Enabling entitlements for my plugin using Elastic Search 8.18.0

Elastic Stack Elasticsearch
1

I have a custom search plugin that I can install. I am getting an exception when the plugin gets called:
Not entitled: component [cmr_spatial], module [ALL-UNNAMED], class [class clojure.lang.DynamicClassLoader], entitlement [create_class_loader]"

I have tried creating a entitlement-policy.yaml file with the following contents:
ALL-UNNAMED:

  • create_class_loader

I have added to the jvm-opts -Des.entitlements.enabled=false - although earlier in the jvm-opts Elastic search sets this to true.

I can't figure out how to either get permission to create the class loader or to disable the entitlements. Any help would be appreciated. Thank you

2

Hello @eereiter;
Entitlements are a security feature and It's not possible to disable them.
You are on the right path creating a entitlement-policy.yaml file, but as you can see here Creating classic plugins | Elastic Documentation in the docs, create_class_loader is not available to external plugins; give the ability to 3rd party code to create and load arbitrary classes from arbitrary sources could compromise the ES server process security.
I am afraid there is no workaround available for 8.18.0 and 9.0.0 currently; the only option is to re-work your plugin so it does not create or use a dependency that creates a class loader.

3

Thanks for the response and information. I appreciate it.