Albert Zaharovits

Core interprets explicitly mentioned aliases differently from the ones covered by wildcards (for the former, in some APIs, it throws an error when they point to closed indices). But the...

>If the operator does not mount elasticsearch.yml, I assume they want elasticsearch.yml autoconfiguration. If the operator mounts elasticsearch.yml, I assume they don't want elasticsearch.yml autoconfiguration. If you're proposing this should...

We briefly discussed this today in our weekly sync. There was consensus that mounting only the `elasticsearch.yml` file, but leaving the rest of the config directory on the docker container,...

https://gradle-enterprise.elastic.co/s/lg7oekpxm6o7k https://gradle-enterprise.elastic.co/s/s57o3lqhyndgg

Note to reviewers: I have tried to have clear-cut individual commits. It might be easier to review commit by commit.

@ywangd I have pushed [d5e12b9](https://github.com/elastic/elasticsearch/pull/90141/commits/d5e12b92635b0ccbb0b47081f4e2e52876d5d485) that ensures the access control map that is put in the thread context is "granted". In a follow-up, the access control map will only be...

> The check in SecurityContext.putIndicesAccessControl does not prevent storing a bogus IndicesAccessControl directly using ThreadContext.putTransient. In fact, some tests still do that, e.g. [SecurityTests](https://github.com/elastic/elasticsearch/blob/90375ac5bc0991dc44477136dde68cb0d0e28e9c/x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/SecurityTests.java#L489) and [SecurityActionFilterTests](https://github.com/elastic/elasticsearch/blob/90375ac5bc0991dc44477136dde68cb0d0e28e9c/x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/action/filter/SecurityActionFilterTests.java#L185). It would be better...

`./gradlew ':x-pack:plugin:spatial:test' --tests "org.elasticsearch.xpack.spatial.search.aggregations.metrics.CartesianCentroidAggregatorTests.testMultiValuedField" -Dtests.seed=10985F39664E0F2A -Dtests.locale=cs-CZ -Dtests.timezone=America/Jamaica -Druntime.java=17 -Dtests.fips.enabled=true` fixed in https://github.com/elastic/elasticsearch/pull/90507 @elasticmachine update branch

@elasticmachine update branch

Yes, none of the recent authz improvements has addressed this yet. This issue is still standing as described. Le mer. 15 mars 2023, 10:42, Mariana ***@***.***> a écrit : >...