[CI] OverrideNodeVersionCommandTests class failing

[elasticsearchmachine]

Build Scans:

• elasticsearch-periodic #9213 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9206 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9197 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9190 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9183 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9176 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9169 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9162 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9155 / openjdk22_checkpart1_java-matrix
• elasticsearch-periodic #9148 / openjdk22_checkpart1_java-matrix

Reproduction Line:

./gradlew ":server:test" --tests "org.elasticsearch.env.OverrideNodeVersionCommandTests.testOverwritesIfTooNew" -Dtests.seed=BDEFCD3BD49B125D -Dtests.locale=mua -Dtests.timezone=BST -Druntime.java=22

Applicable branches:
8.19

Reproduces locally?:
N/A

Failure History:
See dashboard

Failure Message:

java.lang.NoClassDefFoundError: Could not initialize class org.elasticsearch.cli.MockTerminal

Issue Reasons:

• [8.19] 12 consecutive failures in step openjdk22_checkpart1_java-matrix
• [8.19] 12 failures in class org.elasticsearch.env.OverrideNodeVersionCommandTests (2.3% fail rate in 517 executions)
• [8.19] 12 failures in step openjdk22_checkpart1_java-matrix (100.0% fail rate in 12 executions)
• [8.19] 12 failures in pipeline elasticsearch-periodic (85.7% fail rate in 14 executions)

Note:
This issue was created using new test triage automation. Please report issues or feedback to es-delivery.

[elasticsearchmachine]

Pinging @elastic/es-core-infra (Team:Core/Infra)

[mark-vieira]

@prdoyle any idea why this isn't trivially allowed since this is clearly part of the JDK?

[2025-07-07T03:47:58,134][WARN ][o.e.b.TestScopeResolver  ] [testCorruptedTranslog] Cannot identify a scope for class [jdk.internal.org.jline.terminal.impl.jna.linux.CLibraryImpl], location [jrt:/jdk.internal.le]
[2025-07-07T03:47:58,136][WARN ][o.e.e.r.p.P.(.j.i.le     ] [testCorruptedTranslog] Not entitled: component [(unknown)], module [jrt:/jdk.internal.le], class [class jdk.internal.org.jline.terminal.impl.jna.linux.CLibraryImpl], entitlement [load_native_libraries]
org.elasticsearch.entitlement.runtime.api.NotEntitledException: component [(unknown)], module [jrt:/jdk.internal.le], class [class jdk.internal.org.jline.terminal.impl.jna.linux.CLibraryImpl], entitlement [load_native_libraries]

[prdoyle]

No, not really, but I'm more wondering why entitlements are enforced at all for a class called org.elasticsearch.cli.MockTerminal. PRs like #130690 are disabling entitlements for command-line tools, since we don't enforce entitlements for those anyway (and have no way to specify policies even if we wanted to).

[mark-vieira]

Ah, good point. I didn't consider that since the test itself lives in :server but I think you're right. These things will never run with entitlements so maybe the solution here is just to add @WithoutEntitlements.