[CI] SecureHdfsSearchableSnapshotsIT class failing

[elasticsearchmachine]

Build Scans:

• elasticsearch-periodic #6237 / openjdk24_checkpart2_java-matrix
• elasticsearch-pull-request #55429 / part-2

Reproduction Line:

undefined

Applicable branches:
main

Reproduces locally?:
N/A

Failure History:
See dashboard

Failure Message:

undefined

Issue Reasons:

• [main] 2 failures in class org.elasticsearch.xpack.searchablesnapshots.hdfs.SecureHdfsSearchableSnapshotsIT (1.1% fail rate in 179 executions)

Note:
This issue was created using new test triage automation. Please report issues or feedback to es-delivery.

[elasticsearchmachine]

This has been muted on branch main

Mute Reasons:

• [main] 2 failures in class org.elasticsearch.xpack.searchablesnapshots.hdfs.SecureHdfsSearchableSnapshotsIT (1.1% fail rate in 179 executions)

Build Scans:

• elasticsearch-periodic #6237 / openjdk24_checkpart2_java-matrix
• elasticsearch-pull-request #55429 / part-2

[elasticsearchmachine]

Pinging @elastic/es-delivery (Team:Delivery)

[tlrx]

This test, like many other in the build, failed because the cluster could not be formed due to:

[ERROR][o.e.b.Elasticsearch ] [test-cluster-0] fatal exception while booting Elasticsearch java.lang.IllegalArgumentException: error loading whitelist(s) [org.elasticsearch.script.proce
ssor_conditional.txt]:[34]

I wonder if this is related to recent changes around scripting and security manager, so maybe @elastic/es-core-infra and @jdconrad have an idea.

[elasticsearchmachine]

Pinging @elastic/es-core-infra (Team:Core/Infra)

[ldematte]

The 2 failures are unrelated.
The PR failure seems like a fluke/a botched PR - it failed a lot of IT tests.

The periodic failure seems related to security manager.
We did not change anything around scripting and security manager - work around security manager replacement/removal is guarded with a command line setting anyway.
But it is SM related, as in "the SM Is not there", as it run on Java24.

[2025-02-06T21:35:37,928][ERROR][f.h.o.a.h.h.s.n.FSNamesystem] [suite] FSNamesystem initialization failed.	
java.lang.UnsupportedOperationException: getSubject is not supported	
	at javax.security.auth.Subject.getSubject(Subject.java:277) ~[?:?]

That needs hot-patch HDFS, as it is HDFS that uses a SM-related function (removed in JDK 24).
I thought I patched that already, but I'll double check.