Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run the Get Connector request in a stashed threadcontext #3492

Merged
merged 2 commits into from
Feb 3, 2025

Conversation

cwperks
Copy link
Member

@cwperks cwperks commented Feb 3, 2025

Description

This PR fixes CI issues seen in the skills repo when testing with security.

ref: https://github.com/opensearch-project/skills/actions/runs/13076372692/job/36489480535

This PR surrounds the call to the .plugins-ml-connector index in a stashed context to ensure the action runs in a trusted system context.

The security plugin has logic to scrub results when searching on system indices or getting individual documents for regular users. Plugins must surround calls to system indices to run in the trusted system context.

Check List

  • New functionality includes testing.
  • New functionality has been documented.
  • API changes companion pull request created.
  • Commits are signed per the DCO using --signoff.
  • Public documentation issue/PR created.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Craig Perkins <[email protected]>
@cwperks cwperks had a problem deploying to ml-commons-cicd-env-require-approval February 3, 2025 20:18 — with GitHub Actions Failure
@cwperks cwperks temporarily deployed to ml-commons-cicd-env-require-approval February 3, 2025 20:18 — with GitHub Actions Inactive
@cwperks cwperks had a problem deploying to ml-commons-cicd-env-require-approval February 3, 2025 21:19 — with GitHub Actions Failure
@dhrubo-os dhrubo-os merged commit 09bf858 into opensearch-project:main Feb 3, 2025
7 of 8 checks passed
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 3, 2025
* Run the Get Connector request in a stashed threadcontext

Signed-off-by: Craig Perkins <[email protected]>

* Add restore context

Signed-off-by: Craig Perkins <[email protected]>

---------

Signed-off-by: Craig Perkins <[email protected]>
(cherry picked from commit 09bf858)
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 3, 2025
* Run the Get Connector request in a stashed threadcontext

Signed-off-by: Craig Perkins <[email protected]>

* Add restore context

Signed-off-by: Craig Perkins <[email protected]>

---------

Signed-off-by: Craig Perkins <[email protected]>
(cherry picked from commit 09bf858)
dhrubo-os pushed a commit that referenced this pull request Feb 3, 2025
* Run the Get Connector request in a stashed threadcontext

Signed-off-by: Craig Perkins <[email protected]>

* Add restore context

Signed-off-by: Craig Perkins <[email protected]>

---------

Signed-off-by: Craig Perkins <[email protected]>
(cherry picked from commit 09bf858)

Co-authored-by: Craig Perkins <[email protected]>
dhrubo-os pushed a commit that referenced this pull request Feb 3, 2025
* Run the Get Connector request in a stashed threadcontext

Signed-off-by: Craig Perkins <[email protected]>

* Add restore context

Signed-off-by: Craig Perkins <[email protected]>

---------

Signed-off-by: Craig Perkins <[email protected]>
(cherry picked from commit 09bf858)

Co-authored-by: Craig Perkins <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants