Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove Identity FeatureFlag #16024

Merged
merged 5 commits into from
Oct 1, 2024

Conversation

cwperks
Copy link
Member

@cwperks cwperks commented Sep 20, 2024

Description

This PR removes the identity feature flag.

The PR is a follow-up to 2 previous PRs:

This PR is a prerequisite for opensearch-project/opensearch-plugins#238 to begin creating issues on individual plugin repos to adopt the new mechanism for system index interaction

There are 2 additional open PRs (1 in core repo and 1 in security repo) that need to be resolved before plugins start to adopt the new mechanism.

  1. Allow Plugins to request to perform cluster actions and index actions with their assigned PluginSubject and prompt on install #15778
  2. Implement new extension points in IdentityPlugin and add ContextProvidingPluginSubject security#4665

Related Issues

Resolves opensearch-project/security#4439

Check List

  • Functionality includes testing.
  • API changes companion pull request created, if applicable.
  • Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Craig Perkins <cwperx@amazon.com>
Copy link
Contributor

❌ Gradle check result for 1a07f98: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

Copy link
Contributor

❌ Gradle check result for 1a07f98: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

Copy link
Contributor

✅ Gradle check result for 1a07f98: SUCCESS

Copy link

codecov bot commented Sep 21, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 71.92%. Comparing base (a767e92) to head (8d18592).
Report is 4 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff              @@
##               main   #16024      +/-   ##
============================================
- Coverage     71.98%   71.92%   -0.07%     
- Complexity    64542    64550       +8     
============================================
  Files          5288     5289       +1     
  Lines        301474   301503      +29     
  Branches      43552    43557       +5     
============================================
- Hits         217024   216861     -163     
- Misses        66657    66851     +194     
+ Partials      17793    17791       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@reta
Copy link
Collaborator

reta commented Sep 27, 2024

Thanks @cwperks !

Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Craig Perkins <cwperx@amazon.com>
@cwperks
Copy link
Member Author

cwperks commented Oct 1, 2024

Made a small change in the CHANGELOG notes to move another entry from the Added section to the Changed section.

@reta reta added backport 2.x Backport to 2.x branch v3.0.0 Issues and PRs related to version 3.0.0 v2.18.0 Issues and PRs related to version 2.18.0 labels Oct 1, 2024
Copy link
Contributor

github-actions bot commented Oct 1, 2024

❕ Gradle check result for 8d18592: UNSTABLE

Please review all flaky tests that succeeded after retry and create an issue if one does not already exist to track the flaky failure.

@reta reta merged commit 7b248ef into opensearch-project:main Oct 1, 2024
45 of 47 checks passed
@opensearch-trigger-bot
Copy link
Contributor

The backport to 2.x failed:

The process '/usr/bin/git' failed with exit code 128

To backport manually, run these commands in your terminal:

# Navigate to the root of your repository
cd $(git rev-parse --show-toplevel)
# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/OpenSearch/backport-2.x 2.x
# Navigate to the new working tree
pushd ../.worktrees/OpenSearch/backport-2.x
# Create a new branch
git switch --create backport/backport-16024-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 7b248efc5ab50573ed25a9eaac5d44c9b75c243a
# Push it to GitHub
git push --set-upstream origin backport/backport-16024-to-2.x
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/OpenSearch/backport-2.x

Then, create a pull request where the base branch is 2.x and the compare/head branch is backport/backport-16024-to-2.x.

@reta
Copy link
Collaborator

reta commented Oct 1, 2024

@cwperks could you please backport to 2.x manually? thank you

cwperks added a commit to cwperks/OpenSearch that referenced this pull request Oct 1, 2024
* Remove Identity FeatureFlag

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Add to CHANGELOG

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Mark IdentityService as internal

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Add @internalapi annotation

Signed-off-by: Craig Perkins <cwperx@amazon.com>

---------

Signed-off-by: Craig Perkins <cwperx@amazon.com>
(cherry picked from commit 7b248ef)
@cwperks
Copy link
Member Author

cwperks commented Oct 1, 2024

Opened a manual backport: #16157

reta pushed a commit that referenced this pull request Oct 1, 2024
* Remove Identity FeatureFlag

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Add to CHANGELOG

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Mark IdentityService as internal

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Add @internalapi annotation

Signed-off-by: Craig Perkins <cwperx@amazon.com>

---------

Signed-off-by: Craig Perkins <cwperx@amazon.com>
(cherry picked from commit 7b248ef)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport 2.x Backport to 2.x branch backport-failed v2.18.0 Issues and PRs related to version 2.18.0 v3.0.0 Issues and PRs related to version 3.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[RFC] Strengthen System Index Protection in the Plugin Ecosystem
2 participants