Snapshot status "Cannot modify incoming request."

driveirk · January 12, 2024, 8:31pm

When I make a request:
https://127.0.0.1:9201/_snapshot/aex20-repo/snapshot_.ds-location-logs-2023.11.29-000001/_status?pretty

I see a 403 error and error:

[2024-01-12T19:00:00,272][ERROR][tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext] [server01-client] [2008461025-1311637431#10176960] Cannot modify request with filtered data
org.elasticsearch.repositories.RepositoryMissingException: [aex20-repo] missing
	at org.elasticsearch.repositories.RepositoriesService.repository(RepositoriesService.java:560) ~[elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.repositories.RepositoriesService.getRepositoryData(RepositoriesService.java:536) ~[elasticsearch-7.15.1.jar:7.15.1]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.$anonfun$snapshotsBy$1(EsServerBasedRorClusterService.scala:384) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at org.elasticsearch.action.support.PlainActionFuture.get(PlainActionFuture.java:21) ~[elasticsearch-7.15.1.jar:7.15.1]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.snapshotsBy(EsServerBasedRorClusterService.scala:383) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.$anonfun$allSnapshots$3(EsServerBasedRorClusterService.scala:112) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at scala.Option.map(Option.scala:242) ~[scala-library-2.13.11.jar:?]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.$anonfun$allSnapshots$1(EsServerBasedRorClusterService.scala:112) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at scala.collection.immutable.List.flatMap(List.scala:293) ~[scala-library-2.13.11.jar:?]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.allSnapshots(EsServerBasedRorClusterService.scala:105) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.BaseEsRequestContext.allSnapshots$lzycompute(BaseEsRequestContext.scala:116) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.BaseEsRequestContext.allSnapshots(BaseEsRequestContext.scala:116) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.fullNamedSnapshotsFrom(SnapshotsStatusEsRequestContext.scala:114) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.snapshotsFrom(SnapshotsStatusEsRequestContext.scala:107) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.modifySnapshotStatusRequest(SnapshotsStatusEsRequestContext.scala:94) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.modifyRequest(SnapshotsStatusEsRequestContext.scala:60) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.modifyRequest(SnapshotsStatusEsRequestContext.scala:37) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.EsRequest.$anonfun$modifyUsing$1(EsRequest.scala:33) ~[readonlyrest-1.53.0_es7.15.1.jar:?]
	at scala.util.Try$.apply(Try.scala:210) ~[scala-library-2.13.11.jar:?]
	at tech.beshu.ror.es.handler.request.context.EsRequest.modifyUsing(EsRequest.scala:33) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.EsRequest.modifyUsing$(EsRequest.scala:31) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.BaseSnapshotEsRequestContext.modifyUsing(BaseSnapshotEsRequestContext.scala:28) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.onAllow(RegularRequestHandler.scala:94) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$commitResult$1(RegularRequestHandler.scala:67) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.scala:18) [scala-library-2.13.11.jar:?]
	at scala.util.Try$.apply(Try.scala:210) [scala-library-2.13.11.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.commitResult(RegularRequestHandler.scala:65) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$2(RegularRequestHandler.scala:57) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$2$adapted(RegularRequestHandler.scala:56) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.utils.ScalaOps$AutoCloseableOps$.bracket$extension(ScalaOps.scala:181) [core-1.53.0.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$1(RegularRequestHandler.scala:56) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$1$adapted(RegularRequestHandler.scala:55) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at monix.eval.Task$Map.apply(Task.scala:4727) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task$Map.apply(Task.scala:4723) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.internal.TaskRunLoop$.startLight(TaskRunLoop.scala:378) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task.runAsyncOptF(Task.scala:812) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task.runAsyncOpt(Task.scala:710) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task.runAsync(Task.scala:660) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at tech.beshu.ror.es.IndexLevelActionFilter.handleRequest(IndexLevelActionFilter.scala:171) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.proceedByRorEngine(IndexLevelActionFilter.scala:159) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.proceed(IndexLevelActionFilter.scala:146) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.$anonfun$apply$1(IndexLevelActionFilter.scala:119) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.scala:18) [scala-library-2.13.11.jar:?]
	at tech.beshu.ror.utils.AccessControllerHelper$$anon$1.run(AccessControllerHelper.scala:27) [core-1.53.0.jar:?]
	at java.security.AccessController.doPrivileged(Native Method) [?:?]
	at tech.beshu.ror.utils.AccessControllerHelper$.doPrivileged(AccessControllerHelper.scala:26) [core-1.53.0.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.apply(IndexLevelActionFilter.scala:114) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:171) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:149) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:90) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.action.RestCancellableNodeClient.doExecute(RestCancellableNodeClient.java:80) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.execute(AbstractClient.java:695) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.snapshotsStatus(AbstractClient.java:1089) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.action.admin.cluster.RestSnapshotsStatusAction.lambda$prepareRequest$0(RestSnapshotsStatusAction.java:57) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.BaseRestHandler.handleRequest(BaseRestHandler.java:106) [elasticsearch-7.15.1.jar:7.15.1]
	at tech.beshu.ror.es.utils.ChannelInterceptingRestHandlerDecorator.handleRequest(ChannelInterceptingRestHandlerDecorator.scala:41) [readonlyrest-1.53.0_es7.15.1.jar:?]
	at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:275) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.RestController.tryAllHandlers(RestController.java:343) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:196) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.AbstractHttpServerTransport.dispatchRequest(AbstractHttpServerTransport.java:348) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.AbstractHttpServerTransport.handleIncomingRequest(AbstractHttpServerTransport.java:413) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.AbstractHttpServerTransport.incomingRequest(AbstractHttpServerTransport.java:330) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.netty4.Netty4HttpRequestHandler.channelRead0(Netty4HttpRequestHandler.java:31) [transport-netty4-client-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.netty4.Netty4HttpRequestHandler.channelRead0(Netty4HttpRequestHandler.java:17) [transport-netty4-client-7.15.1.jar:7.15.1]
	at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:99) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at org.elasticsearch.http.netty4.Netty4HttpPipeliningHandler.channelRead(Netty4HttpPipeliningHandler.java:47) [transport-netty4-client-7.15.1.jar:7.15.1]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageCodec.channelRead(MessageToMessageCodec.java:111) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:346) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:318) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.timeout.IdleStateHandler.channelRead(IdleStateHandler.java:286) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1475) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1338) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1387) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:529) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:689) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:652) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.101.Final.jar:4.1.101.Final]
	at java.lang.Thread.run(Thread.java:834) [?:?]
[2024-01-12T19:00:00,278][ERROR][tech.beshu.ror.es.handler.RegularRequestHandler] [server01-client] [2008461025-1311637431#10176960] Cannot modify incoming request. Passing it could lead to a security leak. Report this issue as fast as you can.

On a server in the same cluster without ROR, the request works.
The query also works:
https://127.0.0.1:9201/_snapshot/aex20-repo/snapshot_.ds-location-logs-2023.11.29-000001?pretty

ROR: Enterprise 1.53.0_es7.15.1
Elasticsearch: 7.15.1
Kibana: 7.15.1

ACL in ROR:

    - name: "LOCALHOST-only access"
      hosts: ["127.0.0.1"]
      headers_and: ["~x-forwarded-for:*", "~X-Passed-Nginx:*"]

I tried adding:

kibana_access: unrestricted

But it did not help.

{“customer_id”: “6c4a385b-2ae8-4f02-a9cd-ef24addfb5b3”, “subscription_id”: “32d4073f-dc2f-4056-a868-842727c637cd”}

driveirk · January 12, 2024, 8:42pm

And I use plugin
repository-s3 7.15.1

coutoPL · January 14, 2024, 7:33pm

Thanks for reporting the problem.

I have a few questions:

do you confirm aex20-repo repository exists?
do you confirm snapshot_.ds-location-logs-2023.11.29-000001 snapshot exists?
please show us FORBIDDEN ES logs entry

I need to know more about the context because we have this functionality tested and I see no obvious issue.

driveirk · January 14, 2024, 8:38pm

Yes, I confirm.
Link

I see information that if there was no repository or there was no snapshot, then the link would show an error.

There are no forbidens in the logs. Only this is a mistake.

ElasticSearch’s response:

{
  "error" : {
    "root_cause" : [
      {
        "type" : "forbidden_response",
        "reason" : "Wrong password or try clearing your browser cache",
        "due_to" : "OPERATION_NOT_ALLOWED"
      }
    ],
    "type" : "forbidden_response",
    "reason" : "Wrong password or try clearing your browser cache",
    "due_to" : "OPERATION_NOT_ALLOWED"
  },
  "status" : 403
}

driveirk · January 14, 2024, 8:41pm

The problem is only reproduced if you specify ‘_status’

driveirk · January 15, 2024, 4:46pm

I understood what the problem was.
The error is reproduced on a node without a role:

node.roles: [ ]

If you specify the Master role, the problem disappears.

node.roles: [ master ]

coutoPL · January 15, 2024, 7:28pm

Wow. This is interesting. We will check

driveirk · February 6, 2024, 2:38pm

Were you able to reproduce the problem? Do you have any idea when you can fix the problem?

coutoPL · February 6, 2024, 7:23pm

We have it in the current ROR 1.56.0 sprint. We release once a month.

driveirk · March 4, 2024, 11:24am

February is over and there is no new version of ROR. Tell me when the new version will be released?

coutoPL · March 4, 2024, 6:47pm

The release is blocked by i.a. the issue reported in this thread.
I guess, you are more interested in the fix than the release per se, right?

driveirk · March 4, 2024, 8:21pm

Yes, the solution to the problem worries me more. Thank you.

coutoPL · March 10, 2024, 7:13pm

Pre-build to test: ROR 1.56.0-pre6 for ES 7.15.1

driveirk · March 11, 2024, 12:43pm

No, I still see the error.

kcs01-client readonlyrest  1.56.0-pre6
kcs01-client repository-s3 7.15.1

error:

