Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Transform] stats can return old state information if security is enabled #51728

Closed
hendrikmuhs opened this issue Jan 31, 2020 · 1 comment · Fixed by #51732
Closed

[Transform] stats can return old state information if security is enabled #51728

hendrikmuhs opened this issue Jan 31, 2020 · 1 comment · Fixed by #51732
Labels
>bug :ml/Transform Transform

Comments

@hendrikmuhs
Copy link
Contributor

found via CI: #51629

If security is used and the transform user is a non-admin user _transform/_stats might return old state information after stopping the transform with wait_for_completion=true. The information is correct eventually after the index is internally refreshed via refresh_interval (1s) of the underlying lucene index.

Severity: Low, the problem only affects users(security enabled) that script transforms and rely on correct stats information.

Mitigation: Call _stats again if the expected output is wrong until the refresh has happened.
@elasticmachine
Copy link
Collaborator

Pinging @elastic/ml-core (:ml/Transform)

hendrikmuhs pushed a commit to hendrikmuhs/elasticsearch that referenced this issue Jan 31, 2020
do index refresh of the internal transform index with the system user
06a31a1 
instead of using the calling user which does not have the sufficient rights
if security is enabled

fixes elastic#51728
@hendrikmuhs hendrikmuhs mentioned this issue Jan 31, 2020
Merged
hendrikmuhs pushed a commit that referenced this issue Jan 31, 2020
[Transform] Fix stats can return old state information if security is…
40f0a26 
… enabled (#51732)

do index refresh of the internal transform index with the system user
instead of using the calling user which does not have sufficient rights
if security is enabled

fixes #51728
hendrikmuhs pushed a commit to hendrikmuhs/elasticsearch that referenced this issue Jan 31, 2020
[Transform] Fix stats can return old state information if security is…
8e46390 
… enabled (elastic#51732)

do index refresh of the internal transform index with the system user
instead of using the calling user which does not have sufficient rights
if security is enabled

fixes elastic#51728
hendrikmuhs pushed a commit to hendrikmuhs/elasticsearch that referenced this issue Jan 31, 2020
[Transform] Fix stats can return old state information if security is…
c112d5c 
… enabled (elastic#51732)

do index refresh of the internal transform index with the system user
instead of using the calling user which does not have sufficient rights
if security is enabled

fixes elastic#51728
This was referenced Jan 31, 2020
Merged
Merged
hendrikmuhs pushed a commit that referenced this issue Feb 1, 2020
[Transform] Fix stats can return old state information if security is…
ed170cc 
… enabled (#51732) (#51738)

do index refresh of the internal transform index with the system user
instead of using the calling user which does not have sufficient rights
if security is enabled

fixes #51728
hendrikmuhs pushed a commit that referenced this issue Feb 12, 2020
[Transform] Fix stats can return old state information if security is…
0460712 
… enabled (#51732) (#51739)

do index refresh of the internal transform index with the system user
instead of using the calling user which does not have sufficient rights
if security is enabled

fixes #51728
@codebrain codebrain mentioned this issue Apr 1, 2020
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
>bug :ml/Transform Transform
Projects
None yet
Milestone
No milestone
2 participants
@hendrikmuhs @elasticmachine