elasticsearch-api 7.13.3 → 8.14.0

data/spec/platinum/integration/eql/eql_async_spec.rb

@@ -0,0 +1,72 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'eql/Executes async EQL with missing events' do
+  let(:index) { 'eql_test_m' }
+  before do
+    ADMIN_CLIENT.indices.create(
+      index: index,
+      body: {
+        mappings: {
+          properties: {
+            '@timestamp' => { type: 'date' },
+            'event.category' => { type: 'keyword' },
+            user: { type: 'keyword' }
+          }
+        }
+      }
+    )
+    ADMIN_CLIENT.bulk(
+      refresh: true,
+      body: [
+        { index: { _index: 'eql_test_m', _id: '1' } },
+        { event: [{ category: 'process' }], '@timestamp' => '2023-07-11T11:09:05.529Z', user: 'foo' },
+        { index: { _index: 'eql_test_m', _id: '2'} },
+        { event: [{ category: 'process' }], '@timestamp' => '2023-07-11T11:09:06.529Z', user: 'bar' }
+      ]
+    )
+  end
+
+  after do
+    ADMIN_CLIENT.indices.delete(index: index)
+  end
+
+  it 'Executes async EQL with missing events' do
+    response = ADMIN_CLIENT.eql.search(
+      index: 'eql_test_m',
+      wait_for_completion_timeout: '0ms',
+      keep_on_completion: true,
+      body: { query: 'sequence with maxspan=24h [ process where true ] ![ process where true ]' }
+    )
+    expect(response.status).to eq 200
+    expect(response['id']).not_to be_nil
+    id = response['id']
+
+    response = ADMIN_CLIENT.eql.get(id: id, wait_for_completion_timeout: '10s')
+    expect(response.status).to eq 200
+    expect(response['is_running']).to be false
+    expect(response['is_partial']).to be false
+    expect(response['timed_out']).to be false
+    expect(response['hits']['total']['value']).to eq 1
+    expect(response['hits']['total']['relation']).to eq 'eq'
+    expect(response['hits']['total']['relation']).to eq 'eq'
+    expect(response['hits']['sequences'].first['events'].first['_source']['user']).to eq 'bar'
+    expect(response['hits']['sequences'].first['events'].last['missing']).to be true
+  end
+end

data/spec/platinum/integration/health/health_spec.rb

@@ -0,0 +1,49 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'Health API' do
+  context 'Usage stats on the health API' do
+    before do
+      ADMIN_CLIENT.indices.create(
+        index: 'red_index',
+        body: {
+          settings: {
+            number_of_shards: 1,
+            number_of_replicas: 0,
+            'index.routing.allocation.enable' => 'none'
+          }
+        }
+      )
+    end
+
+    after do
+      ADMIN_CLIENT.indices.delete(index: 'red_index')
+    end
+
+    it 'responds with health report' do
+      expect(ADMIN_CLIENT.health_report.status).to eq 200
+      expect(ADMIN_CLIENT.health_report(feature: 'disk').status).to eq 200
+      response = ADMIN_CLIENT.xpack.usage
+      expect(response['health_api']['available']).to eq true
+      expect(response['health_api']['enabled']).to eq true
+      expect(response['health_api']['invocations']['total']).to be >= 2
+      expect(response['health_api']['invocations']['verbose_true']).to be >= 2
+    end
+  end
+end

data/spec/platinum/integration/ml/get_memory_stats_spec.rb

@@ -0,0 +1,47 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'ML/Get Memory Stats API' do
+  it 'gets memory for all nodes' do
+    response = ADMIN_CLIENT.ml.get_memory_stats
+    expect(response.status).to eq 200
+    expect(response['cluster_name']).not_to be_nil
+    expect(response['_nodes']['total']).to be >= 1
+    expect(response['nodes'].first[1]['mem']['total_in_bytes']).to be > 1
+  end
+
+  it 'gets memory for ML nodes' do
+    response = ADMIN_CLIENT.ml.get_memory_stats
+    expect(response.status).to eq 200
+    expect(response['cluster_name']).not_to be_nil
+    expect(response['nodes'].first[1]['mem']['total_in_bytes']).to be > 1
+  end
+
+  it 'gets memory for specific node' do
+    response = ADMIN_CLIENT.ml.get_memory_stats
+    expect(response.status).to eq 200
+    node_id = response['nodes'].keys.first
+
+    response = ADMIN_CLIENT.ml.get_memory_stats(node_id: node_id, timeout: '29s')
+    expect(response.status).to eq 200
+    expect(response['cluster_name']).not_to be_nil
+    expect(response['nodes'].first[1]['mem']['total_in_bytes']).to be > 1
+    expect(response['_nodes']['total']).to be 1
+  end
+end