[2024-03-11T12:35:54,233][ERROR][tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext] [kcs01-client] [980578717-836592686#4343] Cannot modify request with filtered data
org.elasticsearch.repositories.RepositoryMissingException: [aex20-repo] missing
	at org.elasticsearch.repositories.RepositoriesService.repository(RepositoriesService.java:560) ~[elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.repositories.RepositoriesService.getRepositoryData(RepositoriesService.java:536) ~[elasticsearch-7.15.1.jar:7.15.1]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.$anonfun$snapshotsBy$1(EsServerBasedRorClusterService.scala:378) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at org.elasticsearch.action.support.PlainActionFuture.get(PlainActionFuture.java:21) ~[elasticsearch-7.15.1.jar:7.15.1]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.snapshotsBy(EsServerBasedRorClusterService.scala:377) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.$anonfun$allSnapshots$3(EsServerBasedRorClusterService.scala:112) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at scala.Option.map(Option.scala:242) ~[scala-library-2.13.13.jar:?]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.$anonfun$allSnapshots$1(EsServerBasedRorClusterService.scala:112) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at scala.collection.immutable.List.flatMap(List.scala:294) ~[scala-library-2.13.13.jar:?]
	at tech.beshu.ror.es.services.EsServerBasedRorClusterService.allSnapshots(EsServerBasedRorClusterService.scala:105) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.BaseEsRequestContext.allSnapshots$lzycompute(BaseEsRequestContext.scala:116) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.BaseEsRequestContext.allSnapshots(BaseEsRequestContext.scala:116) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.fullNamedSnapshotsFrom(SnapshotsStatusEsRequestContext.scala:114) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.snapshotsFrom(SnapshotsStatusEsRequestContext.scala:107) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.modifySnapshotStatusRequest(SnapshotsStatusEsRequestContext.scala:94) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.modifyRequest(SnapshotsStatusEsRequestContext.scala:60) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.snapshots.SnapshotsStatusEsRequestContext.modifyRequest(SnapshotsStatusEsRequestContext.scala:37) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.EsRequest.$anonfun$modifyUsing$1(EsRequest.scala:33) ~[readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at scala.util.Try$.apply(Try.scala:217) ~[scala-library-2.13.13.jar:?]
	at tech.beshu.ror.es.handler.request.context.EsRequest.modifyUsing(EsRequest.scala:33) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.EsRequest.modifyUsing$(EsRequest.scala:31) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.request.context.types.BaseSnapshotEsRequestContext.modifyUsing(BaseSnapshotEsRequestContext.scala:28) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.onAllow(RegularRequestHandler.scala:94) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$commitResult$1(RegularRequestHandler.scala:67) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.scala:18) [scala-library-2.13.13.jar:?]
	at scala.util.Try$.apply(Try.scala:217) [scala-library-2.13.13.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.commitResult(RegularRequestHandler.scala:65) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$2(RegularRequestHandler.scala:57) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$2$adapted(RegularRequestHandler.scala:56) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.utils.ScalaOps$AutoCloseableOps$.bracket$extension(ScalaOps.scala:181) [core-1.56.0-pre6.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$1(RegularRequestHandler.scala:56) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.handler.RegularRequestHandler.$anonfun$handle$1$adapted(RegularRequestHandler.scala:55) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at monix.eval.Task$Map.apply(Task.scala:4727) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task$Map.apply(Task.scala:4723) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.internal.TaskRunLoop$.startLight(TaskRunLoop.scala:378) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task.runAsyncOptF(Task.scala:812) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task.runAsyncOpt(Task.scala:710) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at monix.eval.Task.runAsync(Task.scala:660) [monix-eval_2.13-3.4.1.jar:3.4.1]
