Test adding lucene-core grant directly in k-nn repo

build.gradle

@@ -247,9 +247,20 @@ allprojects {
 }
 
 configurations {
+    agent
     zipArchive
 }
 
+task prepareAgent(type: Copy) {
+    from(configurations.agent)
+    into "$buildDir/agent"
+}
+
+tasks.withType(Test) {
+    dependsOn prepareAgent
+    jvmArgs += ["-javaagent:" + project.layout.buildDirectory.file("agent/opensearch-agent-${opensearch_version}.jar").get()]
+}
+
 publishing {
     repositories {
         maven {
@@ -360,6 +371,10 @@ dependencies {
     // OpenSearch core is using slf4j 1.7.36. Therefore, we cannot change the version here.
     implementation 'org.slf4j:slf4j-api:1.7.36'
     zipArchive group: 'org.opensearch.plugin', name:'opensearch-security', version: "${opensearch_build}"
+
+    agent "org.opensearch:opensearch-agent-bootstrap:${opensearch_version}"
+    agent "org.opensearch:opensearch-agent:${opensearch_version}"
+    agent "net.bytebuddy:byte-buddy:${versions.bytebuddy}"
 }
 
 task windowsPatches(type:Exec) {

remote-index-build-client/build.gradle

@@ -28,13 +28,31 @@ compileTestJava {
     options.compilerArgs = ["-processor", 'lombok.launch.AnnotationProcessorHider$AnnotationProcessor']
 }
 
+configurations {
+    agent
+}
+
+task prepareAgent(type: Copy) {
+    from(configurations.agent)
+    into "$buildDir/agent"
+}
+
 dependencies {
     compileOnly group: 'org.opensearch', name: 'opensearch', version: "${opensearch_version}"
     api "commons-lang:commons-lang:2.6"
     api "org.apache.httpcomponents.client5:httpclient5:${versions.httpclient5}"
     api "org.apache.httpcomponents.core5:httpcore5:${versions.httpcore5}"
     api "org.apache.httpcomponents.core5:httpcore5-h2:${versions.httpcore5}"
     testImplementation "org.opensearch.test:framework:${opensearch_version}"
+
+    agent "org.opensearch:opensearch-agent-bootstrap:${opensearch_version}"
+    agent "org.opensearch:opensearch-agent:${opensearch_version}"
+    agent "net.bytebuddy:byte-buddy:${versions.bytebuddy}"
+}
+
+tasks.withType(Test) {
+    dependsOn prepareAgent
+    jvmArgs += ["-javaagent:" + project.layout.buildDirectory.file("agent/opensearch-agent-${opensearch_version}.jar").get()]
 }
 
 check.dependsOn spotlessCheck

src/main/plugin-metadata/plugin-security.policy

@@ -1,3 +1,15 @@
+grant codeBase "${codebase.opensearch}" {
+  permission java.io.FilePermission "/proc/cpuinfo", "read";
+};
+
+grant codeBase "${codebase.opensearch-core}" {
+  permission java.io.FilePermission "/proc/cpuinfo", "read";
+};
+
+grant codeBase "${codebase.lucene-core}" {
+  permission java.io.FilePermission "/proc/cpuinfo", "read";
+};
+
 grant {
     permission java.lang.RuntimePermission "loadLibrary.opensearchknn_nmslib";
     permission java.lang.RuntimePermission "loadLibrary.opensearchknn_faiss";