[CI] Netty4HttpServerTransportTests testRespondAfterServiceCloseWithServerCancel failing

[elasticsearchmachine]

Build Scans:

• elasticsearch-periodic #9129 / openjdk21_checkpart1_java-fips-matrix
• elasticsearch-pull-request #78950 / part-1-fips
• elasticsearch-pull-request #78931 / part-1-fips

Reproduction Line:

./gradlew ":modules:transport-netty4:test" --tests "org.elasticsearch.http.netty4.Netty4HttpServerTransportTests.testRespondAfterServiceCloseWithClientCancel" -Dtests.seed=CBF518814AA65B22 -Dtests.locale=am-ET -Dtests.timezone=Etc/Zulu -Druntime.java=21 -Dtests.fips.enabled=true

Applicable branches:
main

Reproduces locally?:
N/A

Failure History:
See dashboard

Failure Message:

java.lang.IllegalStateException: could not create the default ssl context

Issue Reasons:

• [main] 2 consecutive failures in step part-1-fips
• [main] 3 failures in test testRespondAfterServiceCloseWithServerCancel (0.7% fail rate in 432 executions)
• [main] 2 failures in step part-1-fips (100.0% fail rate in 2 executions)
• [main] 2 failures in pipeline elasticsearch-pull-request (1.9% fail rate in 104 executions)

Note:
This issue was created using new test triage automation. Please report issues or feedback to es-delivery.

[elasticsearchmachine]

This has been muted on branch main

Mute Reasons:

• [main] 2 consecutive failures in step part-1-fips
• [main] 3 failures in test testRespondAfterServiceCloseWithServerCancel (0.7% fail rate in 432 executions)
• [main] 2 failures in step part-1-fips (100.0% fail rate in 2 executions)
• [main] 2 failures in pipeline elasticsearch-pull-request (1.9% fail rate in 104 executions)

Build Scans:

• elasticsearch-periodic #9129 / openjdk21_checkpart1_java-fips-matrix
• elasticsearch-pull-request #78950 / part-1-fips
• elasticsearch-pull-request #78931 / part-1-fips

[elasticsearchmachine]

Pinging @elastic/es-distributed-coordination (Team:Distributed Coordination)

[ywangd]

The underlying error is entitlement. Will reroute to core-infra.

[2025-07-03T21:41:32,734][WARN ][o.e.e.r.p.P.s.ALL-UNNAMED][testRespondAfterServiceCloseWithClientCancel] Not entitled: component [security], module [ALL-UNNAMED], class [class org.bouncycastle.jsse.provider.ProvTrustManagerFactorySpi], entitlement [file], operation [read], path [/dev/shm/bk/bk-agent-prod-gcp-1751577251891801576/elastic/elasticsearch-periodic/modules/transport-netty4/build/fips-resources/cacerts.bcfks]
org.elasticsearch.entitlement.runtime.api.NotEntitledException: component [security], module [ALL-UNNAMED], class [class org.bouncycastle.jsse.provider.ProvTrustManagerFactorySpi], entitlement [file], operation [read], path [/dev/shm/bk/bk-agent-prod-gcp-1751577251891801576/elastic/elasticsearch-periodic/modules/transport-netty4/build/fips-resources/cacerts.bcfks]
	at org.elasticsearch.entitlement.runtime.policy.PolicyCheckerImpl.notEntitled(PolicyCheckerImpl.java:471) ~[elasticsearch-entitlement-9.2.0-SNAPSHOT.jar:9.2.0-SNAPSHOT]
	at org.elasticsearch.entitlement.runtime.policy.PolicyCheckerImpl.checkFileRead(PolicyCheckerImpl.java:246) ~[elasticsearch-entitlement-9.2.0-SNAPSHOT.jar:9.2.0-SNAPSHOT]
	at org.elasticsearch.entitlement.runtime.policy.PolicyCheckerImpl.checkFileRead(PolicyCheckerImpl.java:209) ~[elasticsearch-entitlement-9.2.0-SNAPSHOT.jar:9.2.0-SNAPSHOT]
	at org.elasticsearch.entitlement.runtime.policy.PolicyCheckerImpl.checkFileRead(PolicyCheckerImpl.java:203) ~[elasticsearch-entitlement-9.2.0-SNAPSHOT.jar:9.2.0-SNAPSHOT]
	at org.elasticsearch.entitlement.runtime.policy.ElasticsearchEntitlementChecker.check$java_io_File$exists(ElasticsearchEntitlementChecker.java:1509) ~[elasticsearch-entitlement-9.2.0-SNAPSHOT.jar:9.2.0-SNAPSHOT]
	at java.io.File.exists(File.java) ~[?:?]
	at org.bouncycastle.jsse.provider.ProvTrustManagerFactorySpi.getDefaultTrustStore(ProvTrustManagerFactorySpi.java:55) ~[bctls-fips-1.0.19.jar:1.0.19]

[elasticsearchmachine]

Pinging @elastic/es-core-infra (Team:Core/Infra)