	at tech.beshu.ror.es.IndexLevelActionFilter.handleRequest(IndexLevelActionFilter.scala:171) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.proceedByRorEngine(IndexLevelActionFilter.scala:159) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.proceed(IndexLevelActionFilter.scala:146) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.$anonfun$apply$1(IndexLevelActionFilter.scala:119) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.scala:18) [scala-library-2.13.13.jar:?]
	at tech.beshu.ror.utils.AccessControllerHelper$$anon$1.run(AccessControllerHelper.scala:27) [core-1.56.0-pre6.jar:?]
	at java.security.AccessController.doPrivileged(Native Method) [?:?]
	at tech.beshu.ror.utils.AccessControllerHelper$.doPrivileged(AccessControllerHelper.scala:26) [core-1.56.0-pre6.jar:?]
	at tech.beshu.ror.es.IndexLevelActionFilter.apply(IndexLevelActionFilter.scala:114) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:171) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:149) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:90) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.action.RestCancellableNodeClient.doExecute(RestCancellableNodeClient.java:80) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.execute(AbstractClient.java:695) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.client.support.AbstractClient$ClusterAdmin.snapshotsStatus(AbstractClient.java:1089) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.action.admin.cluster.RestSnapshotsStatusAction.lambda$prepareRequest$0(RestSnapshotsStatusAction.java:57) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.BaseRestHandler.handleRequest(BaseRestHandler.java:106) [elasticsearch-7.15.1.jar:7.15.1]
	at tech.beshu.ror.es.utils.ChannelInterceptingRestHandlerDecorator.handleRequest(ChannelInterceptingRestHandlerDecorator.scala:42) [readonlyrest-1.56.0-pre6_es7.15.1.jar:?]
	at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:275) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.RestController.tryAllHandlers(RestController.java:343) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:196) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.AbstractHttpServerTransport.dispatchRequest(AbstractHttpServerTransport.java:348) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.AbstractHttpServerTransport.handleIncomingRequest(AbstractHttpServerTransport.java:413) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.AbstractHttpServerTransport.incomingRequest(AbstractHttpServerTransport.java:330) [elasticsearch-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.netty4.Netty4HttpRequestHandler.channelRead0(Netty4HttpRequestHandler.java:31) [transport-netty4-client-7.15.1.jar:7.15.1]
	at org.elasticsearch.http.netty4.Netty4HttpRequestHandler.channelRead0(Netty4HttpRequestHandler.java:17) [transport-netty4-client-7.15.1.jar:7.15.1]
	at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:99) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at org.elasticsearch.http.netty4.Netty4HttpPipeliningHandler.channelRead(Netty4HttpPipeliningHandler.java:47) [transport-netty4-client-7.15.1.jar:7.15.1]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageCodec.channelRead(MessageToMessageCodec.java:111) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:346) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:318) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.timeout.IdleStateHandler.channelRead(IdleStateHandler.java:286) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1475) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1338) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1387) [netty-handler-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:529) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) [netty-codec-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:689) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:652) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) [netty-transport-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.101.Final.jar:4.1.101.Final]
	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.101.Final.jar:4.1.101.Final]
	at java.lang.Thread.run(Thread.java:834) [?:?]
[2024-03-11T12:35:54,237][ERROR][tech.beshu.ror.es.handler.RegularRequestHandler] [kcs01-client] [980578717-836592686#4343] Cannot modify incoming request. Passing it could lead to a security leak. Report this issue as fast as you can.

