redpanda icon indicating copy to clipboard operation
redpanda copied to clipboard
verified publisher icon redpanda-data

Fix audit log client on upgrade

Open michael-redpanda opened this issue 1 month ago • 9 comments

Fixes: CORE-14903

This PR does the following:

  • Unsets the include authorization options in metadata/describe_cluster requests for non SL clients (reduce prevlance of authz failures in logs)
  • Reduces log severity of authz checks for that flag from INFO to DEBUG
  • Permits users of kafka::client::cluster to provide an error mitigation function to be called if there is an error refreshing metadata - reduces prevlance of sasl authentication failed error messages

Backports Required

  • [ ] none - not a bug fix
  • [ ] none - this is a backport
  • [ ] none - issue does not exist in previous branches
  • [ ] none - papercut/not impactful enough to backport
  • [X] v25.3.x
  • [ ] v25.2.x
  • [ ] v25.1.x

Release Notes

Bug Fixes

  • Variety of fixes to reduce noise in log concerning internal kafka client authentication and authorization

michael-redpanda avatar Dec 04 '25 20:12 michael-redpanda

Force push:

  • FIxed python lint

michael-redpanda avatar Dec 04 '25 20:12 michael-redpanda

Force push:

  • Fixed issue causing test failures

michael-redpanda avatar Dec 05 '25 13:12 michael-redpanda

CI test results

test results on build#77406
test_class test_method test_arguments test_kind job_url test_status passed reason test_history
MasterTestSuite test_remote_partition_read_cached_index unit https://buildkite.com/redpanda/redpanda/builds/77406#019aeea5-3d98-43f0-a92c-dd78c2c6eddf FAIL 0/1
test results on build#77539
test_class test_method test_arguments test_kind job_url test_status passed reason test_history
AuditLogTestAdminApi test_audit_log_functioning {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de90-4e75-9d9a-57864aa3f3e1 FLAKY 7/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestAdminApi&test_method=test_audit_log_functioning
AuditLogTestAdminApi test_audit_log_functioning {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc9-0639-4ee1-b78e-c24e1f2ebe10 FLAKY 8/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestAdminApi&test_method=test_audit_log_functioning
AuditLogTestAdminAuthApi test_excluded_principal {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de88-4753-be01-dc9232441327 FLAKY 7/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestAdminAuthApi&test_method=test_excluded_principal
AuditLogTestKafkaApi test_audit_topic_protections null integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de85-4c2d-a85e-120e2fde38b7 FLAKY 8/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestKafkaApi&test_method=test_audit_topic_protections
AuditLogTestKafkaApi test_consume {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de87-49d2-bb54-ee13288f4317 FLAKY 8/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestKafkaApi&test_method=test_consume
AuditLogTestKafkaAuthnApi test_authn_failure_messages {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de85-4c2d-a85e-120e2fde38b7 FLAKY 8/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestKafkaAuthnApi&test_method=test_authn_failure_messages
AuditLogTestKafkaAuthnApi test_excluded_principal {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de8c-4e7e-b1f4-546411a2ac87 FLAKY 7/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestKafkaAuthnApi&test_method=test_excluded_principal
AuditLogTestKafkaAuthnApi test_no_audit_user_authn null integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de8e-44f9-b40f-5eed0227eba1 FLAKY 6/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestKafkaAuthnApi&test_method=test_no_audit_user_authn
AuditLogTestReproducer test_sanctioning_mode {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de92-4b71-ab70-9b6bdf82d86d FLAKY 9/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestReproducer&test_method=test_sanctioning_mode
AuditLogTestSchemaRegistry test_sr_audit {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de88-4753-be01-dc9232441327 FLAKY 3/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistry&test_method=test_sr_audit
AuditLogTestSchemaRegistry test_sr_audit_bad_authn {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de8c-4e7e-b1f4-546411a2ac87 FLAKY 8/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistry&test_method=test_sr_audit_bad_authn
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "DELETE_CONFIG_SUBJECT"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de85-4c2d-a85e-120e2fde38b7 FLAKY 8/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "DELETE_SUBJECT"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de8c-4e7e-b1f4-546411a2ac87 FLAKY 6/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "DELETE_SUBJECT_VERSION"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de8e-44f9-b40f-5eed0227eba1 FLAKY 8/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "GET_CONFIG_SUBJECT"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc9-0631-4d56-8436-c6de6b854568 FLAKY 18/21 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "GET_MODE"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc9-0633-4012-919a-2f2aadd4dcdb FLAKY 19/21 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "GET_SUBJECT_VERSIONS_VERSION_SCHEMA"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de8e-44f9-b40f-5eed0227eba1 FLAKY 5/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "POST_SUBJECT"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de92-4b71-ab70-9b6bdf82d86d FLAKY 7/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz {"audit_transport_mode": "kclient", "endpoint_name": "PUT_MODE"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de8e-44f9-b40f-5eed0227eba1 FLAKY 5/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz
AuditLogTestSchemaRegistryACLs test_sr_audit_authz_get_subjects {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc3-de88-4753-be01-dc9232441327 FLAKY 9/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestSchemaRegistryACLs&test_method=test_sr_audit_authz_get_subjects
AuditLogTestsAppLifecycle test_recovery_mode {"audit_transport_mode": "kclient"} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc9-0636-4321-bb47-e9f4dced3730 FLAKY 9/11 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0000, p0=0.0000, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=AuditLogTestsAppLifecycle&test_method=test_recovery_mode
ShadowLinkingReplicationTests test_topic_delete {"source_cluster_spec": {"cluster_type": "redpanda"}} integration https://buildkite.com/redpanda/redpanda/builds/77539#019affc9-0638-4ae0-8deb-9fb21374c5dd FLAKY 14/21 Test FAILS after retries.Significant increase in flaky rate(baseline=0.0826, p0=0.0045, reject_threshold=0.0100) https://redpanda.metabaseapp.com/dashboard/87-tests?tab=142-dt-individual-test-history&test_class=ShadowLinkingReplicationTests&test_method=test_topic_delete

vbotbuildovich avatar Dec 05 '25 13:12 vbotbuildovich

Retry command for Build#77406

please wait until all jobs are finished before running the slash command

/ci-repeat 1
skip-redpanda-build
skip-units
skip-rebase
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"DELETE_SUBJECT_VERSION"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_SUBJECT_VERSIONS_VERSION_SCHEMA"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_public@{"audit_transport_mode":"kclient","endpoint_name":"SCHEMA_REGISTRY_STATUS_READY"}
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaApi.test_audit_topic_protections
tests/rptest/tests/audit_log_test.py::AuditLogTestSmallBuffers.test_bypass@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestReproducer.test_sanctioning_mode@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"POST_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"PUT_MODE_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestOauth.test_admin_oauth@{"audit_transport_mode":"kclient"}
tests/rptest/tests/partition_reassignments_test.py::PartitionReassignmentsTest.test_reassignments_cancel
tests/rptest/tests/audit_log_test.py::AuditLogTestAdminAuthApi.test_excluded_principal@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_MODE"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz_get_subjects@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaApi.test_management@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistry.test_sr_audit_bad_authn@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestOauth.test_kafka_oauth@{"audit_transport_mode":"kclient","authz_match":"acl"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_MODE_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_SUBJECT_VERSIONS_VERSION_REFERENCED_BY"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"PUT_CONFIG_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestAdminApi.test_config_rejected
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_SCHEMAS_IDS_ID_VERSIONS"}
tests/rptest/tests/audit_log_test.py::AuditLogTestOauth.test_kafka_oauth@{"audit_transport_mode":"kclient","authz_match":"rbac"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"DELETE_MODE_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"DELETE_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSanctionMode.test_sanctioning_mode@{"audit_transport_mode":"kclient"}

vbotbuildovich avatar Dec 05 '25 15:12 vbotbuildovich

@IoannisRP

Is it there just for the inform call to happen earlier? i.e. we don't have to wait for a a dispatch call to end up calling inform

The issue is that brokers may shut down and come back and in that time they'll lose the ephemeral credentials they previous held, so we need to react to these situations with infrom

dispatch calls happen with a retry. The first fails, informs and then it "succeeds". There is no retry around update_metadata, is there? Is the logic that the first fails and the next (either timer or mitigator call) update_metadata succeeds?

Previously, the behavior would have been that the metadata request would have failed and thrown an exception and continued the retry.. The changes within kafka::client::cluster now 'swallow' that exception. The alternative would be to throw from the kafka::clinet::cluster but that change in behavior led to some strange behavior with Shadow Linking.

michael-redpanda avatar Dec 08 '25 18:12 michael-redpanda

The issue is that brokers may shut down and come back and in that time they'll lose the ephemeral credentials they previous held, so we need to react to these situations with infrom

I have seen the same behavior in SR, as well. It is normally resolved through the next dispatch-fail-inform-retry cycle. If it can help to resolve this more efficiently, we should go with the existing external mitigator (as discussed here).

Previously, the behavior would have been that the metadata request would have failed and thrown an exception and continued the retry

which path are we discussing?

In the client, the client::dispatch, client::update_metadata and most other calls come with mitigation+retry from the client side. So after the first failure, inform would be called, and the retry would happen.

The paths that I see that don't do mitigation (so no inform) in the cluster, is the periodic update_metadata from update_timer_callback and the update_metadata that happens as part of the mitigation. However, the later should be happening after the external_mitigate_error, so after the inform has already happened.

Is it the periodic metadata update that is the target of this fix? i.e. to not have logs full of sasl errors, even when not in the presence of other calls?

IoannisRP avatar Dec 08 '25 19:12 IoannisRP

Is it the periodic metadata update that is the target of this fix? i.e. to not have logs full of sasl errors, even when not in the presence of other calls?

that would be the desire

michael-redpanda avatar Dec 08 '25 20:12 michael-redpanda

Force push:

  • Addressed pr comments

michael-redpanda avatar Dec 08 '25 20:12 michael-redpanda

Retry command for Build#77539

please wait until all jobs are finished before running the slash command

/ci-repeat 1
skip-redpanda-build
skip-units
skip-rebase
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaApi.test_consume@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestReproducer.test_sanctioning_mode@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"POST_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestAdminApi.test_audit_log_functioning@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaApi.test_audit_topic_protections
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaAuthnApi.test_authn_failure_messages@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"DELETE_CONFIG_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestAdminAuthApi.test_excluded_principal@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistry.test_sr_audit@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz_get_subjects@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaAuthnApi.test_no_audit_user_authn
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"DELETE_SUBJECT_VERSION"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_SUBJECT_VERSIONS_VERSION_SCHEMA"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"PUT_MODE"}
tests/rptest/tests/audit_log_test.py::AuditLogTestKafkaAuthnApi.test_excluded_principal@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistry.test_sr_audit_bad_authn@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"DELETE_SUBJECT"}
tests/rptest/tests/audit_log_test.py::AuditLogTestsAppLifecycle.test_recovery_mode@{"audit_transport_mode":"kclient"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_MODE"}
tests/rptest/tests/audit_log_test.py::AuditLogTestSchemaRegistryACLs.test_sr_audit_authz@{"audit_transport_mode":"kclient","endpoint_name":"GET_CONFIG_SUBJECT"}
tests/rptest/tests/cluster_linking_e2e_test.py::ShadowLinkingReplicationTests.test_topic_delete@{"source_cluster_spec":{"cluster_type":"redpanda"}}

vbotbuildovich avatar Dec 08 '25 21:12 vbotbuildovich

Force push:

  • Removed mitigator as this was causing test flakiness
  • Reduced log severity of broker error in metadata refresh to 'debug' to reduce occurence of benign but alarming error messages

michael-redpanda avatar Dec 10 '25 15:12 michael-redpanda

/backport v25.3.x

vbotbuildovich avatar Dec 10 '25 18:12 vbotbuildovich