Authentication failures when running search queries for some clusters

Resolved

This incident has been resolved.

Update

We have resolved the issue for all impacted clusters. We continue to monitor the fleet for any residual impact.

Update

We have identified the root cause of the search query failures and are working on a mitigation for impacted clusters. Clusters with dedicated search nodes are unaffected. Some clusters with colocated search nodes may see search query failures.

Investigating

We are investigating an issue impacting some clusters that causes search queries to fail with authentication failures.