data/spec/platinum/integration/platinum_helper.rb

@@ -0,0 +1,42 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require 'openssl'
+require 'elasticsearch'
+
+CERTS_PATH = File.expand_path('./../.buildkite/certs')
+
+host = ENV['TEST_ES_SERVER'] || 'https://localhost:9200'
+raise URI::InvalidURIError unless host =~ /\A#{URI::DEFAULT_PARSER.make_regexp}\z/
+
+password = ENV['ELASTIC_PASSWORD'] || 'changeme'
+HOST_URI = URI.parse(host)
+raw_certificate = File.read("#{CERTS_PATH}/testnode.crt")
+certificate = OpenSSL::X509::Certificate.new(raw_certificate)
+raw_key = File.read("#{CERTS_PATH}/testnode.key")
+key = OpenSSL::PKey::RSA.new(raw_key)
+ca_file = File.expand_path("#{CERTS_PATH}/ca.crt")
+TRANSPORT_OPTIONS = { ssl: { verify: false, client_cert: certificate, client_key: key, ca_file: ca_file } }
+HOST = "https://elastic:#{password}@#{HOST_URI.host}:#{HOST_URI.port}".freeze
+
+ADMIN_CLIENT = Elasticsearch::Client.new(host: HOST, transport_options: TRANSPORT_OPTIONS)
+
+RSpec.configure do |config|
+  config.add_formatter('documentation')
+  config.add_formatter('RSpec::Core::Formatters::HtmlFormatter', "tmp/platinum-#{ENV['RUBY_VERSION']}-manual-integration.html")
+  config.color_mode = :on
+end

data/spec/platinum/integration/security/users_query_spec.rb

@@ -0,0 +1,49 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'security/Query User' do
+  before do
+    ADMIN_CLIENT.security.put_user(
+      username: "query_users_test",
+      body: {
+        password: "x-pack-test-password",
+        roles: [ "manage_users_role" ],
+        full_name: "Read User"
+      }
+    )
+  end
+
+  it 'queries users' do
+    response = ADMIN_CLIENT.security.query_user(body: {})
+    expect(response.status).to eq 200
+    expect(response['count']).to be > 0
+    expect(response['total']).to be > 0
+  end
+
+  it 'queries user and finds created one' do
+    body = {
+      query: { wildcard: { username: 'query_users_*' } }
+    }
+    response = ADMIN_CLIENT.security.query_user(body: body)
+    expect(response.status).to eq 200
+    expect(response['count']).to be 1
+    expect(response['total']).to be 1
+    expect(response['users'].first['username']).to eq 'query_users_test'
+  end
+end

data/spec/platinum/integration/service_accounts/service_accounts_spec.rb

@@ -0,0 +1,65 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'Service Accounts API' do
+  context 'service account tokens' do
+    before do
+
+    end
+
+    after do
+      ADMIN_CLIENT.security.delete_service_token(
+        namespace: 'elastic',
+        service: 'fleet-server',
+        name: 'api-token-fleet'
+      )
+    end
+
+    it 'responds with health report' do
+      response = ADMIN_CLIENT.security.create_service_token(
+        namespace: 'elastic',
+        service: 'fleet-server',
+        name: 'api-token-fleet'
+      )
+      expect(response.status).to eq 200
+      expect(response['created']).to eq true
+      service_token_fleet = response['token']['value']
+      headers = { 'Authorization' => "Bearer #{service_token_fleet}"}
+      client = Elasticsearch::Client.new(
+        host: HOST,
+        transport_options: TRANSPORT_OPTIONS.merge(headers: headers)
+      )
+      response = client.security.authenticate
+
+      expect(response.status).to eq 200
+      expect(response['username']).to eq 'elastic/fleet-server'
+      expect(response['full_name']).to eq 'Service account - elastic/fleet-server'
+
+
+      expect do
+        client.security.delete_user(username: 'foo')
+      end.to raise_error Elastic::Transport::Transport::Errors::Forbidden
+
+      response = ADMIN_CLIENT.security.get_service_credentials(
+        namespace: 'elastic', service: 'fleet-server'
+      )
+      expect(response['service_account']).to eq 'elastic/fleet-server'
+    end
+  end
+end

data/spec/platinum/integration/snapshots/snapshots_spec.rb

@@ -0,0 +1,84 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'Snapshots API' do
+  before do
+    ADMIN_CLIENT.snapshot.create_repository(
+      repository: 'test_repo_restore_1',
+      body: {
+        type: 'source',
+        settings: {
+          delegate_type: 'fs',
+          location: "test_repo_restore_1_loc"
+        }
+      }
+    )
+    ADMIN_CLIENT.indices.create(
+      index: index,
+      body: {
+        settings: {
+          number_of_shards: 1,
+          number_of_replicas: 0
+        }
+      }
+    )
+  end
+
+  after do
+    ADMIN_CLIENT.indices.delete(index: 'test_index')
+    ADMIN_CLIENT.snapshot.delete(repository: 'test_repo_restore_1', snapshot: 'test_snapshot')
+  end
+
+  let(:index) { 'test_index' }
+
+  it 'creates a source only snapshot and then restores it' do
+    ADMIN_CLIENT.index(index: index, id: '1', body: { foo: 'bar' })
+    ADMIN_CLIENT.indices.flush(index: index)
+    response = ADMIN_CLIENT.snapshot.create(
+      repository: 'test_repo_restore_1',
+      snapshot: 'test_snapshot',
+      wait_for_completion: true,
+      body: { "indices": "test_index" }
+    )
+    expect(response.status).to eq 200
+    expect(response['snapshot']['snapshot']).to eq 'test_snapshot'
+    expect(response['snapshot']['state']).to eq 'SUCCESS'
+    expect(response['snapshot']['version']).not_to be_nil
+
+    ADMIN_CLIENT.indices.close(index: index)
+    ADMIN_CLIENT.snapshot.restore(
+      repository: 'test_repo_restore_1',
+      snapshot: 'test_snapshot',
+      wait_for_completion: true,
+    )
+    response = ADMIN_CLIENT.indices.recovery(index: 'test_index')
+    expect(response.status).to eq 200
+    expect(response['test_index']['shards'].first['type']).to eq 'SNAPSHOT'
+    expect(response['test_index']['shards'].first['stage']).to eq 'DONE'
+    response = ADMIN_CLIENT.search(
+      rest_total_hits_as_int: true,
+      index: index,
+      body: { query: { match_all: {} } }
+    )
+    expect(response.status).to eq 200
+    expect(response['hits']['total']).to eq 1
+    expect(response['hits']['hits'].length).to eq 1
+    expect(response['hits']['hits'].first['_id']).to eq '1'
+  end
+end

data/spec/platinum/integration/spatial/script_doc_values_spec.rb

@@ -0,0 +1,147 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'Spatial API' do
+  context 'script doc values tests' do
+    index = 'geospatial_test'
+    before(:all) do
+      ADMIN_CLIENT.indices.create(
+        index: index,
+        body: {
+          settings: { number_of_shards: 1},
+          mappings: { properties: { geo_shape: { type: 'geo_shape' } } }
+        }
+      )
+      ADMIN_CLIENT.index(
+        index: index,
+        id: '1',
+        body: {
+          geo_shape: 'POLYGON((24.04725 59.942,24.04825 59.94125,24.04875 59.94125,24.04875 59.94175,24.048 59.9425,24.0475 59.94275,24.0465 59.94225,24.046 59.94225,24.04575 59.9425,24.04525 59.94225,24.04725 59.942))'
+        },
+        refresh: true
+      )
+      ADMIN_CLIENT.indices.refresh
+    end
+
+    after(:all) do
+      ADMIN_CLIENT.indices.delete(index: index)
+    end
+
+    it 'centroid' do
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: { centroid: { script: { source: "doc['geo_shape'].getCentroid()" } } }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['centroid'].first['lat']).to eq 59.942043484188616
+      expect(response['hits']['hits'].first['fields']['centroid'].first['lon']).to eq 24.047588920220733
+    end
+
+    it 'bounding box' do
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: { bbox: { script: { source: "doc['geo_shape'].getBoundingBox()" } } }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['bbox'].first['top_left']['lat']).to eq 59.942749994806945
+      expect(response['hits']['hits'].first['fields']['bbox'].first['top_left']['lon']).to eq 24.045249950140715
+      expect(response['hits']['hits'].first['fields']['bbox'].first['bottom_right']['lat']).to eq 59.94124996941537
+      expect(response['hits']['hits'].first['fields']['bbox'].first['bottom_right']['lon']).to eq 24.048749981448054
+    end
+
+    it 'label position' do
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: { label_position: { script: { source: "doc['geo_shape'].getLabelPosition()" } } }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['label_position'].first['lat']).to eq 59.942043484188616
+      expect(response['hits']['hits'].first['fields']['label_position'].first['lon']).to eq 24.047588920220733
+    end
+
+    it 'bounding box points' do
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: {
+            topLeft: { script: { source: "doc['geo_shape'].getBoundingBox().topLeft()" } },
+            bottomRight: { script: { source: "doc['geo_shape'].getBoundingBox().bottomRight()" } }
+          }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['topLeft'].first['lat']).to eq 59.942749994806945
+      expect(response['hits']['hits'].first['fields']['topLeft'].first['lon']).to eq 24.045249950140715
+      expect(response['hits']['hits'].first['fields']['bottomRight'].first['lat']).to eq 59.94124996941537
+      expect(response['hits']['hits'].first['fields']['bottomRight'].first['lon']).to eq 24.048749981448054
+    end
+
+    it 'dimensional type' do
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: { type: { script: { source:  "doc['geo_shape'].getDimensionalType()" } } }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['type'].first).to eq 2
+    end
+
+    it 'geoshape value' do
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: { type: { script: { source:  "doc['geo_shape'].get(0)" } } }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['type'].first).to eq '<unserializable>'
+
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: { type: { script: { source:  "field('geo_shape').get(null)"} } }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['type'].first).to eq '<unserializable>'
+
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: { type: { script: { source:  "$('geo_shape', null)"} } }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['type'].first).to eq '<unserializable>'
+    end
+
+    it 'diagonal length' do
+      response = ADMIN_CLIENT.search(
+        rest_total_hits_as_int: true,
+        body: {
+          script_fields: {
+            width: { script: { source: "doc['geo_shape'].getMercatorWidth()" } },
+            height: { script: { source: "doc['geo_shape'].getMercatorHeight()" } }
+          }
+        }
+      )
+      expect(response['hits']['hits'].first['fields']['width'].first).to eq 389.62170283915475
+      expect(response['hits']['hits'].first['fields']['height'].first).to eq 333.37976841442287
+    end
+  end
+end

data/spec/platinum/integration/token/token_spec.rb

@@ -0,0 +1,94 @@
+# Licensed to Elasticsearch B.V. under one or more contributor
+# license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright
+# ownership. Elasticsearch B.V. licenses this file to you under
+# the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+require_relative '../platinum_helper'
+
+describe 'Token API' do
+  before do
+    ADMIN_CLIENT.security.put_role(
+      name: 'admin_role',
+      body: { cluster: ['manage_security'] }
+    )
+    ADMIN_CLIENT.security.put_user(
+      username: 'token_user',
+      body: {
+        password: 'x-pack-test-password',
+        roles: [ 'admin_role' ],
+        full_name: 'Token user'
+      }
+    )
+  end
+
+  after do
+    ADMIN_CLIENT.security.delete_role(name: "admin_role", ignore: 404)
+    ADMIN_CLIENT.security.delete_user(username: "token_user", ignore: 404)
+  end
+
+  it 'invalidates user token' do
+    response = ADMIN_CLIENT.security.get_token(
+      body: { grant_type: "password", username: "token_user", password: "x-pack-test-password" }
+    )
+
+    expect(response.status).to eq 200
+    expect(response['type']).to eq 'Bearer'
+    expect(response['access_token']).not_to be_nil
+    access_token = response['access_token']
+    client = Elasticsearch::Client.new(
+      host: "https://#{HOST_URI.host}:#{HOST_URI.port}",
+      transport_options: TRANSPORT_OPTIONS.merge(
+        headers: { Authorization: "Bearer #{access_token}" }
+      )
+    )
+    response = client.security.authenticate
+    expect(response.status).to eq 200
+    expect(response['username']).to eq 'token_user'
+    expect(response['roles'].first).to eq 'admin_role'
+    ADMIN_CLIENT.security.invalidate_token(
+      body: { username: 'token_user' }
+    )
+
+    expect do
+      client.security.authenticate
+    end.to raise_error(Elastic::Transport::Transport::Errors::Unauthorized)
+  end
+
+  it 'invalidates realm token' do
+    response = ADMIN_CLIENT.security.get_token(
+      body: { grant_type: "password", username: "token_user", password: "x-pack-test-password" }
+    )
+    expect(response.status).to eq 200
+    expect(response['type']).to eq 'Bearer'
+    expect(response['access_token']).not_to be_nil
+    access_token = response['access_token']
+    client = Elasticsearch::Client.new(
+      host: "https://#{HOST_URI.host}:#{HOST_URI.port}",
+      transport_options: TRANSPORT_OPTIONS.merge(
+        headers: { Authorization: "Bearer #{access_token}" }
+      )
+    )
+    response = client.security.authenticate
+    expect(response.status).to eq 200
+    expect(response['username']).to eq 'token_user'
+    expect(response['roles'].first).to eq 'admin_role'
+    response = ADMIN_CLIENT.security.invalidate_token(body: { realm_name: 'default_native' })
+    expect(response.status).to eq 200
+
+    expect do
+      client.security.authenticate
+    end.to raise_error(Elastic::Transport::Transport::Errors::Unauthorized)
+  end
+end