Authentication failures when running search queries for some clusters

This incident has been resolved.

We have resolved the issue for all impacted clusters. We continue to monitor the fleet for any residual impact.

We have identified the root cause of the search query failures and are working on a mitigation for impacted clusters. Clusters with dedicated search nodes are unaffected. Some clusters with colocated search nodes may see search query failures.

We are investigating an issue impacting some clusters that causes search queries to fail with authentication failures.