Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Unable to spin up security cluster with SSL config #11219

Open
jmazanec15 opened this issue Nov 15, 2023 · 1 comment
Open

[BUG] Unable to spin up security cluster with SSL config #11219

jmazanec15 opened this issue Nov 15, 2023 · 1 comment
Labels
bug Something isn't working security Anything security related :test Adding or fixing a test

Comments

@jmazanec15
Copy link
Member

Describe the bug
In k-NN plugin, I am working on adding a gradle task to be able to run gradle cluster with security plugin installed: opensearch-project/k-NN#1307. The main goal is to remove dependency on staging docker image in our CI to run security tests.

It is close to working, but running into an error when running the waitforallconditions check: https://github.com/jmazanec15/k-NN-1/blob/issue-901/build.gradle#L383. This code can be found here: https://github.com/opensearch-project/OpenSearch/blob/main/buildSrc/src/main/java/org/opensearch/gradle/testclusters/OpenSearchCluster.java#L569-L581

I get the following error:

./gradlew run -Dsecurity.enabled=1
...
* What went wrong:
Execution failed for task ':run'.
> `cluster{::integTest}` failed to wait for cluster health yellow after 40 SECONDS
    IO error while waiting cluster
    401 Unauthorized

When I comment this out, the cluster is able to run and Im able to hit it with the demo certs using ssl:

        //         getClusters().forEach { cluster ->
        //             cluster.waitForAllConditions()
        // }

I did notice that SQL was able to add this: opensearch-project/sql#1986, but I did notice that they do not use ssl for their cluster and they do not have this cluster.waitForAllConditions check.

To Reproduce
Refer here: opensearch-project/k-NN#1307 (comment)

Expected behavior
Expect cluster.waitForAllConditions() to be able to run health check when ssl is enabled.

Plugins

  1. opensearch-knn
  2. opensearch-security

Screenshots
If applicable, add screenshots to help explain your problem.

Host/Environment (please complete the following information):

  • OS: mac
  • Version main
@jmazanec15 jmazanec15 added bug Something isn't working untriaged labels Nov 15, 2023
@mch2 mch2 added the security Anything security related label Dec 8, 2023
@andrross
Copy link
Member

[Triage - attendees 1 2 3]
@jmazanec15 Thanks for filing this issue. Looks like the PR is stalled. How can we make progress here?

@andrross andrross added :test Adding or fixing a test and removed untriaged labels Mar 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working security Anything security related :test Adding or fixing a test
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants