Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failing test: [MKI][QA][Periodic] Rules Management - Rule Patch Integration Tests - Serverless Env - Essentials Tier .x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_patch/basic_license_essentials_tier/patch_rules·ts - Rules Management - Rule Patch APIs @ess @serverless @serverlessQA patch_rules patch rules "before each" hook for "should patch a single rule property of name using a rule_id" #202812

Closed
kibanamachine opened this issue Dec 3, 2024 · 11 comments · Fixed by #202885
Assignees
Labels
8.18 candidate failed-test A test failure on a tracked branch, potentially flaky-test Feature:Rule Management Security Solution Detection Rule Management area Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.

Comments

@kibanamachine
Copy link
Contributor

kibanamachine commented Dec 3, 2024

A test failed on a tracked branch

ResponseError: security_exception
	Root causes:
		security_exception: action [indices:data/write/delete/byquery] is unauthorized for user [testing-internal] with effective roles [superuser] on restricted indices [.kibana_security_solution], this action is granted by the index privileges [delete,write,all]
    at SniffingTransport._request (/opt/buildkite-agent/builds/bk-agent-prod-gcp-1733256745701794170/elastic/kibana-serverless-security-solution-quality-gate-rule-management/kibana/node_modules/@elastic/transport/src/Transport.ts:602:17)
    at processTicksAndRejections (node:internal/process/task_queues:95:5)
    at /opt/buildkite-agent/builds/bk-agent-prod-gcp-1733256745701794170/elastic/kibana-serverless-security-solution-quality-gate-rule-management/kibana/node_modules/@elastic/transport/src/Transport.ts:708:22
    at SniffingTransport.request (/opt/buildkite-agent/builds/bk-agent-prod-gcp-1733256745701794170/elastic/kibana-serverless-security-solution-quality-gate-rule-management/kibana/node_modules/@elastic/transport/src/Transport.ts:705:14)
    at Client.DeleteByQueryApi [as deleteByQuery] (/opt/buildkite-agent/builds/bk-agent-prod-gcp-1733256745701794170/elastic/kibana-serverless-security-solution-quality-gate-rule-management/kibana/node_modules/@elastic/elasticsearch/src/api/api/delete_by_query.ts:82:10)
    at delete_all_prebuilt_rule_assets.ts:21:12
    at retryIfDeleteByQueryConflicts (retry_delete_by_query_conflicts.ts:29:29)
    at deleteAllPrebuiltRuleAssets (delete_all_prebuilt_rule_assets.ts:20:3)
    at Context.<anonymous> (patch_rules.ts:37:9)
    at Object.apply (wrap_function.js:74:16) {
  options: { redaction: { type: 'replace', additionalKeys: [] } },
  meta: {
    body: { error: [Object], status: 403 },
    statusCode: 403,
    headers: {
      'content-length': '593',
      'content-type': 'application/vnd.elasticsearch+json;compatible-with=8',
      'x-cloud-request-id': 'SFPzP_j_Q5CVDZxo9DW6Vg',
      'x-found-handling-cluster': 'd254b799a08342f08afad7edb87eeda0.es',
      'x-found-handling-instance': 'es-es-index-6c689cf96c-q9ct4',
      date: 'Tue, 03 Dec 2024 20:21:25 GMT'
    },
    meta: {
      context: null,
      request: [Object],
      name: 'elasticsearch-js',
      connection: [Object],
      attempts: 0,
      aborted: false
    },
    warnings: null
  }
}

First failure: kibana-serverless-security-solution-quality-gate-rule-management - main

@kibanamachine kibanamachine added the failed-test A test failure on a tracked branch, potentially flaky-test label Dec 3, 2024
@botelastic botelastic bot added the needs-team Issues missing a team label label Dec 3, 2024
@kibanamachine kibanamachine added the Team:Detection Rule Management Security Detection Rule Management Team label Dec 3, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

@botelastic botelastic bot removed the needs-team Issues missing a team label label Dec 3, 2024
@kibanamachine
Copy link
Contributor Author

@kibanamachine
Copy link
Contributor Author

@kibanamachine
Copy link
Contributor Author

@kibanamachine
Copy link
Contributor Author

@kibanamachine
Copy link
Contributor Author

@kibanamachine
Copy link
Contributor Author

@kibanamachine
Copy link
Contributor Author

@kibanamachine
Copy link
Contributor Author

nikitaindik added a commit that referenced this issue Dec 4, 2024
…02885)

**Resolves: #202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in #201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.
@banderror banderror added Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Feature:Rule Management Security Solution Detection Rule Management area labels Dec 4, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detections-response (Team:Detections and Resp)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

nikitaindik added a commit to nikitaindik/kibana that referenced this issue Dec 4, 2024
…astic#202885)

**Resolves: elastic#202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in elastic#201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.
nikitaindik added a commit to nikitaindik/kibana that referenced this issue Dec 4, 2024
…astic#202885)

**Resolves: elastic#202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in elastic#201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.
nikitaindik added a commit to nikitaindik/kibana that referenced this issue Dec 4, 2024
…astic#202885)

**Resolves: elastic#202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in elastic#201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.

(cherry picked from commit 0e10dbf)

# Conflicts:
#	x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/rule_patch/basic_license_essentials_tier/patch_rules.ts
SoniaSanzV pushed a commit to SoniaSanzV/kibana that referenced this issue Dec 9, 2024
…astic#202885)

**Resolves: elastic#202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in elastic#201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.
SoniaSanzV pushed a commit to SoniaSanzV/kibana that referenced this issue Dec 9, 2024
…astic#202885)

**Resolves: elastic#202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in elastic#201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.
CAWilson94 pushed a commit to CAWilson94/kibana that referenced this issue Dec 9, 2024
…astic#202885)

**Resolves: elastic#202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in elastic#201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.
CAWilson94 pushed a commit to CAWilson94/kibana that referenced this issue Dec 12, 2024
…astic#202885)

**Resolves: elastic#202812

## Summary
This PR fixes a problem in the MKI Serverless periodic pipeline that was
introduced in elastic#201825. The issue happened because the test tried to
delete prebuilt rule assets stored in .kibana_security_solution, but you
can’t access this index in Serverless MKI.

The fix makes sure this call only runs in non-Serverless MKI
environments.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
8.18 candidate failed-test A test failure on a tracked branch, potentially flaky-test Feature:Rule Management Security Solution Detection Rule Management area Team:Detection Rule Management Security Detection Rule Management Team Team:Detections and Resp Security Detection Response Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants