plugin: 'elasticsearch.standalone-rest-test'
|
|
apply plugin: 'elasticsearch.rest-test'
|
|
|
|
dependencies {
|
|
testCompile project(path: ':x-pack-elasticsearch:plugin', configuration: 'runtime')
|
|
testCompile project(path: ':x-pack-elasticsearch:plugin', configuration: 'testArtifacts')
|
|
}
|
|
|
|
// bring in machine learning rest test suite
|
|
task copyMlRestTests(type: Copy) {
|
|
into project.sourceSets.test.output.resourcesDir
|
|
from project(':x-pack-elasticsearch:plugin').sourceSets.test.resources.srcDirs
|
|
include 'rest-api-spec/test/ml/**'
|
|
}
|
|
|
|
integTestRunner {
|
|
systemProperty 'tests.rest.blacklist', [
|
|
// Remove tests that are expected to throw an exception, because we cannot then
|
|
// know whether to expect an authorization exception or a validation exception
|
|
'ml/datafeeds_crud/Test delete datafeed with missing id',
|
|
'ml/datafeeds_crud/Test put datafeed referring to missing job_id',
|
|
'ml/datafeeds_crud/Test put datafeed with invalid query',
|
|
'ml/datafeeds_crud/Test update datafeed with missing id',
|
|
'ml/delete_model_snapshot/Test delete snapshot missing snapshotId',
|
|
'ml/delete_model_snapshot/Test delete snapshot missing job_id',
|
|
'ml/delete_model_snapshot/Test delete with in-use model',
|
|
'ml/filter_crud/Test create filter api with mismatching body ID',
|
|
'ml/filter_crud/Test get filter API with bad ID',
|
|
'ml/filter_crud/Test invalid param combinations',
|
|
'ml/filter_crud/Test non-existing filter',
|
|
'ml/get_datafeed_stats/Test get datafeed stats given missing datafeed_id',
|
|
'ml/get_datafeeds/Test get datafeed given missing datafeed_id',
|
|
'ml/jobs_crud/Test cannot create job with existing categorizer state document',
|
|
'ml/jobs_crud/Test cannot create job with existing quantiles document',
|
|
'ml/jobs_crud/Test cannot create job with existing result document',
|
|
'ml/jobs_crud/Test cannot create job with model snapshot id set',
|
|
'ml/jobs_crud/Test get job API with non existing job id',
|
|
'ml/jobs_crud/Test put job with inconsistent body/param ids',
|
|
'ml/jobs_crud/Test put job with time field in analysis_config',
|
|
'ml/jobs_get/Test get job given missing job_id',
|
|
'ml/jobs_get_result_buckets/Test mutually-exclusive params',
|
|
'ml/jobs_get_result_buckets/Test mutually-exclusive params via body',
|
|
'ml/jobs_get_result_categories/Test with invalid param combinations',
|
|
'ml/jobs_get_result_categories/Test with invalid param combinations via body',
|
|
'ml/jobs_get_stats/Test get job stats given missing job',
|
|
'ml/jobs_get_stats/Test no exception on get job stats with missing index',
|
|
'ml/post_data/Test Flush data with invalid parameters',
|
|
'ml/post_data/Test flushing and posting a closed job',
|
|
'ml/post_data/Test open and close with non-existent job id',
|
|
'ml/post_data/Test POST data with invalid parameters',
|
|
'ml/preview_datafeed/Test preview missing datafeed',
|
|
'ml/revert_model_snapshot/Test revert model with invalid snapshotId',
|
|
'ml/start_stop_datafeed/Test start datafeed job, but not open',
|
|
'ml/start_stop_datafeed/Test start non existing datafeed',
|
|
'ml/start_stop_datafeed/Test stop non existing datafeed',
|
|
'ml/update_model_snapshot/Test without description',
|
|
'ml/validate/Test invalid job config',
|
|
'ml/validate/Test job config is invalid because model snapshot id set',
|
|
'ml/validate/Test job config that is invalid only because of the job ID',
|
|
'ml/validate_detector/Test invalid detector'
|
|
].join(',')
|
|
}
|
|
|
|
integTestCluster {
|
|
dependsOn copyMlRestTests
|
|
plugin ':x-pack-elasticsearch:plugin'
|
|
extraConfigFile 'x-pack/roles.yml', 'roles.yml'
|
|
setupCommand 'setupTestAdminUser',
|
|
'bin/x-pack/users', 'useradd', 'test_admin', '-p', 'x-pack-test-password', '-r', 'superuser'
|
|
setupCommand 'setupMlAdminUser',
|
|
'bin/x-pack/users', 'useradd', 'ml_admin', '-p', 'x-pack-test-password', '-r', 'minimal,machine_learning_admin'
|
|
setupCommand 'setupMlUserUser',
|
|
'bin/x-pack/users', 'useradd', 'ml_user', '-p', 'x-pack-test-password', '-r', 'minimal,machine_learning_user'
|
|
setupCommand 'setupPowerlessUser',
|
|
'bin/x-pack/users', 'useradd', 'no_ml', '-p', 'x-pack-test-password', '-r', 'minimal'
|
|
waitCondition = { node, ant ->
|
|
File tmpFile = new File(node.cwd, 'wait.success')
|
|
ant.get(src: "http://${node.httpUri()}/_cluster/health?wait_for_nodes=>=${numNodes}&wait_for_status=yellow",
|
|
dest: tmpFile.toString(),
|
|
username: 'test_admin',
|
|
password: 'x-pack-test-password',
|
|
ignoreerrors: true,
|
|
retries: 10)
|
|
return tmpFile.exists()
|
|
}
|
|
}
|