Request:

GET /_snapshot/aex20-repo/snapshot_.ds-logs-2024.02.23-000165/_status?pretty

answer

{
  "error" : {
    "root_cause" : [
      {
        "type" : "forbidden_response",
        "reason" : "Wrong password or try clearing your browser cache",
        "due_to" : "OPERATION_NOT_ALLOWED"
      }
    ],
    "type" : "forbidden_response",
    "reason" : "Wrong password or try clearing your browser cache",
    "due_to" : "OPERATION_NOT_ALLOWED"
  },
  "status" : 403
}

Elasticsearch config, as I understand it, is important:

cluster.name: c01

node.name: ${HOSTNAME}-client
node.roles: [ ]
node.attr.host: ${HOSTNAME}

path.data: /var/lib/elasticsearch-1
path.logs: /var/log/elasticsearch-1

http.type: ssl_netty4

bootstrap.memory_lock: true

network.host: 0.0.0.0
http.port: 9201
transport.tcp.port: 9300

discovery.zen.ping.unicast.hosts: ['esm01:9300', 'esm02:9300', 'esm03:9300']
discovery.zen.minimum_master_nodes: 2

xpack.security.enabled: false

coutoPL · March 11, 2024, 3:37pm

Please follow the steps described in the docs to upgrade the plugin.

In this change, it’s really important.

driveirk · March 11, 2024, 5:53pm

I don’t see any difference in installation for version 7.15.1
Installation and start of elasticsearch.
Patching only for 8+ versions.

I tried patching it anyway. But the problem remains.

coutoPL · March 11, 2024, 7:18pm

This fix introduces the requirement of patching for ES 7.x too. The doc will be updated after the release.

driveirk · March 11, 2024, 9:18pm

done:

kcs01 elasticsearch]# /bin/java -jar plugins/readonlyrest/ror-tools.jar verify
Checking if Elasticsearch is patched ...
Elasticsearch is patched! ReadonlyREST can be used

The request is now working. Thank you. I’ll check the rest of the functionality.

coutoPL · March 11, 2024, 9:37pm

If you’d have any other problems with the patching step, here is the pre-build with improved patching step verification on ROR startup: ROR 1.56.0-pre6 for ES 7.15.1

driveirk · March 12, 2024, 9:08am

I gave it to a colleague so he could check everything while I slept. He was pleased. Thank you very much.
We are waiting for a stable version from you.