Skip to content

Conversation

@pedro93
Copy link
Collaborator

@pedro93 pedro93 commented Dec 4, 2025

Summary

Fixed bug where Elasticsearch Cloud user role name was being doubled (e.g., prefix_accessaccess instead of prefix_access).

Root Cause

The user template files had "roles":["PREFIXaccess"] instead of "roles":["PREFIX"]. When the code substituted PREFIX with the full role name (which already includes the _access suffix like dh_access), it resulted in a doubled suffix: dh_accessaccess.

Impact

This caused authentication failures when DataHub tried to connect to Elasticsearch with security exceptions like:

action [indices:data/read/search] is unauthorized for user [dh] 
with effective roles [] (assigned roles [dh_accessaccess] were not found)

@codecov
Copy link

codecov bot commented Dec 4, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants