You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@solr.apache.org by gi...@apache.org on 2024/06/21 09:37:18 UTC
(solr-site) branch asf-site updated: Commit build products
This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/solr-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new da0182d69 Commit build products
da0182d69 is described below
commit da0182d69de3ca569b9f44080a829860af6dd457
Author: Build Pelican (action) <pr...@infra.apache.org>
AuthorDate: Fri Jun 21 09:37:14 2024 +0000
Commit build products
---
output/blog.html | 7 +
.../contribute-to-the-apache-solr-blog.html | 46 +-
.../hybrid-search-with-apache-solr.html} | 53 +-
output/community.html | 2 +-
output/editing-website.html | 14 +-
output/feeds/all.atom.xml | 1959 +-------------------
output/feeds/solr/news.atom.xml | 423 +----
output/feeds/solr/operator/news.atom.xml | 2 +-
output/feeds/solr/security.atom.xml | 46 +-
output/images/solr/book_solr_search_patterns.jpg | Bin
output/news.html | 36 +-
output/operator/articles/explore-v030-gke.html | 988 +++++-----
output/operator/community.html | 2 +-
output/security.html | 140 +-
output/solr.vex.json | 1010 ----------
output/theme/images/book_solr_search_patterns.jpg | Bin
16 files changed, 685 insertions(+), 4043 deletions(-)
diff --git a/output/blog.html b/output/blog.html
index c79e1188b..9b8d0ccc7 100644
--- a/output/blog.html
+++ b/output/blog.html
@@ -140,6 +140,13 @@ If you have one you'd like to contribute, or would like to link out to an extern
<hr/>
+ <h2 id="hybrid-search-with-apache-solr">
+ <a href="blogposts/hybrid-search-with-apache-solr.html">
+ Hybrid Search with Apache Solr
+ </a>
+ </h2>
+ <h5>Published: 17 June 2024</h5>
+ <p><p>This blog shows how to run a hybrid search (keyword-based search + vectors) in Apache Solr with code examples and explanations. Written by Alessandro Benedetti, Director at Sease and Apache Solr Committer and PMC member.</p></p>
<h2 id="welcome-to-the-apache-solr-blog">
<a href="blogposts/welcome-to-the-apache-solr-blog.html">
Welcome to the Apache Solr Blog
diff --git a/output/blogposts/contribute-to-the-apache-solr-blog.html b/output/blogposts/contribute-to-the-apache-solr-blog.html
index 5d15e9073..33f3c7acb 100644
--- a/output/blogposts/contribute-to-the-apache-solr-blog.html
+++ b/output/blogposts/contribute-to-the-apache-solr-blog.html
@@ -147,9 +147,9 @@ Nearly everything you can read on <a href="https://solr.apache.org">solr.apache.
Blog posts are no exception: each post on our blog is "just" a Markdown-formatted text file.</p>
<p>So the first step in sharing your writeup is to get a copy of this repo to work with.
You haven't edited the Solr website before, so you create a local "clone" (i.e. copy) of <code>solr-site</code>, "fork" the repo in Github (not shown below), register your Github "fork" as a "remote", and create a "branch" locally to put your changes on.</p>
-<div class="codehilite"><pre><span></span><code>$ git clone git@github.com:apache/solr-site.git
-$ git remote add myGHfork git@github.com:myGHusername/solr-site.git
-$ git checkout -b blog-post-highlighting-graph-query
+<div class="codehilite"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>git@github.com:apache/solr-site.git
+$<span class="w"> </span>git<span class="w"> </span>remote<span class="w"> </span>add<span class="w"> </span>myGHfork<span class="w"> </span>git@github.com:myGHusername/solr-site.git
+$<span class="w"> </span>git<span class="w"> </span>checkout<span class="w"> </span>-b<span class="w"> </span>blog-post-highlighting-graph-query
</code></pre></div>
<h1 id="first-edits-creating-a-file-for-your-post">First Edits - Creating a File For your Post</h1>
@@ -162,15 +162,15 @@ If the review process (more on this below) takes longer than expected, authors o
<p>Images or other static files used by your post can be placed in <code>content/images/blog/</code> and referenced with Markdown syntax like <code></code></p>
<p>Knowing all this, you create a new file at <code>content/pages/blogposts/2024-04-23-graph-query-is-great.md</code> and copy in the draft text you've been working on.
When finished, it appears as:</p>
-<div class="codehilite"><pre><span></span><code>$ git status
-On branch blog-post-highlighting-graph-query
-Untracked files:
- (use "git add <span class="nt"><file></span>..." to include in what will be committed)
- content/pages/blogposts/2024-04-23-graph-query-is-great.md
-$ cat content/pages/blogposts/2024-04-23-graph-query-is-great.md
-<span class="nt"><b></span>Lorem ipsum<span class="nt"></b></span>
-dolor sit amet,
-consectetur adipiscing elit.
+<div class="codehilite"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>status
+On<span class="w"> </span>branch<span class="w"> </span>blog-post-highlighting-graph-query
+Untracked<span class="w"> </span>files:
+<span class="w"> </span>(use<span class="w"> </span>"git<span class="w"> </span>add<span class="w"> </span><span class="nt"><file></span>..."<span class="w"> </span>to<span class="w"> </span>include<span class="w"> </span>in<span class="w"> </span>what<span class="w"> </span>will<span class="w"> </span>be<span class="w"> </span>committed)
+<span class="w"> </span>content/pages/blogposts/2024-04-23-graph-query-is-great.md
+$<span class="w"> </span>cat<span class="w"> </span>content/pages/blogposts/2024-04-23-graph-query-is-great.md
+<span class="nt"><b></span>Lorem<span class="w"> </span>ipsum<span class="nt"></b></span>
+dolor<span class="w"> </span>sit<span class="w"> </span>amet,
+consectetur<span class="w"> </span>adipiscing<span class="w"> </span>elit.
</code></pre></div>
<h1 id="formatting">Formatting</h1>
@@ -195,16 +195,16 @@ Notable among these is <strong>summary</strong>, which Solr's blog displays as a
(The first few sentences will be chosen for this by default, if no explicit summary value is specified.)
For more information on valid metadata values, see the Pelican docs <a href="https://docs.getpelican.com/en/latest/content.html#file-metadata">here</a>.</p>
<p>You tweak your blog post title one last time, and add the necessary metadata at the top of <code>2024-04-23-graph-query-is-great.md</code>:</p>
-<div class="codehilite"><pre><span></span><code>$ cat content/pages/blogposts/2024-04-23-graph-query-is-great.md
-Title: <span class="s1">'Node'</span>-doubt about it<span class="p">;</span> Solr <span class="s1">'Edges'</span> Out the Rest!
-category: solr/blogposts
-slug: highlight-graph-query
-URL: blogposts/highlight-graph-query.html
-save_as: blogposts/highlight-graph-query.html
+<div class="codehilite"><pre><span></span><code>$<span class="w"> </span>cat<span class="w"> </span>content/pages/blogposts/2024-04-23-graph-query-is-great.md
+Title:<span class="w"> </span><span class="s1">'Node'</span>-doubt<span class="w"> </span>about<span class="w"> </span>it<span class="p">;</span><span class="w"> </span>Solr<span class="w"> </span><span class="s1">'Edges'</span><span class="w"> </span>Out<span class="w"> </span>the<span class="w"> </span>Rest!
+category:<span class="w"> </span>solr/blogposts
+slug:<span class="w"> </span>highlight-graph-query
+URL:<span class="w"> </span>blogposts/highlight-graph-query.html
+save_as:<span class="w"> </span>blogposts/highlight-graph-query.html
<span class="c1">## Lorem ipsum</span>
-dolor sit amet,
-consectetur adipiscing elit.
+dolor<span class="w"> </span>sit<span class="w"> </span>amet,
+consectetur<span class="w"> </span>adipiscing<span class="w"> </span>elit.
</code></pre></div>
<h1 id="previewing-your-work">Previewing your Work</h1>
@@ -221,9 +221,9 @@ When you fix the syntax errors, Pelican detects the changes and rebuilds the sit
<p>You're ready to publish for review!</p>
<h1 id="sharing-with-others">Sharing with Others</h1>
<p>First, you push your changes up to the Github "fork" you created earlier:</p>
-<div class="codehilite"><pre><span></span><code>$ git add -A
-$ git commit -m <span class="s2">"Add a blog post about Solr's graph query support"</span>
-$ git push myGHfork blog-post-highlighting-graph-query:blog-post-highlighting-graph-query
+<div class="codehilite"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>add<span class="w"> </span>-A
+$<span class="w"> </span>git<span class="w"> </span>commit<span class="w"> </span>-m<span class="w"> </span><span class="s2">"Add a blog post about Solr's graph query support"</span>
+$<span class="w"> </span>git<span class="w"> </span>push<span class="w"> </span>myGHfork<span class="w"> </span>blog-post-highlighting-graph-query:blog-post-highlighting-graph-query
</code></pre></div>
<p>With that done, you open the GitHub <a href="https://github.com/apache/solr-site">solr-site</a> page in your browser and create a PR from the <code>blog-post-highlighting-graph-query</code> branch now available on your Github fork.
diff --git a/output/blog.html b/output/blogposts/hybrid-search-with-apache-solr.html
similarity index 82%
copy from output/blog.html
copy to output/blogposts/hybrid-search-with-apache-solr.html
index c79e1188b..91de8c0d8 100644
--- a/output/blog.html
+++ b/output/blogposts/hybrid-search-with-apache-solr.html
@@ -38,15 +38,15 @@
<script src="//cdn.jsdelivr.net/jquery.slick/1.3.7/slick.min.js"/></script>
<script src="/theme/javascript/lib/jquery.smooth-scroll.min.js?v=4dd59757"></script>
<script src="/theme/javascript/main.js?v=4dd59757"></script>
-<script src="https://www.apachecon.com/event-images/snippet.js"></script> <title>Blog Posts - Apache Solr</title>
+<script src="https://www.apachecon.com/event-images/snippet.js"></script> <title>Hybrid Search with Apache Solr - Apache Solr</title>
<meta name="keywords"
content="apache, apache lucene, apache solr, solr, lucene,
search, information retrieval, spell checking, faceting, inverted index, open source"/>
<meta property="og:type" content="website" />
- <meta property="og:url" content="https://solr.apache.org/blog.html"/>
- <meta property="og:title" content="Blog Posts"/>
- <meta property="og:description" content="Welcome to the Apache Solr Blog, where we periodically showcase Solr-related articles, tutorials, and other content. Have something..."/>
+ <meta property="og:url" content="https://solr.apache.org/blogposts/hybrid-search-with-apache-solr.html"/>
+ <meta property="og:title" content="Hybrid Search with Apache Solr"/>
+ <meta property="og:description" content="Hybrid Search with Apache Solr Contrary to popular misconception, Solr already supports hybrid search (the combination of keyword and..."/>
<meta property="og:image" content="https://solr.apache.org/theme/images/solr_og_image.png?v=4dd59757"/>
<meta property="og:image:secure_url" content="https://solr.apache.org/theme/solr/solr_og_image.png?v=4dd59757"/>
@@ -54,7 +54,7 @@
<link rel="shortcut icon" href="/theme/images/favicon.ico" type="image/x-icon">
</head>
- <body class="page " x-ng-app-root="/solr" x-ng-app="page" x-ng-controller="page.controllers.main">
+ <body class="page " x-ng-app="page" x-ng-controller="page.controllers.main">
<div class="contain-to-grid">
<div class="header-section">
<nav class="top-bar" data-topbar role="navigation">
@@ -117,45 +117,10 @@
<div class="header-fill"></div>
<div class="container">
<div class="row">
-<div class="small-12 columns">
-
- <style type="text/css">
- .headerlink, .elementid-permalink {
- visibility: hidden;
- }
- h2:hover > .headerlink, h3:hover > .headerlink, h1:hover > .headerlink, h6:hover > .headerlink, h4:hover > .headerlink, h5:hover > .headerlink, dt:hover > .elementid-permalink {
- visibility: visible;
- }
- h2 {
- /* Avoid title being hidden behind header when linked by anchor link */
- padding-top: 70px;
- margin-top: -70px;
- }
- </style>
- <h1 id="solr-blogs">Solr<sup>™</sup> Blog Posts<a class="headerlink" href="#solr-blog-posts" title="Permanent link">¶</a></h1>
- <p>Welcome to the Apache Solr Blog, where we periodically showcase Solr-related articles, tutorials, and other content.</p>
-<p>Have something to share?
-We're always looking for new articles!
-If you have one you'd like to contribute, or would like to link out to an external post, create a PR using the instructions <a href="https://github.com/apache/solr-site">here</a>.</p>
-
- <hr/>
-
- <h2 id="welcome-to-the-apache-solr-blog">
- <a href="blogposts/welcome-to-the-apache-solr-blog.html">
- Welcome to the Apache Solr Blog
- </a>
- </h2>
- <h5>Published: 22 April 2024</h5>
- <p><p>We have a blog? What is it, and why do we have it?</p></p>
- <h2 id="contribute-to-the-apache-solr-blog">
- <a href="blogposts/contribute-to-the-apache-solr-blog.html">
- How To: Contribute to the Apache Solr Blog
- </a>
- </h2>
- <h5>Published: 23 April 2024</h5>
- <p><p>You have a brilliant idea for Solr's new blog. But what next? How does the blog work, and how can writers contribute posts?</p></p>
-</div>
- </div>
+<h1 id="hybrid-search-with-apache-solr">Hybrid Search with Apache Solr</h1>
+<p>Contrary to popular misconception, Solr already supports hybrid search (the combination of keyword and vector-based search techniques)!
+Hybrid search can be used in retrieval, ranking, and even Solr's commonly-used "Learning to Rank" module. Alessandro Benedetti, Director at Sease and Apache Solr Committer and PMC member, explains more in a recent post, complete with code examples and explanation.</p>
+<p>Learn how you can start using hybrid search in your deployments today - the complete post can be read here: <a href="https://sease.io/2023/12/hybrid-search-with-apache-solr.html">Hybrid Search with Apache Solr</a></p> </div>
</div>
<footer>
<div class="row">
diff --git a/output/community.html b/output/community.html
index 4c47690be..447bdd9ca 100644
--- a/output/community.html
+++ b/output/community.html
@@ -231,7 +231,7 @@ have installed the command line version.</p>
No GIT client software is required.</p>
<h4 id="cloning-the-repository">Cloning the repository</h4>
<p>To work on the code locally, you may clone the git repository:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">git clone https://github.com/apache/solr.git</span>
+<div class="codehilite"><pre><span></span><code>git clone https://github.com/apache/solr.git
</code></pre></div>
<p>Then use GitHub's <a href="https://docs.github.com/en/github/getting-started-with-github/fork-a-repo">fork feature</a>
diff --git a/output/editing-website.html b/output/editing-website.html
index ece5d1934..f7fb6444a 100644
--- a/output/editing-website.html
+++ b/output/editing-website.html
@@ -126,15 +126,15 @@
<li>Fork this repository in <a href="https://github.com/apache/solr-site">GitHub</a></li>
<li>
<p>Clone your fork to your computer</p>
-<div class="codehilite"><pre><span></span><code><span class="err">git clone https://github.com/<your-github-id>/lucene-site</span>
-<span class="err">cd lucene-site</span>
-<span class="err">git pull</span>
+<div class="codehilite"><pre><span></span><code>git clone https://github.com/<your-github-id>/lucene-site
+cd lucene-site
+git pull
</code></pre></div>
</li>
<li>
<p>Create a new branch for your edits</p>
-<div class="codehilite"><pre><span></span><code><span class="err">git checkout -b my-typo-fix</span>
+<div class="codehilite"><pre><span></span><code>git checkout -b my-typo-fix
</code></pre></div>
</li>
@@ -143,9 +143,9 @@
</li>
<li>
<p>When done, push your changes to your branch (in your fork)</p>
-<div class="codehilite"><pre><span></span><code><span class="err">git add .</span>
-<span class="err">git commit -m "Fixing a typo on the resources page"</span>
-<span class="err">git push origin</span>
+<div class="codehilite"><pre><span></span><code>git add .
+git commit -m "Fixing a typo on the resources page"
+git push origin
</code></pre></div>
</li>
diff --git a/output/feeds/all.atom.xml b/output/feeds/all.atom.xml
index 5640d40a5..78198b082 100644
--- a/output/feeds/all.atom.xml
+++ b/output/feeds/all.atom.xml
@@ -1,5 +1,5 @@
<?xml version="1.0" encoding="utf-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr</title><link href="/" rel="alternate"></link><link href="/feeds/all.atom.xml" rel="self"></link><id>/</id><updated>2024-05-29T00:00:00+00:00</updated><subtitle></subtitle><subtitle></subtitle><entry><title>Apache Solr™ 9.6.1 available</title><link href="/apache-solrtm-961-available.html" rel="alternate"></link><published>2024-05-29T00:00:00+00:00</published><updated>2024-05-29T00:00:00+00:00</updated><author><name>Solr Develope [...]
+<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr</title><link href="/" rel="alternate"></link><link href="/feeds/all.atom.xml" rel="self"></link><id>/</id><updated>2024-05-29T00:00:00+00:00</updated><entry><title>Apache Solr™ 9.6.1 available</title><link href="/apache-solrtm-961-available.html" rel="alternate"></link><published>2024-05-29T00:00:00+00:00</published><updated>2024-05-29T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2024-05-29: [...]
<p>Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Solr project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, rich document handling, and …</p></summary><content type="html"><p>The Solr PMC is pleased to announce the release of Apache Solr 9.6.1.</p>
<p>Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Solr project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, rich document handling, and geospatial search. Solr is highly scalable, providing fault tolerant distributed search and indexing, and powers the search and navigation features of many of the world's largest internet sites.</p>
<p>Solr 9.6.1 is available for immediate download at:</p>
@@ -488,7 +488,7 @@ Apache Calcite has a vulnerability, CVE-2022-39135, that is exploitable in Apach
An XXE attack may lead to the disclosure of confidential data, denial of service, server side request forgery (SSRF), port scanning from the Solr node, and other system impacts.</p>
<p><strong>Mitigation:</strong><br>
Most Solr installations don’t make use of the SQL functionality. For such users, the standard Solr security advice of using a firewall should be adequate. Nonetheless, the functionality can be disabled. As of Solr 9, it has been modularized and thus became opt-in, so nothing is needed for Solr 9 users that don’t use it. Users <em>not</em> using SolrCloud can’t use the functionality at all. For other users that wish to disable it, you must register a request handler that [...]
-<div class="codehilite"><pre><span></span><code><span class="err"> &lt;requestHandler name=&quot;/sql&quot; class=&quot;solr.NotFoundRequestHandler&quot;/&gt;</span>
+<div class="codehilite"><pre><span></span><code> &lt;requestHandler name=&quot;/sql&quot; class=&quot;solr.NotFoundRequestHandler&quot;/&gt;
</code></pre></div>
<p>Users needing this SQL functionality are forced to upgrade to Solr 9.1. If Solr 8.11.3 is released, then it will be an option as well. Simply replacing Calcite and other JAR files may mostly work but could fail depending on the particulars of the query. Users interested in this or in patching their own versions of Solr should examine SOLR-16421 for a source patch.</p>
@@ -520,11 +520,11 @@ CVE - <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-39135">CVE-2022-3
</code></pre></div>
<p><em>Windows:</em></p>
-<div class="codehilite"><pre><span></span><code>SET <span class="nv">SOLR_OPTS</span><span class="o">=</span>-XX:CompileCommand<span class="o">=</span>exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put
+<div class="codehilite"><pre><span></span><code>SET<span class="w"> </span><span class="nv">SOLR_OPTS</span><span class="o">=</span>-XX:CompileCommand<span class="o">=</span>exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put
</code></pre></div>
<p>Alternatively, you can inject the same flag with the <code>-a</code> argument, e.g:</p>
-<div class="codehilite"><pre><span></span><code>bin/solr -a <span class="s2">&quot;-XX:CompileCommand=exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put&quot;</span>
+<div class="codehilite"><pre><span></span><code>bin/solr<span class="w"> </span>-a<span class="w"> </span><span class="s2">&quot;-XX:CompileCommand=exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put&quot;</span>
</code></pre></div>
<p>If you run Solr 9 with the official Docker image, we have already pushed an updated Docker image to Docker Hub that will inject the flag for you.
@@ -1458,40 +1458,40 @@ Matei "Mal" Badanoiu</p>
<ul>
<li><a href="https://issues.apache.org/jira/browse/SOLR-13750">https://issues.apache.org/jira/browse/SOLR-13750</a></li>
<li><a href="https://cwiki.apache.org/confluence/display/SOLR/SolrSecurity">https://cwiki.apache.org/confluence/display/SOLR/SolrSecurity</a></li>
-</ul></content><category term="solr/security"></category></entry><entry><title>[ANNOUNCE] 8.1.1 and 8.2.0 users check ENABLE_REMOTE_JMX_OPTS setting</title><link href="/announce-811-and-820-users-check-enable_remote_jmx_opts-setting.html" rel="alternate"></link><published>2019-08-14T00:00:00+00:00</published><updated>2019-08-14T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2019-08-14:/announce-811-and-820-users-check-enable_remote_jmx_opts-settin [...]
+</ul></content><category term="solr/security"></category></entry><entry><title>[ANNOUNCE] 8.1.1 and 8.2.0 users check ENABLE_REMOTE_JMX_OPTS setting</title><link href="/announce-811-and-820-users-check-enable_remote_jmx_opts-setting.html" rel="alternate"></link><published>2019-08-14T00:00:00+00:00</published><updated>2019-08-14T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2019-08-14:/announce-811-and-820-users-check-enable_remote_jmx_opts-settin [...]
-<span class="n">Versions</span> <span class="n">Affected</span><span class="o">:</span>
-<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and</span> <span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span> <span class="k">for</span> <span class="n">Linux</span>
+<span class="n">Versions</span><span class="w"> </span><span class="n">Affected</span><span class="o">:</span>
+<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">Linux</span>
<span class="n">Description</span><span class="o">:</span>
-<span class="n">It</span> <span class="n">has</span> <span class="n">been</span> <span class="n">discovered</span> <span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">that</span> <span class="n">the</span> <span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and&l [...]
-<span class="n">setting</span> <span class="k">for</span> <span class="n">the</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span> <span class="n">setting</span> <span class="k">in</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span>& [...]
-<span class="n">shipping</span> <span class="k">with</span> <span class="n">Solr</span><span class="o">.</span>
+<span class="n">It</span><span class="w"> </span><span class="n">has</span><span class="w"> </span><span class="n">been</span><span class="w"> </span><span class="n">discovered</span><span class="w"> </span><span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">that</span><s [...]
+<span class="n">setting</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="w"> </span><span class="n">setting</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n"> [...]
+<span class="n">shipping</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">Solr</span><span class="o">.</span>
-<span class="n">Windows</span> <span class="n">users …</span></code></pre></div></summary><content type="html"><div class="codehilite"><pre><span></span><code><span class="n">Severity</span><span class="o">:</span> <span class="n">Low</span>
+<span class="n">Windows</span><span class="w"> </span><span class="n">users …</span></code></pre></div></summary><content type="html"><div class="codehilite"><pre><span></span><code><span class="n">Severity</span><span class="o">:</span><span class="w"> </span><span class="n">Low</span>
-<span class="n">Versions</span> <span class="n">Affected</span><span class="o">:</span>
-<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and</span> <span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span> <span class="k">for</span> <span class="n">Linux</span>
+<span class="n">Versions</span><span class="w"> </span><span class="n">Affected</span><span class="o">:</span>
+<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">Linux</span>
<span class="n">Description</span><span class="o">:</span>
-<span class="n">It</span> <span class="n">has</span> <span class="n">been</span> <span class="n">discovered</span> <span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">that</span> <span class="n">the</span> <span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and&l [...]
-<span class="n">setting</span> <span class="k">for</span> <span class="n">the</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span> <span class="n">setting</span> <span class="k">in</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span>& [...]
-<span class="n">shipping</span> <span class="k">with</span> <span class="n">Solr</span><span class="o">.</span>
+<span class="n">It</span><span class="w"> </span><span class="n">has</span><span class="w"> </span><span class="n">been</span><span class="w"> </span><span class="n">discovered</span><span class="w"> </span><span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">that</span><s [...]
+<span class="n">setting</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="w"> </span><span class="n">setting</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n"> [...]
+<span class="n">shipping</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">Solr</span><span class="o">.</span>
-<span class="n">Windows</span> <span class="n">users</span> <span class="n">and</span> <span class="n">users</span> <span class="k">with</span> <span class="n">custom</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span> <span class="n">files</span> <span class="n [...]
+<span class="n">Windows</span><span class="w"> </span><span class="n">users</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">users</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">custom</span><span class="w"> </span><span class="n">solr</span& [...]
-<span class="n">If</span> <span class="n">you</span> <span class="n">are</span> <span class="n">using</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span> <span class="n">file</span> <span class="n">fro [...]
-<span class="n">JMX</span> <span class="n">monitoring</span> <span class="n">will</span> <span class="n">be</span> <span class="n">enabled</span> <span class="n">and</span> <span class="n">exposed</span> <span class="n">on</span> <span class="n">JMX_PORT</span> <span class="o">(</span><span class="k">default</span> <span class="o">=</span> <sp [...]
-<span class="n">without</span> <span class="n">any</span> <span class="n">authentication</span><span class="o">.</span> <span class="n">So</span> <span class="k">if</span> <span class="n">your</span> <span class="n">firewalls</span> <span class="n">allows</span> <span class="n">inbound</span> <span class="n">traffic</span> <span class="n">on</span>
-<span class="n">JMX_PORT</span><span class="o">,</span> <span class="n">then</span> <span class="n">anyone</span> <span class="k">with</span> <span class="n">network</span> <span class="n">access</span> <span class="n">to</span> <span class="n">your</span> <span class="n">Solr</span> <span class="n">nodes</span> <span class="n">will</span> <sp [...]
-<span class="n">access</span> <span class="n">monitoring</span> <span class="n">data</span> <span class="n">exposed</span> <span class="n">over</span> <span class="n">JMX</span><span class="o">.</span>
+<span class="n">If</span><span class="w"> </span><span class="n">you</span><span class="w"> </span><span class="n">are</span><span class="w"> </span><span class="n">using</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="k">default</span><span class="w"> </span><span class="n">solr</span>< [...]
+<span class="n">JMX</span><span class="w"> </span><span class="n">monitoring</span><span class="w"> </span><span class="n">will</span><span class="w"> </span><span class="n">be</span><span class="w"> </span><span class="n">enabled</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">exposed</spa [...]
+<span class="n">without</span><span class="w"> </span><span class="n">any</span><span class="w"> </span><span class="n">authentication</span><span class="o">.</span><span class="w"> </span><span class="n">So</span><span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="n">your</span><span class="w"> </span&g [...]
+<span class="n">JMX_PORT</span><span class="o">,</span><span class="w"> </span><span class="n">then</span><span class="w"> </span><span class="n">anyone</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">network</span><span class="w"> </span><span class="n">access</span><span class="w"> </spa [...]
+<span class="n">access</span><span class="w"> </span><span class="n">monitoring</span><span class="w"> </span><span class="n">data</span><span class="w"> </span><span class="n">exposed</span><span class="w"> </span><span class="n">over</span><span class="w"> </span><span class="n">JMX</span><span class="o">.</span>
<span class="n">Mitigation</span><span class="o">:</span>
-<span class="n">Edit</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="o">,</span> <span class="kd">set</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="o">=</span><span class="kc">false</span> <span class="n">and</span> <span class [...]
-<span class="n">Alternatively</span> <span class="n">wait</span> <span class="k">for</span> <span class="n">the</span> <span class="n">future</span> <span class="mf">8.3</span><span class="o">.</span><span class="mi">0</span> <span class="n">release</span> <span class="n">and</span> <span class="n">upgrade</span><span class="o">.</span>
+<span class="n">Edit</span><span class="w"> </span><span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="o">,</span><span class="w"> </span><span class="kd">set</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="o">=< [...]
+<span class="n">Alternatively</span><span class="w"> </span><span class="n">wait</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">future</span><span class="w"> </span><span class="mf">8.3</span><span class="o">.</span><span class="mi">0</span [...]
<span class="n">References</span><span class="o">:</span>
-<span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">https</span><span class="o">://</span><span class="n">issues</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="sr">/jira/browse/</span><span class="n">SOLR</span><span class="o"> [...]
+<span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">https</span><span class="o">://</span><span class="n">issues</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="sr">/jira/browse/</span><span class="n">SOLR [...]
</code></pre></div></content><category term="solr/security"></category></entry><entry><title>CVE-2019-0193: Apache Solr, Remote Code Execution via DataImportHandler</title><link href="/cve-2019-0193-apache-solr-remote-code-execution-via-dataimporthandler.html" rel="alternate"></link><published>2019-07-31T00:00:00+00:00</published><updated>2019-07-31T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2019-07-31:/cve-2019-0193-apache-solr-re [...]
<p><strong>Vendor:</strong><br>
The Apache Software Foundation</p>
@@ -2395,1911 +2395,4 @@ This issue was discovered by Hrishikesh Gadre of Cloudera Inc.</p>
<ul>
<li><a href="https://issues.apache.org/jira/browse/SOLR-11184">https://issues.apache.org/jira/browse/SOLR-11184</a></li>
<li><a href="https://cwiki.apache.org/confluence/display/solr/SolrSecurity">https://cwiki.apache.org/confluence/display/solr/SolrSecurity</a></li>
-</ul></content><category term="solr/security"></category></entry><entry><title>Apache Solr™ 6.6.1 available</title><link href="/" rel="alternate"></link><published>2017-09-07T00:00:00+00:00</published><updated>2017-09-07T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-09-07:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.6.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the
-Apache Lucene project. Its major features include powerful full-text search,
-hit highlighting, faceted search and analytics, rich document parsing,
-geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.6.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the
-Apache Lucene project. Its major features include powerful full-text search,
-hit highlighting, faceted search and analytics, rich document parsing,
-geospatial search, extensive REST APIs as well as parallel SQL. Solr is
-enterprise grade, secure and highly scalable, providing fault tolerant
-distributed search and indexing, and powers the search and navigation features
-of many of the world's largest internet sites.</p>
-<p>Solr 6.6.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>This release includes 15 bug fixes since the 6.6.0 release. Some of the major fixes are:</p>
-<ul>
-<li>
-<p>Standalone Solr loads UNLOADed core on request</p>
-</li>
-<li>
-<p>ParallelStream should set the StreamContext when constructing SolrStreams</p>
-</li>
-<li>
-<p>CloudSolrStream.toExpression incorrectly handles fq clauses</p>
-</li>
-<li>
-<p>CoreContainer.load needs to send lazily loaded core descriptors to the proper list rather than send them all to the transient lists</p>
-</li>
-<li>
-<p>Creating a core should write a core.properties file first and clean up on failure</p>
-</li>
-<li>
-<p>Clean up a few details left over from pluggable transient core and untangling</p>
-</li>
-<li>
-<p>Provide a way to know when Core Discovery is finished and when all async cores are done loading</p>
-</li>
-<li>
-<p>CDCR bootstrapping can get into an infinite loop when a core is reloaded</p>
-</li>
-<li>
-<p>SolrJmxReporter is broken on core reload. This resulted in some or most metrics not being reported via JMX after core reloads, depending on timing</p>
-</li>
-<li>
-<p>Creating a core.properties fails if the parent of core.properties is a symlinked directory</p>
-</li>
-<li>
-<p>StreamHandler should allow connections to be closed early</p>
-</li>
-<li>
-<p>Certain admin UI pages would not load up correctly with kerberos enabled</p>
-</li>
-<li>
-<p>Fix DOWNNODE -&gt; queue-work znode explosion in ZooKeeper</p>
-</li>
-<li>
-<p>Upgrade to Hadoop 2.7.4 to fix incompatibility with Java 9</p>
-</li>
-<li>
-<p>Fix bin/solr.cmd so it can run properly on Java 9</p>
-</li>
-</ul>
-<p>Furthermore, this release includes Apache Lucene 6.6.1 which includes 2 bug fixes since the 6.6.0 release.</p>
-<p>See the <a href="/docs/6_6_1/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr**</title><link href="/cve-2017-7660-security-vulnerability-in-secure-inter-node-communication-in-apache-solr.html" rel="alternate"></link><published>2017-07-07T00:00:00+00:00</published><updated>2017-07-07T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>t [...]
-<p><strong>Severity</strong>: Important</p>
-<p><strong>Vendor</strong>:<br>
-The Apache Software Foundation</p>
-<p><strong>Versions Affected</strong>: </p>
-<ul>
-<li>Solr 5.3 to 5.5.4</li>
-<li>Solr 6.0 to 6.5.1</li>
-</ul>
-<p><strong>Description:</strong><br>
-Solr uses a PKI based mechanism to secure inter-node communication
-when security is enabled. It is …</p></summary><content type="html"><p><strong>CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr</strong></p>
-<p><strong>Severity</strong>: Important</p>
-<p><strong>Vendor</strong>:<br>
-The Apache Software Foundation</p>
-<p><strong>Versions Affected</strong>: </p>
-<ul>
-<li>Solr 5.3 to 5.5.4</li>
-<li>Solr 6.0 to 6.5.1</li>
-</ul>
-<p><strong>Description:</strong><br>
-Solr uses a PKI based mechanism to secure inter-node communication
-when security is enabled. It is possible to create a specially crafted
-node name that does not exist as part of the cluster and point it to a
-malicious node. This can trick the nodes in cluster to believe that
-the malicious node is a member of the cluster. So, if Solr users have
-enabled BasicAuth authentication mechanism using the BasicAuthPlugin
-or if the user has implemented a custom Authentication plugin, which
-does not implement either "HttpClientInterceptorPlugin" or
-"HttpClientBuilderPlugin", his/her servers are vulnerable to this
-attack. Users who only use SSL without basic authentication or those
-who use Kerberos are not affected.</p>
-<p><strong>Mitigation</strong>:</p>
-<ul>
-<li>6.x users should upgrade to 6.6.0 or higher</li>
-<li>5.x users should obtain the latest source from git and apply this patch:
-<a href="http://git-wip-us.apache.org/repos/asf/lucene-solr/commit/2f5ecbcf">http://git-wip-us.apache.org/repos/asf/lucene-solr/commit/2f5ecbcf</a></li>
-</ul>
-<p><strong>Credit</strong>:<br>
-This issue was discovered by Noble Paul of Lucidworks Inc.</p>
-<p><strong>References</strong>:</p>
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/SOLR-10624">https://issues.apache.org/jira/browse/SOLR-10624</a></li>
-<li><a href="https://cwiki.apache.org/confluence/display/solr/SolrSecurity">https://cwiki.apache.org/confluence/display/solr/SolrSecurity</a></li>
-</ul></content><category term="solr/security"></category></entry><entry><title>Apache Solr™ 6.6.0 available</title><link href="/" rel="alternate"></link><published>2017-06-06T00:00:00+00:00</published><updated>2017-06-06T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-06-06:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.6.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the
-Apache Lucene project. Its major features include powerful full-text search,
-hit highlighting, faceted search and analytics, rich document parsing,
-geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.6.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the
-Apache Lucene project. Its major features include powerful full-text search,
-hit highlighting, faceted search and analytics, rich document parsing,
-geospatial search, extensive REST APIs as well as parallel SQL. Solr is
-enterprise grade, secure and highly scalable, providing fault tolerant
-distributed search and indexing, and powers the search and navigation features
-of many of the world's largest internet sites.</p>
-<p>Solr 6.6.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<ul>
-<li>
-<p>Payload support with payload() value source and {!payload_score} and {!payload_check}
- query parsers</p>
-</li>
-<li>
-<p>Solr support for SimpleTextCodec</p>
-</li>
-<li>
-<p>Multi-field support to TermsComponent when requesting terms' statistics</p>
-</li>
-<li>
-<p>New AtomicUpdateProcessor to convert normal update operations to atomic update operations</p>
-</li>
-<li>
-<p>UPLOAD command (Config Set API) for uploading zipped configsets</p>
-</li>
-<li>
-<p>MOVEREPLICA command (Collections API) for moving a replica across nodes</p>
-</li>
-<li>
-<p>LISTALIASES command (Collections API) to return a list of all collection aliases</p>
-</li>
-<li>
-<p>STATUS command (Core Admin API) to emit collection details of each core</p>
-</li>
-<li>
-<p>Basic authentication can be enabled/disabled using bin/solr|bin/solr.cmd</p>
-</li>
-<li>
-<p>Solr default/example uses WordDelimiterGraphFilterFactory and SynonymGraphFilterFactory</p>
-</li>
-<li>
-<p>Expose cache statistics using metrics API</p>
-</li>
-<li>
-<p>CloudSolrClient can now be initialized using the base URL of a Solr instance instead of ZooKeeper hosts</p>
-</li>
-<li>
-<p>Grouping, CollapseQParser and ExpandComponent support with PointFields</p>
-</li>
-<li>
-<p>Variance and Standard Deviation aggregators for the JSON Facet API</p>
-</li>
-<li>
-<p>JSON Faceting now supports a query time 'join' domain change option</p>
-</li>
-<li>
-<p>CartesianProductStream, which turns a single tuple with a multi-valued field into N tuples, one for each value in the multi-valued field</p>
-</li>
-<li>
-<p>New Streaming Evaluators: Basic math, UUID, Date/time, correlation, regress, predict, covariance, convolution, normalize</p>
-</li>
-<li>
-<p>New Streaming Expressions: shuffle, echo, eval, timeseries, let, get, tuple</p>
-</li>
-</ul>
-<p>See the <a href="/docs/6_6_0/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr™ 6.5.1 available</title><link href="/" rel="alternate"></link><published>2017-04-27T00:00:00+00:00</published><updated>2017-04-27T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-04-27:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.5.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the
-Apache Lucene project. Its major features include powerful full-text search,
-hit highlighting, faceted search and analytics, rich document parsing,
-geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.5.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the
-Apache Lucene project. Its major features include powerful full-text search,
-hit highlighting, faceted search and analytics, rich document parsing,
-geospatial search, extensive REST APIs as well as parallel SQL. Solr is
-enterprise grade, secure and highly scalable, providing fault tolerant
-distributed search and indexing, and powers the search and navigation features
-of many of the world's largest internet sites.</p>
-<p>Solr 6.5.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>This release includes 11 bug fixes since the 6.5.0 release. Some of the major fixes are:</p>
-<ul>
-<li>
-<p>bin\solr.cmd delete and healthcheck now works again; fixed continuation chars ^</p>
-</li>
-<li>
-<p>Fix debug related NullPointerException in solr/contrib/ltr OriginalScoreFeature class.</p>
-</li>
-<li>
-<p>The JSON output of /admin/metrics is fixed to write the container as a map (SimpleOrderedMap) instead of an array (NamedList).</p>
-</li>
-<li>
-<p>On 'downnode', lots of wasteful mutations are done to ZK.</p>
-</li>
-<li>
-<p>Fix params persistence for solr/contrib/ltr (MinMax|Standard)Normalizer classes.</p>
-</li>
-<li>
-<p>The fetch() streaming expression wouldn't work if a value included query syntax chars (like :+-). Fixed, and enhanced the generated query to not pollute the queryCache.</p>
-</li>
-<li>
-<p>Disable graph query production via schema configuration <code>&lt;fieldtype ... enableGraphQueries="false"&gt;</code>. This fixes broken queries for ShingleFilter-containing query-time analyzers when request param sow=false.</p>
-</li>
-<li>
-<p>Fix indexed="false" on numeric PointFields</p>
-</li>
-<li>
-<p>SQL AVG function mis-interprets field type.</p>
-</li>
-<li>
-<p>SQL interface does not use client cache.</p>
-</li>
-<li>
-<p>edismax with sow=false fails to create dismax-per-term queries when any field is boosted.</p>
-</li>
-</ul>
-<p>Furthermore, this release includes Apache Lucene 6.5.1 which includes 3 bug fixes since the 6.5.0 release.</p>
-<p>See the <a href="/docs/6_5_1/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr™ 6.5.0 Available</title><link href="/" rel="alternate"></link><published>2017-03-27T00:00:00+00:00</published><updated>2017-03-27T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-03-27:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.5.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.5.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 6.5.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<ul>
-<li>
-<p>PointFields (fixed-width multi-dimensional numeric &amp; binary types enabling fast range search) are now supported</p>
-</li>
-<li>
-<p>In-place updates to numeric docValues fields (single valued, non-stored, non-indexed) supported using atomic update syntax</p>
-</li>
-<li>
-<p>A new LatLonPointSpatialField that uses points or doc values for query</p>
-</li>
-<li>
-<p>It is now possible to declare a field as "large" in order to bypass the document cache</p>
-</li>
-<li>
-<p>New sow=false request param (split-on-whitespace) for edismax &amp; standard query parsers enables query-time multi-term synonyms</p>
-</li>
-<li>
-<p>XML QueryParser (defType=xmlparser) now supports span queries</p>
-</li>
-<li>
-<p>hl.maxAnalyzedChars now have consistent default across highlighters</p>
-</li>
-<li>
-<p>UnifiedSolrHighlighter and PostingsSolrHighlighter now support CustomSeparatorBreakIterator</p>
-</li>
-<li>
-<p>Scoring formula is adjusted for the scoreNodes function</p>
-</li>
-<li>
-<p>Calcite Planner now applies constant Reduction Rules to optimize plans</p>
-</li>
-<li>
-<p>A new significantTerms Streaming Expression that is able to extract the significant terms in an index</p>
-</li>
-<li>
-<p>StreamHandler is now able to use runtimeLib jars</p>
-</li>
-<li>
-<p>Arithmetic operations are added to the SelectStream</p>
-</li>
-<li>
-<p>Added modernized self-documenting /v2 API</p>
-</li>
-<li>
-<p>The .system collection is now created on first request if it does not exist</p>
-</li>
-<li>
-<p>Admin UI: Added shard deletion button</p>
-</li>
-<li>
-<p>Metrics API now supports non-numeric metrics (version, disk type, component state, system properties...)</p>
-</li>
-<li>
-<p>The disk free and aggregated disk free metrics are now reported</p>
-</li>
-<li>
-<p>The DirectUpdateHandler2 now implements MetricsProducer and exposes stats via the metrics api and configured reporters.</p>
-</li>
-<li>
-<p>BlockCache is faster due to less failures when caching a new block</p>
-</li>
-<li>
-<p>MMapDirectoryFactory now supports "preload" option to ask mapped pages to be loaded into physical memory on init</p>
-</li>
-<li>
-<p>Security: BasicAuthPlugin now supports standalone mode</p>
-</li>
-<li>
-<p>Arbitrary java system properties can be passed to zkcli</p>
-</li>
-<li>
-<p>SolrHttpClientBuilder can be configured via java system property</p>
-</li>
-<li>
-<p>Javadocs and Changes.html are no longer included in the binary distribution, but are hosted online</p>
-</li>
-</ul>
-<p>See the <a href="/docs/6_5_0/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr™ 6.4.2 Available</title><link href="/" rel="alternate"></link><published>2017-03-07T00:00:00+00:00</published><updated>2017-03-07T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-03-07:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.4.2.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.4.2.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 6.4.2 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<ul>
-<li>
-<p>Fixed: Serious performance degradation in Solr 6.4 due to the metrics collection. IndexWriter metrics collection turned off by default, directory level metrics collection completely removed (until a better design is found)</p>
-</li>
-<li>
-<p>Fixed: Transaction log replay can hit an NullPointerException due to new Metrics code</p>
-</li>
-<li>
-<p>Fixed: NullPointerException in CloudSolrClient when reading stale alias</p>
-</li>
-<li>
-<p>Fixed: UnifiedHighlighter and PostingsHighlighter bug in PrefixQuery and TermRangeQuery for multi-byte text</p>
-</li>
-</ul>
-<p>See the <a href="/docs/6_4_2/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Reference Guide for 6.4 Available</title><link href="/" rel="alternate"></link><published>2017-02-17T00:00:00+00:00</published><updated>2017-02-17T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-02-17:/</id><content type="html"><p>The Lucene PMC is pleased to announce that the Solr Reference Guide
-for Solr 6.4 has been released.</p>
-<p>This 763-page PDF is the definitive guide to using Apache Solr. It can be
-downloaded from:</p>
-<p><a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.4.pdf">https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.4.pdf</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr™ 5.5.4 Available</title><link href="/" rel="alternate"></link><published>2017-02-15T00:00:00+00:00</published><updated>2017-02-15T00:00:00+00:00</updated><author><name>Solr Developers</n [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.4.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 5.5.4 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<ul>
-<li>
-<p>Better validation of filename params in ReplicationHandler</p>
-</li>
-<li>
-<p>Upgraded commons-fileupload to 1.3.2, fixing a potential vulnerability CVE-2016-3092</p>
-</li>
-</ul>
-<p>See the <a href="/docs/5_5_4/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>CVE-2017-3163: Apache Solr ReplicationHandler path traversal attack**</title><link href="/cve-2017-3163-apache-solr-replicationhandler-path-traversal-attack.html" rel="alternate"></link><published>2017-02-15T00:00:00+00:00</published><updated>2017-02-15T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-02-15:/cve-2017-3163-apache [...]
-<p><strong>Severity:</strong> Moderate</p>
-<p><strong>Vendor:</strong><br>
-The Apache Software Foundation</p>
-<p><strong>Versions Affected:</strong><br>
-Solr 1.4 to 6.4.0</p>
-<p><strong>Description:</strong><br>
-When using the Index Replication feature, Solr nodes can pull index files from
-a master/leader node using an HTTP API which accepts a file name …</p></summary><content type="html"><p><strong>CVE-2017-3163: Apache Solr ReplicationHandler path traversal attack</strong></p>
-<p><strong>Severity:</strong> Moderate</p>
-<p><strong>Vendor:</strong><br>
-The Apache Software Foundation</p>
-<p><strong>Versions Affected:</strong><br>
-Solr 1.4 to 6.4.0</p>
-<p><strong>Description:</strong><br>
-When using the Index Replication feature, Solr nodes can pull index files from
-a master/leader node using an HTTP API which accepts a file name. However,
-Solr did not validate the file name, hence it was possible to craft a special
-request involving path traversal, leaving any file readable to the Solr server
-process exposed. Solr servers protected and restricted by firewall rules
-and/or authentication would not be at risk since only trusted clients and users
-would gain direct HTTP access.</p>
-<p><strong>Mitigation:</strong></p>
-<ul>
-<li>6.x users should upgrade to 6.4.1</li>
-<li>5.x users should upgrade to 5.5.4</li>
-<li>4.x, 3.x and 1.4 users should upgrade to a supported version of Solr or setup proper firewalling, or disable the ReplicationHandler if not in use.</li>
-</ul>
-<p><strong>Credit:</strong><br>
-This issue was discovered by Hrishikesh Gadre of Cloudera Inc.</p>
-<p><strong>References:</strong></p>
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/SOLR-10031">https://issues.apache.org/jira/browse/SOLR-10031</a></li>
-<li><a href="https://cwiki.apache.org/confluence/display/solr/SolrSecurity">https://cwiki.apache.org/confluence/display/solr/SolrSecurity</a></li>
-</ul></content><category term="solr/security"></category></entry><entry><title>Apache Solr™ 6.4.1 Available</title><link href="/" rel="alternate"></link><published>2017-02-06T00:00:00+00:00</published><updated>2017-02-06T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-02-06:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.4.1.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.4.1.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 6.4.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<ul>
-<li>
-<p>"Plugin/Stats" section of the UI doesn't display empty metric types</p>
-</li>
-<li>
-<p>SOLR_SSL_OPTS was mistakenly overwritten in solr.cmd</p>
-</li>
-<li>
-<p>Better validation of filename params in ReplicationHandler</p>
-</li>
-<li>
-<p>Core swapping did not work with new metrics changes in place</p>
-</li>
-<li>
-<p>Admin UI could not find DataImport handlers due to metrics changes</p>
-</li>
-<li>
-<p>AnalyzingInfixSuggester/BlendedInfixSuggester now work with core reload</p>
-</li>
-</ul>
-<p>See the <a href="/docs/6_4_1/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr™ 6.4.0 Available</title><link href="/" rel="alternate"></link><published>2017-01-23T00:00:00+00:00</published><updated>2017-01-23T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2017-01-23:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.4.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.4.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 6.4.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<p>Streaming:</p>
-<ul>
-<li>
-<p>Addition of a HavingStream to Streaming API and Streaming Expressions</p>
-</li>
-<li>
-<p>Addition of a priority Streaming Expression</p>
-</li>
-<li>
-<p>Streaming expressions now support collection aliases</p>
-</li>
-</ul>
-<p>Machine Learning:</p>
-<ul>
-<li>Configurable Learning-To-Rank (LTR) support: upload feature definitions, extract feature values, upload your own machine learnt models and use them to rerank search results.</li>
-</ul>
-<p>Faceting:</p>
-<ul>
-<li>
-<p>Added "param" query type to facet domain filter specification to obtain filters via query parameters</p>
-</li>
-<li>
-<p>Any facet command can be filtered using a new parameter filter. Example: { type:terms, field:category, filter:"user:yonik" }</p>
-</li>
-</ul>
-<p>Scripts / Command line:</p>
-<ul>
-<li>
-<p>A new command-line tool to manage the snapshots functionality</p>
-</li>
-<li>
-<p>bin/solr and bin/solr.cmd now use mkroot command</p>
-</li>
-</ul>
-<p>SolrCloud / SolrJ</p>
-<ul>
-<li>
-<p>LukeResponse now supports dynamic fields</p>
-</li>
-<li>
-<p>Solrj client now supports hierarchical clusters and other topics marker</p>
-</li>
-<li>
-<p>Collection backup/restore are extensible.</p>
-</li>
-</ul>
-<p>Security:</p>
-<ul>
-<li>
-<p>Support Secure Impersonation / Proxy User for Solr authentication</p>
-</li>
-<li>
-<p>Key Store type can be specified in solr.in.sh file for SSL</p>
-</li>
-<li>
-<p>New generic authentication plugins: 'HadoopAuthPlugin' and 'ConfigurableInternodeAuthHadoopPlugin' that delegate all functionality to Hadoop authentication framework</p>
-</li>
-</ul>
-<p>Query / QueryParser / Highlighting:</p>
-<ul>
-<li>
-<p>A new highlighter: The Unified Highlighter. Try it via <code>hl.method=unified</code>; many popular highlighting parameters / features are supported. It's the highest performing highlighter, especially for large documents. Highlighting phrase queries and exotic queries are supported equally as well as the Original Highlighter (aka the default/standard one). Please use this new highlighter and report issues since it will likely become the default one day.</p>
-</li>
-<li>
-<p>Leading wildcard in complexphrase query parser are now accepted and optimized with the <code>ReversedWildcardFilterFactory</code> when it's provided</p>
-</li>
-</ul>
-<p>Metrics:</p>
-<ul>
-<li>
-<p>Use metrics-jvm library to instrument jvm internals such as GC, memory usage and others.</p>
-</li>
-<li>
-<p>A lot of metrics have been added to the collection: index merges, index store I/Os, query, update, core admin, core load thread pools, shard replication, tlog replay and replicas</p>
-</li>
-<li>
-<p>A new /admin/metrics API to return all metrics collected by Solr via API.</p>
-</li>
-</ul>
-<p>Misc changes:</p>
-<ul>
-<li>
-<p>The new config parameter 'maxRamMB'can now limit the memory consumed by the FastLRUCache</p>
-</li>
-<li>
-<p>A new document processor 'SkipExistingDocumentsProcessor' that skips duplicate inserts and ignores updates to missing docs</p>
-</li>
-<li>
-<p>FieldCache information fetched via the mbeans handler or seen via the UI now displays the total size used.</p>
-</li>
-<li>
-<p>A new config flag 'enable' allows to enable/disable any cache</p>
-</li>
-</ul>
-<p>Please note, this release cannot be built from source with Java 8 update 121,
-use an earlier version instead! This is caused by a bug introduced into the
-Javadocs tool shipped with that update. The workaround was too late for this
-Lucene release. Of course, you can use the binary artifacts.</p>
-<p>See the <a href="/docs/6_4_0/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Reference Guide for 6.3 Available</title><link href="/" rel="alternate"></link><published>2016-11-16T00:00:00+00:00</published><updated>2016-11-16T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-11-16:/</id><content type="html"><p>The Lucene PMC is pleased to announce that the Solr Reference Guide
-for Solr 6.3 has been released.</p>
-<p>This 736-page PDF is the definitive guide to using Apache Solr. It can be
-downloaded from:</p>
-<p><a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.3.pdf">https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.3.pdf</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr™ 6.3.0 Available</title><link href="/" rel="alternate"></link><published>2016-11-08T00:00:00+00:00</published><updated>2016-11-08T00:00:00+00:00</updated><author><name>Solr Developers</n [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.3.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 6.3.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<p>DocValues, streaming, /export, machine learning</p>
-<ul>
-<li>
-<p>Optimize, store and deploy AI models in Solr</p>
-</li>
-<li>
-<p>Ability to add custom streaming expressions</p>
-</li>
-<li>
-<p>New streaming expressions such as "fetch", "executor", and "commit" added.</p>
-</li>
-<li>
-<p>Parallel SQL accepts &lt;, &gt;, =, etc., symbols.</p>
-</li>
-<li>
-<p>Support facet scoring with the scoreNodes expression</p>
-</li>
-<li>
-<p>Retrieving docValues as stored values was sped up by using the proper leaf reader rather than ask for a global view. In extreme cases, this leads to a 100x speedup.</p>
-</li>
-</ul>
-<p>Faceting:</p>
-<ul>
-<li>
-<p>facet.method=enum can bypass exact counts calculation with facet.exists=true, it just returns 1 for terms which exists in result docset</p>
-</li>
-<li>
-<p>Add "overrequest" parameter to JSON Facet API to control amount of overrequest on a distributed terms facet</p>
-</li>
-</ul>
-<p>Logging:</p>
-<ul>
-<li>
-<p>You can now set Solr's log level through environment variable SOLR_LOG_LEVEL</p>
-</li>
-<li>
-<p>GC logs are rotated by JVM to a max of 9 files, and backed up via bin/solr scripts</p>
-</li>
-<li>
-<p>Solr's logging verbosity at the INFO level has been greatly reduced by moving much logging to DEBUG level</p>
-</li>
-<li>
-<p>The solr-8983-console.log file now only logs STDOUT and STDERR output, not all log4j logs as before</p>
-</li>
-<li>
-<p>Solr's main log file, solr.log, is now written to SOLR_LOGS_DIR without changing log4j.properties</p>
-</li>
-</ul>
-<p>Start scripts:</p>
-<ul>
-<li>
-<p>Allow 180 seconds for shutdown before killing solr (configurable, old limit 5s) (Unix only)</p>
-</li>
-<li>
-<p>Start scripts now exits with informative message if using wrong Java version</p>
-</li>
-<li>
-<p>Fixed "bin/solr.cmd zk upconfig" command which was broken on windows</p>
-</li>
-<li>
-<p>You can now ask for DEBUG logging simply with '-v' option, and for WARN logging with '-q' option</p>
-</li>
-</ul>
-<p>SolrCloud:</p>
-<ul>
-<li>
-<p>The DELETEREPLICA API can accept a 'count' parameter and remove "count" number of replicas from each shard if the shard name is not provided</p>
-</li>
-<li>
-<p>The config API shows expanded useParams for request handlers inline</p>
-</li>
-<li>
-<p>Ability to create/delete/list snapshots at collection level</p>
-</li>
-<li>
-<p>The modify collection API now waits for the modified properties to show up in the cluster state before returning</p>
-</li>
-<li>
-<p>Many bug fixes related to SolrCloud recovery for data safety and faster recovery times.</p>
-</li>
-</ul>
-<p>Security:</p>
-<ul>
-<li>
-<p>SolrJ now supports Kerberos delegation tokens</p>
-</li>
-<li>
-<p>Pooled SSL connections were not being re-used. This is now fixed.</p>
-</li>
-<li>
-<p>Fix for the blockUnknown property which made inter-node communication impossible</p>
-</li>
-<li>
-<p>Support SOLR_AUTHENTICATION_OPTS and SOLR_AUTHENTICATION_CLIENT_CONFIGURER in windows bin/solr.cmd script</p>
-</li>
-<li>
-<p>New parameter -u <user:pass> in bin/post to pass basicauth credentials</p>
-</li>
-</ul>
-<p>Misc changes:</p>
-<ul>
-<li>
-<p>Optimizations to lower memory allocations when indexing JSON as well as for replication between solr cloud nodes.</p>
-</li>
-<li>
-<p>A new Excel workbook (.xlsx) response writer has been added. Use 'wt=xlsx' request parameter on a query request to enable.</p>
-</li>
-</ul>
-<p>See the <a href="/docs/6_3_0/changes/Changes.html">Solr CHANGES.txt</a> files included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr™ 6.2.1 available</title><link href="/" rel="alternate"></link><published>2016-09-20T00:00:00+00:00</published><updated>2016-09-20T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-09-20:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.2.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.2.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>This release includes 11 bug fixes since the 6.2.0 release. Some of the major fixes are:</p>
-<ul>
-<li>
-<p>SOLR-9490: BoolField always returning false for non-DV fields when javabin involved (via solrj, or intra node communication)</p>
-</li>
-<li>
-<p>SOLR-9188: BlockUnknown property makes inter-node communication impossible</p>
-</li>
-<li>
-<p>SOLR-9389: HDFS Transaction logs stay open for writes which leaks Xceivers</p>
-</li>
-<li>
-<p>SOLR-9438: Shard split can fail to write commit data on shutdown leading to data loss</p>
-</li>
-</ul>
-<p>Furthermore, this release includes Apache Lucene 6.2.1 which includes 3 bug fixes since the 6.2.0 release.</p>
-<p>The release is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/6.2.1">https://www.apache.org/dyn/closer.lua/lucene/solr/6.2.1</a></p>
-<p>See the <a href="https://solr.apache.org/6_2_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a detailed list of changes.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Reference Guide for 6.2 available</title><link href="/" rel="alternate"></link><published>2016-09-13T00:00:00+00:00</published><updated>2016-09-13T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-09-13:/</id><content type="html"><p>The Lucene PMC is pleased to announce that the Solr Reference Guide
-for Solr 6.2 has been released.</p>
-<p>This 717-page PDF is the definitive guide to using Apache Solr. It can be
-downloaded from:</p>
-<p><a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.2.pdf">https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.2.pdf</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.5.3 available</title><link href="/" rel="alternate"></link><published>2016-09-09T00:00:00+00:00</published><updated>2016-09-09T00:00:00+00:00</updated><author><name>Solr Developers</na [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.3</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>This release includes 5 bug fixes since the 5.5.2 release.</p>
-<p>This release specially contains 2 critical fixes:
-* The number of TCP connections in CLOSE_WAIT state do not spike during indexing,
-* PeerSync no longer fails on a node restart due to IndexFingerPrint mismatch.</p>
-<p>The release is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/5.5.3">https://www.apache.org/dyn/closer.lua/lucene/solr/5.5.3</a></p>
-<p>See the <a href="https://solr.apache.org/5_5_3/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a detailed list of changes.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 6.2.0 available</title><link href="/" rel="alternate"></link><published>2016-08-25T00:00:00+00:00</published><updated>2016-08-25T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-08-25:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.2.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.2.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 6.2.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 6.2 Release Highlights:</p>
-<p>DocValues, streaming, /export, machine learning</p>
-<ul>
-<li>
-<p>DocValues can now be used with BoolFields</p>
-</li>
-<li>
-<p>Date and boolean support added to /export handler</p>
-</li>
-<li>
-<p>Add "scoreNodes" streaming graph expression</p>
-</li>
-<li>
-<p>Support parallel ETL with the "topic" expression</p>
-</li>
-<li>
-<p>Feature selection and logistic regression on text via new streaming expressions: "features" and "train"</p>
-</li>
-</ul>
-<p>bin/solr script</p>
-<ul>
-<li>
-<p>Add basic auth support to the bin/solr script</p>
-</li>
-<li>
-<p>File operations to/from Zookeeper are now supported</p>
-</li>
-</ul>
-<p>SolrCloud</p>
-<ul>
-<li>
-<p>New tag 'role' in replica placement rules, e.g. rule=role:!overseer keeps new repicas off overseer nodes</p>
-</li>
-<li>
-<p>CDCR: fall back to whole-index replication when tlogs are insufficient</p>
-</li>
-<li>
-<p>New REPLACENODE command to decommission an existing node and replace it with another new node</p>
-</li>
-<li>
-<p>New DELETENODE command to delete all replicas on a node</p>
-</li>
-</ul>
-<p>Security</p>
-<ul>
-<li>
-<p>Add Kerberos delegation token support</p>
-</li>
-<li>
-<p>Support secure impersonation / proxy user for Kerberos authentication</p>
-</li>
-</ul>
-<p>Misc changes</p>
-<ul>
-<li>
-<p>A large number of regressions were fixed in the new Admin UI</p>
-</li>
-<li>
-<p>New boolean comparison function queries comparing numeric arguments: gt, gte, lt, lte, eq</p>
-</li>
-<li>
-<p>Upgraded Extraction module to Apache Tika 1.13.</p>
-</li>
-<li>
-<p>Updated to Hadoop 2.7.2</p>
-</li>
-</ul>
-<p>See the <a href="https://solr.apache.org/6_2_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a detailed list of changes.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.5.2 available</title><link href="/" rel="alternate"></link><published>2016-06-25T00:00:00+00:00</published><updated>2016-06-25T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-06-25:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>This release includes 38 bug fixes, documentation updates, etc.,
-since the 5.5.1 release.</p>
-<p>The release is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/5.5.2">https://www.apache.org/dyn/closer.lua/lucene/solr/5.5.2</a></p>
-<p>See the <a href="https://solr.apache.org/5_5_2/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a detailed list of changes.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 6.1.0 available</title><link href="/" rel="alternate"></link><published>2016-06-17T00:00:00+00:00</published><updated>2016-06-17T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-06-17:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.1.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.1.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search and analytics,
-rich document parsing, geospatial search, extensive REST APIs as well
-as parallel SQL. Solr is enterprise grade, secure and highly scalable,
-providing fault tolerant distributed search and indexing, and powers
-the search and navigation features of many of the world's largest
-internet sites.</p>
-<p>Solr 6.1.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 6.1 Release Highlights:</p>
-<ul>
-<li>
-<p>Added graph traversal support, and new "sort" and "random" streaming expressions. It's also now possible to create streaming expressions with the Solr Admin UI.</p>
-</li>
-<li>
-<p>Fixed the ENUM faceting method to not be unnecessarily rewritten to FCS, which was causing slowdowns.</p>
-</li>
-<li>
-<p>Reduced garbage creation when creating cache entries.</p>
-</li>
-<li>
-<p>New [subquery] document transformer to obtatin related documents per result doc.</p>
-</li>
-<li>
-<p>EmbeddedSolrServer allocates heap much wisely even with plain document list without callbacks.</p>
-</li>
-<li>
-<p>New GeoJSON response writer for encoding geographic data in query responses.</p>
-</li>
-</ul>
-<p>See the <a href="https://solr.apache.org/6_1_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a detailed list of changes.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 6.0.1 available</title><link href="/" rel="alternate"></link><published>2016-05-28T00:00:00+00:00</published><updated>2016-05-28T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-05-28:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.0.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.0.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>This release includes 31 bug fixes, documentation updates, etc.,
-since the 6.0.0 release.</p>
-<p>The release is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/6.0.1">https://www.apache.org/dyn/closer.lua/lucene/solr/6.0.1</a></p>
-<p>See the <a href="https://solr.apache.org/6_0_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a detailed list of changes.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.5.1 Available</title><link href="/" rel="alternate"></link><published>2016-05-05T00:00:00+00:00</published><updated>2016-05-05T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-05-05:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.5.1 is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/5.5.1">https://www.apache.org/dyn/closer.lua/lucene/solr/5.5.1</a></p>
-<p>This release contains a number of bug fixes for Solr, as well we Lucene.</p>
-<p>See the <a href="/docs/5_5_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Solr Reference Guide for 6.0 Available</title><link href="/" rel="alternate"></link><published>2016-04-25T00:00:00+00:00</published><updated>2016-04-25T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-04-25:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of the Solr Reference G [...]
-<p>The Guide has been extensively updated for Solr 6.0, with new sections on Parallel SQL and Cross Data Center Replication.</p>
-<p>The 660 page PDF can be downloaded from <a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.0.pdf">https://www.apache.org …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of the Solr Reference Guide for 6.0.</p>
-<p>The Guide has been extensively updated for Solr 6.0, with new sections on Parallel SQL and Cross Data Center Replication.</p>
-<p>The 660 page PDF can be downloaded from <a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.0.pdf">https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apache-solr-ref-guide-6.0.pdf</a>.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 6.0.0 Available</title><link href="/" rel="alternate"></link><published>2016-04-08T00:00:00+00:00</published><updated>2016-04-08T00:00:00+00:00</ [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 6.0.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 6.0.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/6_0_0/changes/Changes.html">CHANGES.txt</a></p>
-<p>Solr 6.0 Release Highlights:</p>
-<ul>
-<li>
-<p>Improved defaults for "Similarity" used in Solr, in order to provide better default experience for new users.</p>
-</li>
-<li>
-<p>Improved "Similarity" defaults for users upgrading: DefaultSimilarityFactory has been removed, implicit default Similarity has been changed to SchemaSimilarityFactory, and SchemaSimilarityFactory has been modified to use BM25Similarity as the default for field types that do not explicitly declare a Similarity.</p>
-</li>
-<li>
-<p>Deprecated GET methods for schema are now accessible through the bulk API. The output has less details and is not backward compatible.</p>
-</li>
-<li>
-<p>Users should set useDocValuesAsStored="false" to preserve sort order on multi-valued fields that have both stored="true" and docValues="true".</p>
-</li>
-<li>
-<p>Formatted date-times are more consistent with ISO-8601. BC dates are now better supported since they are now formatted with a leading '-'. AD years after 9999 have a leading '+'. Parse exceptions have been improved.</p>
-</li>
-<li>
-<p>Deprecated SolrServer and subclasses have been removed, use SolrClient instead.</p>
-</li>
-<li>
-<p>The deprecated <nrtMode> configuration in solrconfig.xml has been removed. Users must remove it from solrconfig.xml.</p>
-</li>
-<li>
-<p>SolrClient.shutdown() has been removed, use SolrClient.close() instead.</p>
-</li>
-<li>
-<p>The deprecated zkCredientialsProvider element in solrcloud section of solr.xml is now removed. Use the correct spelling (zkCredentialsProvider) instead.</p>
-</li>
-<li>
-<p>Added support for executing Parallel SQL queries across SolrCloud collections. Includes StreamExpression support and a new JDBC Driver for the SQL Interface.</p>
-</li>
-<li>
-<p>New features and capabilities added to the streaming API.</p>
-</li>
-<li>
-<p>Added support for SELECT DISTINCT queries to the SQL interface.</p>
-</li>
-<li>
-<p>New GraphQuery to enable graph traversal as a query operator.</p>
-</li>
-<li>
-<p>New support for Cross Data Center Replication consisting of active/passive replication for separate SolrClouds hosted in separate data centers.</p>
-</li>
-<li>
-<p>Filter support added to Real-time get.</p>
-</li>
-<li>
-<p>Column alias support added to the Parallel SQL Interface.</p>
-</li>
-<li>
-<p>New command added to switch between non/secure mode in zookeeper.</p>
-</li>
-<li>
-<p>Now possible to use IP fragments in replica placement rules.</p>
-</li>
-</ul></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.5.0 and Reference Guide for 5.5 Available</title><link href="/" rel="alternate"></link><published>2016-02-22T00:00:00+00:00</published><updated>2016-02-22T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-02-22:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.5.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.5.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/5_5_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<p>This is expected to be the last 5.x feature release before Solr 6.0.</p>
-<p>Release Highlights:</p>
-<ul>
-<li>
-<p>The schema version has been increased to 1.6, and Solr now returns non-stored doc values fields along with stored fields</p>
-</li>
-<li>
-<p>The PERSIST CoreAdmin action has been removed</p>
-</li>
-<li>
-<p>The mergePolicy element is deprecated in favor of a similar mergePolicyFactory element, in solrconfig.xml</p>
-</li>
-<li>
-<p>CheckIndex now works on HdfsDirectory</p>
-</li>
-<li>
-<p>RuleBasedAuthorizationPlugin now allows wildcards in the role, and accepts an 'all' permission</p>
-</li>
-<li>
-<p>Users can now choose compression mode in SchemaCodecFactory</p>
-</li>
-<li>
-<p>Solr now supports Lucene's XMLQueryParser</p>
-</li>
-<li>
-<p>Collections APIs now have async support</p>
-</li>
-<li>
-<p>Uninverted field faceting is re-enabled, for higher performance on rarely changing indices</p>
-</li>
-</ul>
-<p>Also available is the Solr Reference Guide for Solr 5.5. This PDF serves as the definitive user's manual for Solr 5.5. It can be downloaded from the Apache mirror network: <a href="https://s.apache.org/Solr-Ref-Guide-PDF">https://s.apache.org/Solr-Ref-Guide-PDF</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Lucene/Solr development moves to GIT</title><link href="/" rel="alternate"></link><published>2016-02-08T00:00:00+00:00< [...]
-This means that the old SVN repository is now stale and should not be used.
-For information on working with git, please consult
-<a href="https://solr.apache.org/resources.html#solr-version-control">the Solr web site</a>
-and the <a href="https://wiki.apache.org/solr/Git%20commit%20process">wiki</a>.</p>
-<p>The <a href="https://github.com/apache/lucene-solr/">GitHub mirror</a> remains at …</p></summary><content type="html"><p>As of January 23rd 2016, Lucene/Solr source code is hosted in Apache's GIT repository.
-This means that the old SVN repository is now stale and should not be used.
-For information on working with git, please consult
-<a href="https://solr.apache.org/resources.html#solr-version-control">the Solr web site</a>
-and the <a href="https://wiki.apache.org/solr/Git%20commit%20process">wiki</a>.</p>
-<p>The <a href="https://github.com/apache/lucene-solr/">GitHub mirror</a> remains at
-the same location as before, but the contents have changed. We now have
-one unified repo preserving the full history of both Lucene and Solr.
-If you had a GitHub fork, you will find
-that it has changed its "forked from" location, and any Pull Request will go to
-that other fork instead of to the Lucene developers. The only known solution is to
-delete your existing fork and re-fork from <a href="https://github.com/apache/lucene-solr/">GitHub</a>.</p>
-<p>If you had active code changes and Pull Requests against our old GitHub mirror,
-please see <a href="https://cwiki.apache.org/confluence/display/solr/HowToContribute#Working_with_GitHub">the wiki</a>
-for some suggestions on how to proceed.</p>
-<p>The PMC is happy to answer any question you may have regarding this change.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.3.2 Available</title><link href="/" rel="alternate"></link><published>2016-01-23T00:00:00+00:00</published><updated>2016-01-23T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-01-23:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apach [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.3.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.3.2 is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/5.3.2">https://www.apache.org/dyn/closer.lua/lucene/solr/5.3.2</a></p>
-<p>This release contains a number of bug fixes for Solr, as well we Lucene.</p>
-<p>See the <a href="/docs/5_3_2/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.4.1 Available</title><link href="/" rel="alternate"></link><published>2016-01-23T00:00:00+00:00</published><updated>2016-01-23T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2016-01-23:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.4.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.4.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.4.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>This release especially contains a fix for a faceting bug that could
-cause facet counts to include deleted documents and a fix for a
-corruption bug that was introduced in version 5.4.0. If you are on
-5.4.0 and using BINARY, SORTED_NUMERIC or SORTED_SET doc values,
-upgrading to 5.4.1 is strongly recommended.</p>
-<p>See the <a href="/docs/5_4_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Reference Guide for 5.4 Available</title><link href="/" rel="alternate"></link><published>2015-12-15T00:00:00+00:00</published><updated>2015-12-15T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-12-15:/</id><summary type="html"><p>Hot on the heels of the Solr 5.4.0 release (see below), the Lucene [...]
-<p>This 598 page PDF file can be downloaded from <a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.cgi/lucene/solr …</a></p></summary><content type="html"><p>Hot on the heels of the Solr 5.4.0 release (see below), the Lucene PMC is pleased to announce the release of the Apache Solr Reference Guide for Solr 5.4.</p>
-<p>This 598 page PDF file can be downloaded from <a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/</a>.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.4.0 Available</title><link href="/" rel="alternate"></link><published>2015-12-14T00:00:00+00:00</published><updated>2015-12-14T00:00:00+00:00</updated><author><name>Solr Developers</name></author [...]
-<p>The release can be downloaded from <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<h4 id="ui-changes">UI Changes</h4>
-<ul>
-<li>The rearchitected Admin UI is now prominently linked to from the existing UI, and includes …</li></ul></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.4.0</p>
-<p>The release can be downloaded from <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<h4 id="ui-changes">UI Changes</h4>
-<ul>
-<li>The rearchitected Admin UI is now prominently linked to from the existing UI, and includes support for managing collections as well as creating and removing fields via the schema tab. Expect it to be default in the next release.</li>
-</ul>
-<h4 id="api-features">API Features</h4>
-<ul>
-<li>New Collections APIs for migrating from clusterstate.json to per-collection state.json and forcing the election of a leader when all replicas in a shard are down.</li>
-<li>A new configset management API has been added.</li>
-</ul>
-<h4 id="querying-features">Querying Features</h4>
-<ul>
-<li>Filter cache is now accessible via a solr query syntax.</li>
-<li>ScoreJoins can now refer to a single-sharded collection that is replicated on all nodes.</li>
-<li>Add boost support, and 'exclude the queried document' in MoreLikeThis QParser.</li>
-<li>Add a 'sort' local param to the collapse QParser to support using complex sort options to select the representitive doc for each collapsed group.</li>
-</ul>
-<h4 id="other-features">Other Features</h4>
-<ul>
-<li>SolrJ now has support for connecting to Solr using basic authentication.</li>
-<li>Analyzing suggesters can now filter suggestions by a context field.</li>
-<li>JSON Facet API: add "method" param to terms/field facets to give an execution hint for what method should be used to facet.</li>
-<li>CloneFieldUpdateProcessorFactory now supports choosing a "dest" field name based on a regex pattern and replacement init options.</li>
-<li>Provide pluggable context tool support for VelocityResponseWriter.</li>
-</ul></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.3.1 Available</title><link href="/" rel="alternate"></link><published>2015-09-24T00:00:00+00:00</published><updated>2015-09-24T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-09-24:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.3.1</p>
-<p>The release can be downloaded from <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<h4 id="bug-fixes">Bug Fixes</h4>
-<ul>
-<li>security.json is not loaded on server start</li>
-<li>RuleBasedAuthorization plugin does not work for the …</li></ul></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.3.1</p>
-<p>The release can be downloaded from <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<h3 id="highlights-of-this-solr-release-include">Highlights of this Solr release include:</h3>
-<h4 id="bug-fixes">Bug Fixes</h4>
-<ul>
-<li>security.json is not loaded on server start</li>
-<li>RuleBasedAuthorization plugin does not work for the collection-admin-edit permission</li>
-<li>VelocityResponseWriter template encoding issue. Templates must be UTF-8 encoded</li>
-<li>SimplePostTool (also bin/post) -filetypes "*" now works properly in 'web' mode</li>
-<li>example/files update-script.js to be Java 7 and 8 compatible.</li>
-<li>SolrJ could not make requests to handlers with '/admin/' prefix</li>
-<li>Use of timeAllowed can cause incomplete filters to be cached and incorrect results to be returned on subsequent requests</li>
-<li>VelocityResponseWriter's $resource.get(key,baseName,locale) to use specified locale.</li>
-<li>Resolve XSS issue in Admin UI stats page</li>
-</ul></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.3.0 and Reference Guide for 5.3 available</title><link href="/" rel="alternate"></link><published>2015-08-24T00:00:00+00:00</published><updated>2015-08-24T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-08-24:/</id><summary type="html"><p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search …</p></summary><content type="html"><p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.3.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 5.3 Release Highlights:</p>
-<ul>
-<li>In addition to many other improvements in the security framework, Solr now includes an AuthenticationPlugin implementing HTTP Basic Auth that stores credentials securely in ZooKeeper. This is a simple way to require a username and password for anyone accessing Solr’s admin screen or APIs.</li>
-<li>In built AuthorizationPlugin that provides fine grained control over implementing ACLs for various resources with permisssion rules which are stored in ZooKeeper.</li>
-<li>The JSON Facet API can now change the domain for facet commands, essentially doing a block join and moving from parents to children, or children to parents before calculating the facet data.</li>
-<li>Major improvements in performance of the new Facet Module / JSON Facet API.</li>
-<li>Query and Range Facets under Pivot Facets. Just like the JSON Facet API, pivot facets can how nest other facet types such as range and query facets.</li>
-<li>More Like This Query Parser options. The MoreLikeThis QParser now supports all options provided by the MLT Handler. The query parser is much more versatile than the handler as it works in cloud mode as well as anywhere a normal query can be specified.</li>
-<li>Added Schema API support in SolrJ</li>
-<li>Added Scoring mode for query-time join and block join.</li>
-<li>Added Smile response format</li>
-</ul>
-<p>See the <a href="/docs/5_3_0/changes/Changes.html">CHANGES.txt</a> file included with the release for a full list of details.</p>
-<p>Please report any feedback to the <a href="https://solr.apache.org/discussion.html">mailing lists</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.2.1 available</title><link href="/" rel="alternate"></link><published>2015-06-15T00:00:00+00:00</published><updated>2015-06-15T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-06-15:/</id><summary type="html"><p>The Lucene PMC is pl [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.2.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, rich document (e.g., Word, PDF) handling, and geospatial search. Solr is highly scalable, providing fault tolerant distributed search and indexing, and powers the search and navigation features of many of the world's largest internet sites.</p>
-<p>This release contains various bug fixes and optimizations since the 5.2.0 release. The release is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/5_2_1/changes/Changes.html">CHANGES.txt</a> file included with the release for a full list of details.</p>
-<p>Solr 5.2.1 includes 8 bug fixes and 2 other changes.</p>
-<p>Release Highlights:</p>
-<ul>
-<li>Fix javascript bug introduced by SOLR-7409 that breaks the dataimport screen in the admin UI</li>
-<li>Faceting on a numeric field with a unique() subfacet function on another numeric field can result in incorrect results or an exception</li>
-<li>New Facet Module should respect shards.tolerant and process all non-failing shards instead of throwing an exception</li>
-<li>A request with a json content type but no body caused a null pointer exception</li>
-<li>SolrOutputFormat creates an invalid solr.xml in the solr home zip for MapReduceIndexerTool</li>
-<li>Fix new (Angular-based) admin UI Cloud pane</li>
-<li>The DefaultSolrHighlighter since 5.0 was determining if payloads were present in a way that was slow, especially when lots of fields were highlighted. It's now fast</li>
-<li>Requests are not distributed evenly if the collection isn't present locally</li>
-</ul>
-<p>See the CHANGES.txt file included with the release for a full list of changes and further details.</p>
-<p>Please report any feedback to the <a href="https://solr.apache.org/discussion.html">mailing lists</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.2.0 and Reference Guide for 5.2 available</title><link href="/" rel="alternate"></link><published>2015-06-07T00:00:00+00:00</published><updated>2015-06-07T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-06-07:/</id><summary type="html">& [...]
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search …</p></summary><content type="html"><p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.2.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/5_2_0/changes/Changes.html">CHANGES.txt</a> file included with the release for a full list of details.</p>
-<p>Solr 5.2.0 Release Highlights:</p>
-<ul>
-<li>
-<p>Restore API allows restoring a core from an index backup.</p>
-</li>
-<li>
-<p>JSON Facet API</p>
-<ul>
-<li>unique() is now implemented for numeric and date fields</li>
-<li>Optional flatter form via a "type" parameter</li>
-<li>Added support for "mincount" parameter in range facets to suppress buckets less than that count</li>
-<li>Multi-select faceting support for the Facet Module via the "excludeTags" parameter which disregards any matching tagged filters for that facet.</li>
-<li>hll() facet function for distributed cardinality via HyperLogLog algorithm.
-See examples at http://yonik.com/solr-count-distinct/</li>
-</ul>
-</li>
-<li>
-<p>A new "facet.range.method" parameter to let users choose how to do range faceting between an implementation based on filters (previous algorithm, using "facet.range.method=filter") or DocValues ("facet.range.method=dv")</p>
-</li>
-<li>
-<p>Rule-based Replica assignment during collection, shard, and replica creation.</p>
-</li>
-<li>
-<p>Stats component:</p>
-<ul>
-<li>New 'cardinality' option for stats.field, uses HyperLogLog to efficiently estimate the cardinality of a field w/bounded RAM. Blog post: https://lucidworks.com/blog/hyperloglog-field-value-cardinality-stats/</li>
-<li>stats.field now supports individual local params for 'countDistinct' and 'distinctValues'. 'calcdistinct' is still supported as an alias for both options.</li>
-</ul>
-</li>
-<li>
-<p>Solr security</p>
-<ul>
-<li>Authentication and Authorization frameworks that define interfaces, and mechanisms to create, load, and use authorization/authentication plugins have been added.</li>
-<li>A Kerberos authentication plugin which would allow running a Kerberized Solr setup.</li>
-</ul>
-</li>
-<li>
-<p>Solr Streaming Expressions
- See https://cwiki.apache.org/confluence/display/solr/Streaming+Expressions</p>
-</li>
-<li>
-<p>bin/post (and SimplePostTool in -Dauto=yes mode) now sends rather than skips files without a known content type, as "application/octet-stream", provided it still is in the allowed filetypes setting.</p>
-</li>
-<li>
-<p>HDFS transaction log replication factor is now configurable</p>
-</li>
-<li>
-<p>A cluster-wide property can now be be added/edited/deleted using the zkcli script and doesn't require a running Solr instance.</p>
-</li>
-<li>
-<p>New spatial RptWithGeometrySpatialField, based on CompositeSpatialStrategy, which blends RPT indexes for speed with serialized geometry for accuracy. Includes a Lucene segment based in-memory shape cache.</p>
-</li>
-<li>
-<p>Refactored Admin UI using AngularJS. It isn't the default, but a parallel UI interface in this release.</p>
-</li>
-<li>
-<p>Solr has internally been upgraded to use Jetty 9.</p>
-</li>
-</ul>
-<p>Solr 5.2.0 also includes many other new features as well as numerous
-optimizations and bugfixes of the corresponding Apache Lucene release.</p>
-<p>Also available is the Solr Reference Guide for Solr 5.2. This 591 page
-PDF serves as the definitive user's manual for Solr 5.2. It can be downloaded
-from the Apache mirror network: <a href="https://s.apache.org/Solr-Ref-Guide-PDF">https://s.apache.org/Solr-Ref-Guide-PDF</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Reference Guide Available</title><link href="/" rel="alternate"></link><published>2015-04-22T00:00:00+00:00</published><updated>2015-04-22T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-04-22:/</id><summary type="html">< [...]
-<p>This 578 page PDF serves is the definitive user's manual for Solr. For this version, we've updated the Guide for several new features and changes and given the PDF a bit …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the availability of the Apache Solr Reference Guide for Solr 5.1.</p>
-<p>This 578 page PDF serves is the definitive user's manual for Solr. For this version, we've updated the Guide for several new features and changes and given the PDF a bit of a facelift for easier reading.</p>
-<p>The Guide can be downloaded from https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/apache-solr-ref-guide-5.1.pdf.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.1.0 Available</title><link href="/" rel="alternate"></link><published>2015-04-14T00:00:00+00:00</published><updated>2015-04-14T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-04-14:/</id><summary type="html"><p>The Lucene [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 5.1.0.</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.1.0 is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/5.1.0">https://www.apache.org/dyn/closer.lua/lucene/solr/5.1.0</a></p>
-<p>Solr 5.1.0 includes 39 new features, 40 bug fixes, and 36 optimizations
-/ other changes from over 60 unique contributors.</p>
-<p>See the <a href="/docs/5_1_0/changes/Changes.html">CHANGES.txt</a> file included
-with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.4 Available</title><link href="/" rel="alternate"></link><published>2015-03-05T00:00:00+00:00</published><updated>2015-03-05T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-03-05:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.4</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.4</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.4 is available for immediate download at:
-<a href="https://www.apache.org/dyn/closer.lua/lucene/solr/4.10.4">https://www.apache.org/dyn/closer.lua/lucene/solr/4.10.4</a></p>
-<p>Solr 4.10.4 includes 24 bug fixes as well as Lucene 4.10.4 and its 13 bug fixes.</p>
-<p>See the <a href="/docs/4_10_4/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 5.0.0 and Reference Guide for 5.0 available</title><link href="/" rel="alternate"></link><published>2015-02-20T00:00:00+00:00</published><updated>2015-02-20T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2015-02-20:/</id><summary type="html"><p>Solr is the popular, blazing fast, open source NoSQL sea [...]
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search …</p></summary><content type="html"><p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 5.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/5_0_0/changes/Changes.html">CHANGES.txt</a> file included with the release for a full list of
-details.</p>
-<p>Solr 5.0 Release Highlights:</p>
-<ul>
-<li>
-<p>Usability improvements that include improved bin scripts and new and restructured examples.</p>
-</li>
-<li>
-<p>Scripts to support installing and running Solr as a service on Linux.</p>
-</li>
-<li>
-<p>Distributed IDF is now supported and can be enabled via the config. Currently, there are four supported implementations for the same:</p>
-<ul>
-<li>LocalStatsCache: Local document stats.</li>
-<li>ExactStatsCache: One time use aggregation</li>
-<li>ExactSharedStatsCache: Stats shared across requests</li>
-<li>LRUStatsCache: Stats shared in an LRU cache across requests</li>
-</ul>
-</li>
-<li>
-<p>Solr will no longer ship a war file and instead be a downloadable application.</p>
-</li>
-<li>
-<p>SolrJ now has first class support for Collections API.</p>
-</li>
-<li>
-<p>Implicit registration of replication,get and admin handlers.</p>
-</li>
-<li>
-<p>Config API that supports paramsets for easily configuring solr parameters and configuring fields. This API also supports managing of pre-existing request handlers and editing common solrconfig.xml via overlay.</p>
-</li>
-<li>
-<p>API for managing blobs allows uploading request handler jars and registering them via config API.</p>
-</li>
-<li>
-<p>BALANCESHARDUNIQUE Collection API that allows for even distribution of custom replica properties.</p>
-</li>
-<li>
-<p>There's now an option to not shuffle the nodeSet provided during collection creation.</p>
-</li>
-<li>
-<p>Option to configure bandwidth usage by Replication handler to prevent it from using up all the bandwidth.</p>
-</li>
-<li>
-<p>Splitting of clusterstate to per-collection enables scalability improvement in SolrCloud. This is also the default format for new Collections that would be created going forward.</p>
-</li>
-<li>
-<p>timeAllowed is now used to prematurely terminate requests during query expansion and SolrClient request retry.</p>
-</li>
-<li>
-<p>pivot.facet results can now include nested stats.field results constrained by those pivots.</p>
-</li>
-<li>
-<p>stats.field can be used to generate stats over the results of arbitrary numeric functions.
- It also allows for requesting for statistics for pivot facets using tags.</p>
-</li>
-<li>
-<p>A new DateRangeField has been added for indexing date ranges, especially multi-valued ones.</p>
-</li>
-<li>
-<p>Spatial fields that used to require units=degrees now take distanceUnits=degrees/kilometers miles instead.</p>
-</li>
-<li>
-<p>MoreLikeThis query parser allows requesting for documents similar to an existing document and also works in SolrCloud mode.</p>
-</li>
-<li>
-<p>Logging improvements:</p>
-<ul>
-<li>Transaction log replay status is now logged</li>
-<li>Optional logging of slow requests.</li>
-</ul>
-</li>
-</ul>
-<p>Solr 5.0 also includes many other new features as well as numerous
-optimizations and bugfixes of the corresponding Apache Lucene release.</p>
-<p>Also available is the Solr Reference Guide for Solr 5.0. This 535 page
-PDF serves as the definitive user's manual for Solr 5.0. It can be downloaded
-from the Apache mirror network: <a href="https://s.apache.org/Solr-Ref-Guide-PDF">https://s.apache.org/Solr-Ref-Guide-PDF</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.3 Available</title><link href="/" rel="alternate"></link><published>2014-12-29T00:00:00+00:00</published><updated>2014-12-29T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-12-29:/</id><summary type="html"><p>The [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.3</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.3 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.10.3 includes 21 bug fixes, 5 other changes,
-as well as Lucene 4.10.3 and its 12 bug fixes.</p>
-<p>This release fixes the following security vulnerability that has affected
-Solr since the Solr 4.0 Alpha release.</p>
-<p>CVE-2014-3628: Stored XSS vulnerability in Solr Admin UI.</p>
-<p>Information disclosure: The Solr Admin UI Plugin / Stats page does not escape
-data values which allows an attacker to execute javascript by executing a query
-that will be stored and displayed via the 'fieldvaluecache' object.</p>
-<p>See the <a href="/docs/4_10_3/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details, and Happy
-Holidays!</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.2 Available</title><link href="/" rel="alternate"></link><published>2014-10-31T00:00:00+00:00</published><updated>2014-10-31T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-10-31:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.2 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.10.2 includes 10 bug fixes,
-as well as Lucene 4.10.2 and its 2 bug fixes.</p>
-<p>See the <a href="/docs/4_10_2/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details, and Happy
-Halloween!</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.1 Available</title><link href="/" rel="alternate"></link><published>2014-09-29T00:00:00+00:00</published><updated>2014-09-29T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-29:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.10.1 includes 6 bug fixes,
-as well as Lucene 4.10.1 and its 7 bug fixes.</p>
-<p>See the <a href="/docs/4_10_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.9.1 Available</title><link href="/" rel="alternate"></link><published>2014-09-22T00:00:00+00:00</published><updated>2014-09-22T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-22:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.9.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.9.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.9.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.9.1 includes 2 bug fixes,
-as well as Lucene 4.9.1 and its 7 bug fixes.</p>
-<p>See the <a href="/docs/4_9_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Ref Guide for 4.10 Available</title><link href="/" rel="alternate"></link><published>2014-09-07T00:00:00+00:00</published><updated>2014-09-07T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-07:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that there is a new version of the
-Solr Reference Guide for Solr 4.10.</p>
-<p>The 511 page PDF serves as the definitive user's manual for Solr 4.10. It
-can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version of the
-Solr Reference Guide for Solr 4.10.</p>
-<p>The 511 page PDF serves as the definitive user's manual for Solr 4.10. It
-can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a>.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.0 Available</title><link href="/" rel="alternate"></link><published>2014-09-03T00:00:00+00:00</published><updated>2014-09-03T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-03:/</id><summary type="html">&l [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.0 is available for immediate download at:
- <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/4_10_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<p>Solr 4.10.0 Release Highlights:</p>
-<ul>
-<li>
-<p>This release upgrades Solr Cell's (contrib/extraction) dependency
- on Apache POI to mitigate
- <a href="#18-august-2014-recommendation-to-update-apache-poi-in-apache-solr-480-481-and-490-installations">2 security vulnerabilities</a>.</p>
-</li>
-<li>
-<p>Scripts for starting, stopping, and running Solr examples</p>
-</li>
-<li>
-<p>Distributed query support for facet.pivot</p>
-</li>
-<li>
-<p>Interval Faceting for Doc Values fields</p>
-</li>
-<li>
-<p>New "terms" QParser for efficiently filtering documents by a list of values</p>
-</li>
-</ul></content><category term="solr/news"></category></entry><entry><title>Recommendation to update Apache POI in Apache Solr 4.8.0, 4.8.1, and 4.9.0 installations</title><link href="/" rel="alternate"></link><published>2014-08-18T00:00:00+00:00</published><updated>2014-08-18T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-08-18:/</id><summary type="html"><p>Apache Solr versions 4.8.0, 4.8.1, 4.9.0 bundle Apache POI 3.10-beta2 with its b [...]
-This version (and all previous ones) of Apache POI are vulnerable to the following issues:</p>
-<h3 id="cve-2014-3529-xml-external-entity-xxe-problem-in-apache-pois-openxml-parser">CVE-2014-3529: XML External Entity (XXE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Information disclosure …</em></p></summary><content type="html"><p>Apache Solr versions 4.8.0, 4.8.1, 4.9.0 bundle Apache POI 3.10-beta2 with its binary release tarball.
-This version (and all previous ones) of Apache POI are vulnerable to the following issues:</p>
-<h3 id="cve-2014-3529-xml-external-entity-xxe-problem-in-apache-pois-openxml-parser">CVE-2014-3529: XML External Entity (XXE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Information disclosure:</em> Apache POI uses Java's XML components to parse OpenXML files produced by Microsoft Office products (DOCX, XLSX, PPTX,...).
-Applications that accept such files from end-users are vulnerable to XML External Entity (XXE) attacks, which allows remote attackers to bypass
-security restrictions and read arbitrary files via a crafted OpenXML document that provides an XML external entity declaration in conjunction
-with an entity reference.</p>
-<h3 id="cve-2014-3574-xml-entity-expansion-xee-problem-in-apache-pois-openxml-parser">CVE-2014-3574: XML Entity Expansion (XEE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Denial of service:</em> Apache POI uses Java's XML components and Apache Xmlbeans to parse OpenXML files produced by Microsoft Office products
-(DOCX, XLSX, PPTX,...). Applications that accept such files from end-users are vulnerable to XML Entity Expansion (XEE) attacks ("XML bombs"),
-which allows remote hackers to consume large amounts of CPU resources.</p>
-<p><strong>The Apache POI PMC released a bugfix version (3.10.1) today.</strong></p>
-<p>Solr users are affected by these issues, if they enable the "Apache Solr Content Extraction Library (Solr Cell)"
-contrib module from the folder "contrib/extraction" of the release tarball.</p>
-<p>Users of Apache Solr are strongly advised to keep the module disabled if they don't use it.
-Alternatively, users of Apache Solr 4.8.0, 4.8.1, or 4.9.0 can update the affected libraries by
-replacing the vulnerable JAR files in the distribution folder. Users of previous versions have
-to update their Solr release first, patching older versions is impossible.</p>
-<h3 id="to-replace-the-vulnerable-jar-files-follow-these-steps">To replace the vulnerable JAR files follow these steps:</h3>
-<ul>
-<li>
-<p>Download the <a href="http://poi.apache.org/download.html#POI-3.10.1">Apache POI 3.10.1</a> binary release.</p>
-</li>
-<li>
-<p>Unzip the archive.</p>
-</li>
-<li>
-<p>Delete the following files in your "solr-4.X.X/contrib/extraction/lib" folder:</p>
-<ul>
-<li>poi-3.10-beta2.jar</li>
-<li>poi-ooxml-3.10-beta2.jar</li>
-<li>poi-ooxml-schemas-3.10-beta2.jar</li>
-<li>poi-scratchpad-3.10-beta2.jar</li>
-<li>xmlbeans-2.3.0.jar</li>
-</ul>
-</li>
-<li>
-<p>Copy the following files from the base folder of the Apache POI distribution to the "solr-4.X.X/contrib/extraction/lib" folder:</p>
-<ul>
-<li>poi-3.10.1-20140818.jar</li>
-<li>poi-ooxml-3.10.1-20140818.jar</li>
-<li>poi-ooxml-schemas-3.10.1-20140818.jar</li>
-<li>poi-scratchpad-3.10.1-20140818.jar</li>
-</ul>
-</li>
-<li>
-<p>Copy "xmlbeans-2.6.0.jar" from POI's "ooxml-lib/" folder to the "solr-4.X.X/contrib/extraction/lib" folder.</p>
-</li>
-<li>
-<p>Verify that the "solr-4.X.X/contrib/extraction/lib" no longer contains any files with version number "3.10-beta2".</p>
-</li>
-<li>
-<p>Verify that the folder contains one xmlbeans JAR file with version 2.6.0.</p>
-</li>
-</ul>
-<p>If you just want to disable extraction of Microsoft Office documents, delete the files above and don't replace them.
-"Solr Cell" will automatically detect this and disable Microsoft Office document extraction.</p>
-<p>Coming versions of Apache Solr will have the updated libraries bundled.</p></content><category term="solr/news"></category></entry><entry><title>CVE-2014-3529, CVE-2014-3574: Recommendation to update Apache POI in Apache Solr 4.8.0, 4.8.1, and 4.9.0 installations</title><link href="/" rel="alternate"></link><published>2014-08-18T00:00:00+00:00</published><updated>2014-08-18T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-08-18:/</id>< [...]
-This version (and all previous ones) of Apache POI are vulnerable to the following issues:</p>
-<h3 id="cve-2014-3529-xml-external-entity-xxe-problem-in-apache-pois-openxml-parser">CVE-2014-3529: XML External Entity (XXE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Information disclosure …</em></p></summary><content type="html"><p>Apache Solr versions 4.8.0, 4.8.1, 4.9.0 bundle Apache POI 3.10-beta2 with its binary release tarball.
-This version (and all previous ones) of Apache POI are vulnerable to the following issues:</p>
-<h3 id="cve-2014-3529-xml-external-entity-xxe-problem-in-apache-pois-openxml-parser">CVE-2014-3529: XML External Entity (XXE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Information disclosure:</em> Apache POI uses Java's XML components to parse OpenXML files produced by Microsoft Office products (DOCX, XLSX, PPTX,...).
-Applications that accept such files from end-users are vulnerable to XML External Entity (XXE) attacks, which allows remote attackers to bypass
-security restrictions and read arbitrary files via a crafted OpenXML document that provides an XML external entity declaration in conjunction
-with an entity reference.</p>
-<h3 id="cve-2014-3574-xml-entity-expansion-xee-problem-in-apache-pois-openxml-parser">CVE-2014-3574: XML Entity Expansion (XEE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Denial of service:</em> Apache POI uses Java's XML components and Apache Xmlbeans to parse OpenXML files produced by Microsoft Office products
-(DOCX, XLSX, PPTX,...). Applications that accept such files from end-users are vulnerable to XML Entity Expansion (XEE) attacks ("XML bombs"),
-which allows remote hackers to consume large amounts of CPU resources.</p>
-<p><strong>The Apache POI PMC released a bugfix version (3.10.1) today.</strong></p>
-<p>Solr users are affected by these issues, if they enable the "Apache Solr Content Extraction Library (Solr Cell)"
-contrib module from the folder "contrib/extraction" of the release tarball.</p>
-<p>Users of Apache Solr are strongly advised to keep the module disabled if they don't use it.
-Alternatively, users of Apache Solr 4.8.0, 4.8.1, or 4.9.0 can update the affected libraries by
-replacing the vulnerable JAR files in the distribution folder. Users of previous versions have
-to update their Solr release first, patching older versions is impossible.</p>
-<h3 id="to-replace-the-vulnerable-jar-files-follow-these-steps">To replace the vulnerable JAR files follow these steps:</h3>
-<ul>
-<li>
-<p>Download the <a href="http://poi.apache.org/download.html#POI-3.10.1">Apache POI 3.10.1</a> binary release.</p>
-</li>
-<li>
-<p>Unzip the archive.</p>
-</li>
-<li>
-<p>Delete the following files in your "solr-4.X.X/contrib/extraction/lib" folder:</p>
-<ul>
-<li>poi-3.10-beta2.jar</li>
-<li>poi-ooxml-3.10-beta2.jar</li>
-<li>poi-ooxml-schemas-3.10-beta2.jar</li>
-<li>poi-scratchpad-3.10-beta2.jar</li>
-<li>xmlbeans-2.3.0.jar</li>
-</ul>
-</li>
-<li>
-<p>Copy the following files from the base folder of the Apache POI distribution to the "solr-4.X.X/contrib/extraction/lib" folder:</p>
-<ul>
-<li>poi-3.10.1-20140818.jar</li>
-<li>poi-ooxml-3.10.1-20140818.jar</li>
-<li>poi-ooxml-schemas-3.10.1-20140818.jar</li>
-<li>poi-scratchpad-3.10.1-20140818.jar</li>
-</ul>
-</li>
-<li>
-<p>Copy "xmlbeans-2.6.0.jar" from POI's "ooxml-lib/" folder to the "solr-4.X.X/contrib/extraction/lib" folder.</p>
-</li>
-<li>
-<p>Verify that the "solr-4.X.X/contrib/extraction/lib" no longer contains any files with version number "3.10-beta2".</p>
-</li>
-<li>
-<p>Verify that the folder contains one xmlbeans JAR file with version 2.6.0.</p>
-</li>
-</ul>
-<p>If you just want to disable extraction of Microsoft Office documents, delete the files above and don't replace them.
-"Solr Cell" will automatically detect this and disable Microsoft Office document extraction.</p>
-<p>Coming versions of Apache Solr will have the updated libraries bundled.</p></content><category term="solr/security"></category></entry><entry><title>Apache Solr Ref Guide for 4.9 Available</title><link href="/" rel="alternate"></link><published>2014-06-30T00:00:00+00:00</published><updated>2014-06-30T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-06-30:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that the [...]
-of the Solr Reference Guide for Solr 4.9.</p>
-<p>The 408 page PDF serves as the definitive user's manual for Solr 4.9.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version
-of the Solr Reference Guide for Solr 4.9.</p>
-<p>The 408 page PDF serves as the definitive user's manual for Solr 4.9.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a>.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.9.0 Available</title><link href="/" rel="alternate"></link><published>2014-06-25T00:00:00+00:00</published><updated>2014-06-25T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-06-25:/</id><summary type="html">< [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.9.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.9.0 is available for immediate download at:
- <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/4_9_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<p>Solr 4.9.0 Release Highlights:</p>
-<ul>
-<li>
-<p>Numerous optimizations for doc values search-time performance</p>
-</li>
-<li>
-<p>Allow a client application to request the minium achieved replication
- factor for an update request (single or batch) by sending an optional
- parameter "min_rf".</p>
-</li>
-<li>
-<p>Query re-ranking support with the new ReRankingQParserPlugin.</p>
-</li>
-<li>
-<p>A new [child ...] DocTransformer for optionally including Block-Join
- decendent documents inline in the results of a search.</p>
-</li>
-<li>
-<p>A new (default) Lucene49NormsFormat to better compress certain cases
- such as very short fields.</p>
-</li>
-</ul></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.8.1 Available</title><link href="/" rel="alternate"></link><published>2014-05-20T00:00:00+00:00</published><updated>2014-05-20T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-05-20:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.8.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.8.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.8.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.8.1 includes 10 bug fixes,
-as well as Lucene 4.8.1 and its bug fixes.</p>
-<p>See the <a href="/docs/4_8_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Ref Guide for 4.8 Available</title><link href="/" rel="alternate"></link><published>2014-05-02T00:00:00+00:00</published><updated>2014-05-02T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-05-02:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that there is a new version
-of the Solr Reference Guide available for Solr 4.8.</p>
-<p>The 396 page PDF serves as the definitive user's manual for Solr 4.8.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version
-of the Solr Reference Guide available for Solr 4.8.</p>
-<p>The 396 page PDF serves as the definitive user's manual for Solr 4.8.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.8.0 Available</title><link href="/" rel="alternate"></link><published>2014-04-28T00:00:00+00:00</published><updated>2014-04-28T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-04-28:/</id><summary type="html">< [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.8.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.8.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/4_8_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<h3 id="solr-480-release-highlights">Solr 4.8.0 Release Highlights:</h3>
-<ul>
-<li>
-<p>Apache Solr now requires Java 7 or greater (recommended is
- Oracle Java 7 or OpenJDK 7, minimum update 55; earlier versions
- have known JVM bugs affecting Solr).</p>
-</li>
-<li>
-<p>Apache Solr is fully compatible with Java 8.</p>
-</li>
-<li>
-<p><code class="inline">&lt;fields&gt;</code> and <code class="inline">&lt;types&gt;</code> tags have been deprecated from schema.xml.
- There is no longer any reason to keep them in the schema file,
- they may be safely removed. This allows intermixing of <code class="inline">&lt;fieldType&gt;</code>,
- <code class="inline">&lt;field&gt;</code> and <code class="inline">&lt;copyField&gt;</code> definitions if desired.</p>
-</li>
-<li>
-<p>The new {!complexphrase} query parser supports wildcards, ORs etc.
- inside Phrase Queries.</p>
-</li>
-<li>
-<p>New Collections API CLUSTERSTATUS action reports the status of
- collections, shards, and replicas, and also lists collection
- aliases and cluster properties.</p>
-</li>
-<li>
-<p>Added managed synonym and stopword filter factories, which enable
- synonym and stopword lists to be dynamically managed via REST API.</p>
-</li>
-<li>
-<p>JSON updates now support nested child documents, enabling {!child}
- and {!parent} block join queries.</p>
-</li>
-<li>
-<p>Added ExpandComponent to expand results collapsed by the
- CollapsingQParserPlugin, as well as the parent/child relationship
- of nested child documents.</p>
-</li>
-<li>
-<p>Long-running Collections API tasks can now be executed
- asynchronously; the new REQUESTSTATUS action provides status.</p>
-</li>
-<li>
-<p>Added a hl.qparser parameter to allow you to define a query parser
- for hl.q highlight queries.</p>
-</li>
-<li>
-<p>In Solr single-node mode, cores can now be created using named
- configsets.</p>
-</li>
-<li>
-<p>New DocExpirationUpdateProcessorFactory supports computing an
- expiration date for documents from the "TTL" expression, as well as
- automatically deleting expired documents on a periodic basis.</p>
-</li>
-</ul>
-<p>Solr 4.8.0 also includes many other new features as well as numerous
-optimizations and bugfixes of the corresponding
-<a href="/core/4_8_0/">Apache Lucene</a> release.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.7.2 Available</title><link href="/" rel="alternate"></link><published>2014-04-15T00:00:00+00:00</published><updated>2014-04-15T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-04-15:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.7.2 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.7.2 includes 2 bug fixes,
-as well as Lucene 4.7.2 and its bug fixes.</p>
-<p>See the <a href="/docs/4_7_2/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.7.1 Available</title><link href="/" rel="alternate"></link><published>2014-04-02T00:00:00+00:00</published><updated>2014-04-02T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-04-02:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.7.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.7.1 includes 28 bug fixes and one new configuration setting,
-as well as Lucene 4.7.1 and its bug fixes.</p>
-<p>See the <a href="/docs/4_7_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.8 will require Java 7</title><link href="/" rel="alternate"></link><published>2014-03-12T00:00:00+00:00</published><updated>2014-03-12T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-03-12:/</id><summary type="html"><p>The Apache Solr committers decided with a large majority on the vote to requ [...]
-<p>The next release will also contain some improvements for Java 7:</p>
-<ul>
-<li>
-<p>Better file handling (especially on Windows) in the directory implementations. Files can …</p></li></ul></summary><content type="html"><p>The Apache Solr committers decided with a large majority on the vote to require <strong>Java 7</strong> for the next minor release of Apache Solr (version 4.8)!</p>
-<p>The next release will also contain some improvements for Java 7:</p>
-<ul>
-<li>
-<p>Better file handling (especially on Windows) in the directory implementations. Files can now be deleted on windows, although the index is still open - like it was always possible on Unix environments (delete on last close semantics).</p>
-</li>
-<li>
-<p>Speed improvements in sorting comparators: Sorting now uses Java 7's own comparators for integer and long sorts, which are highly optimized by the Hotspot VM.</p>
-</li>
-</ul>
-<p>If you want to stay up-to-date with Lucene and Solr, you should upgrade your infrastructure to Java 7.
-Please be aware that you must use at least use Java 7u1.
-The recommended version at the moment is Java 7u25. Later versions like 7u40, 7u45,... have a bug causing index corrumption.
-Ideally use the Java 7u60 prerelease, which has fixed this bug. Once 7u60 is out, this will be the recommended version.
-In addition, there is no more Oracle/BEA JRockit available for Java 7, use the official Oracle Java 7.
-JRockit was never working correctly with Lucene/Solr (causing index corrumption), so this should not be an issue.
-Please also review our list of JVM bugs: <a href="http://wiki.apache.org/lucene-java/JavaBugs">http://wiki.apache.org/lucene-java/JavaBugs</a></p>
-<p><em>EDIT (as of 15 April 2014):</em> The recently released Java 7u55 fixes the above bug causing index corrumption.
-This version is now the recommended version for running Apache Solr.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Ref Guide for 4.7 Available</title><link href="/" rel="alternate"></link><published>2014-03-05T00:00:00+00:00</published><updated>2014-03-05T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-03-05:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that there is a new vers [...]
-<p>The 395 page PDF serves as the definitive user's manual for Solr 4.7. It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version of the Solr Reference Guide available for Solr 4.7.</p>
-<p>The 395 page PDF serves as the definitive user's manual for Solr 4.7. It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.7.0 Available</title><link href="/" rel="alternate"></link><published>2014-02-26T00:00:00+00:00</published><updated>2014-02-26T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-02-26:/</id><summary type="html">< [...]
-Apache Solr 4.7</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of
-Apache Solr 4.7</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.7 is available for immediate download at:
-<a href="https://solr.apache.org/mirrors-solr-latest-redir.html">https://solr.apache.org/mirrors-solr-latest-redir.html</a></p>
-<p>See the <a href="/docs/4_7_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<h3 id="solr-47-release-highlights">Solr 4.7 Release Highlights:</h3>
-<ul>
-<li>
-<p>A new migrate collection API to split all documents with a route key
- into another collection.</p>
-</li>
-<li>
-<p>Added support for tri-level compositeId routing.</p>
-</li>
-<li>
-<p>Admin UI - Added a new Files conf directory browser/file viewer.</p>
-</li>
-<li>
-<p>Add a QParserPlugin for Lucene's SimpleQueryParser.</p>
-</li>
-<li>
-<p>Suggest improvements: a new SuggestComponent that fully utilizes the
- Lucene suggester module; queries can now use multiple suggesters;
- Lucene's FreeTextSuggester and BlendedInfixSuggester are now supported.</p>
-</li>
-<li>
-<p>New cursorMark request param for efficient deep paging of sorted
- result sets. See <a href="http://s.apache.org/cursorpagination">http://s.apache.org/cursorpagination</a></p>
-</li>
-<li>
-<p>Add a Solr contrib that allows for building Solr indexes via Hadoop's
- MapReduce.</p>
-</li>
-<li>
-<p>Upgrade to Spatial4j 0.4. Various new options are now exposed
- automatically for an RPT field type. See Spatial4j CHANGES &amp; javadocs.
- <a href="https://github.com/spatial4j/spatial4j/blob/master/CHANGES.md">https://github.com/spatial4j/spatial4j/blob/master/CHANGES.md</a></p>
-</li>
-<li>
-<p>SSL support for SolrCloud.</p>
-</li>
-</ul>
-<p>Solr 4.7 also includes many other new features as well as numerous
- optimizations and bugfixes.</p></content><category term="solr/news"></category></entry></feed>
\ No newline at end of file
+</ul></content><category term="solr/security"></category></entry></feed>
\ No newline at end of file
diff --git a/output/feeds/solr/news.atom.xml b/output/feeds/solr/news.atom.xml
index 9c8dc9bff..6d499408c 100644
--- a/output/feeds/solr/news.atom.xml
+++ b/output/feeds/solr/news.atom.xml
@@ -1,5 +1,5 @@
<?xml version="1.0" encoding="utf-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr - solr/news</title><link href="/" rel="alternate"></link><link href="/feeds/solr/news.atom.xml" rel="self"></link><id>/</id><updated>2024-05-29T00:00:00+00:00</updated><subtitle></subtitle><subtitle></subtitle><entry><title>Apache Solr™ 9.6.1 available</title><link href="/apache-solrtm-961-available.html" rel="alternate"></link><published>2024-05-29T00:00:00+00:00</published><updated>2024-05-29T00:00:00+00:00</updated><author>< [...]
+<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr - solr/news</title><link href="/" rel="alternate"></link><link href="/feeds/solr/news.atom.xml" rel="self"></link><id>/</id><updated>2024-05-29T00:00:00+00:00</updated><entry><title>Apache Solr™ 9.6.1 available</title><link href="/apache-solrtm-961-available.html" rel="alternate"></link><published>2024-05-29T00:00:00+00:00</published><updated>2024-05-29T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>ta [...]
<p>Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Solr project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, rich document handling, and …</p></summary><content type="html"><p>The Solr PMC is pleased to announce the release of Apache Solr 9.6.1.</p>
<p>Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Solr project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, database integration, rich document handling, and geospatial search. Solr is highly scalable, providing fault tolerant distributed search and indexing, and powers the search and navigation features of many of the world's largest internet sites.</p>
<p>Solr 9.6.1 is available for immediate download at:</p>
@@ -252,11 +252,11 @@
</code></pre></div>
<p><em>Windows:</em></p>
-<div class="codehilite"><pre><span></span><code>SET <span class="nv">SOLR_OPTS</span><span class="o">=</span>-XX:CompileCommand<span class="o">=</span>exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put
+<div class="codehilite"><pre><span></span><code>SET<span class="w"> </span><span class="nv">SOLR_OPTS</span><span class="o">=</span>-XX:CompileCommand<span class="o">=</span>exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put
</code></pre></div>
<p>Alternatively, you can inject the same flag with the <code>-a</code> argument, e.g:</p>
-<div class="codehilite"><pre><span></span><code>bin/solr -a <span class="s2">&quot;-XX:CompileCommand=exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put&quot;</span>
+<div class="codehilite"><pre><span></span><code>bin/solr<span class="w"> </span>-a<span class="w"> </span><span class="s2">&quot;-XX:CompileCommand=exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put&quot;</span>
</code></pre></div>
<p>If you run Solr 9 with the official Docker image, we have already pushed an updated Docker image to Docker Hub that will inject the flag for you.
@@ -2686,419 +2686,4 @@ data values which allows an attacker to execute javascript by executing a query
that will be stored and displayed via the 'fieldvaluecache' object.</p>
<p>See the <a href="/docs/4_10_3/changes/Changes.html">CHANGES.txt</a>
file included with the release for a full list of details, and Happy
-Holidays!</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.2 Available</title><link href="/" rel="alternate"></link><published>2014-10-31T00:00:00+00:00</published><updated>2014-10-31T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-10-31:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.2 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.10.2 includes 10 bug fixes,
-as well as Lucene 4.10.2 and its 2 bug fixes.</p>
-<p>See the <a href="/docs/4_10_2/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details, and Happy
-Halloween!</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.1 Available</title><link href="/" rel="alternate"></link><published>2014-09-29T00:00:00+00:00</published><updated>2014-09-29T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-29:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.10.1 includes 6 bug fixes,
-as well as Lucene 4.10.1 and its 7 bug fixes.</p>
-<p>See the <a href="/docs/4_10_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.9.1 Available</title><link href="/" rel="alternate"></link><published>2014-09-22T00:00:00+00:00</published><updated>2014-09-22T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-22:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.9.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.9.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.9.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.9.1 includes 2 bug fixes,
-as well as Lucene 4.9.1 and its 7 bug fixes.</p>
-<p>See the <a href="/docs/4_9_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Ref Guide for 4.10 Available</title><link href="/" rel="alternate"></link><published>2014-09-07T00:00:00+00:00</published><updated>2014-09-07T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-07:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that there is a new version of the
-Solr Reference Guide for Solr 4.10.</p>
-<p>The 511 page PDF serves as the definitive user's manual for Solr 4.10. It
-can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version of the
-Solr Reference Guide for Solr 4.10.</p>
-<p>The 511 page PDF serves as the definitive user's manual for Solr 4.10. It
-can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a>.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.10.0 Available</title><link href="/" rel="alternate"></link><published>2014-09-03T00:00:00+00:00</published><updated>2014-09-03T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-09-03:/</id><summary type="html">&l [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.10.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.10.0 is available for immediate download at:
- <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/4_10_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<p>Solr 4.10.0 Release Highlights:</p>
-<ul>
-<li>
-<p>This release upgrades Solr Cell's (contrib/extraction) dependency
- on Apache POI to mitigate
- <a href="#18-august-2014-recommendation-to-update-apache-poi-in-apache-solr-480-481-and-490-installations">2 security vulnerabilities</a>.</p>
-</li>
-<li>
-<p>Scripts for starting, stopping, and running Solr examples</p>
-</li>
-<li>
-<p>Distributed query support for facet.pivot</p>
-</li>
-<li>
-<p>Interval Faceting for Doc Values fields</p>
-</li>
-<li>
-<p>New "terms" QParser for efficiently filtering documents by a list of values</p>
-</li>
-</ul></content><category term="solr/news"></category></entry><entry><title>Recommendation to update Apache POI in Apache Solr 4.8.0, 4.8.1, and 4.9.0 installations</title><link href="/" rel="alternate"></link><published>2014-08-18T00:00:00+00:00</published><updated>2014-08-18T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-08-18:/</id><summary type="html"><p>Apache Solr versions 4.8.0, 4.8.1, 4.9.0 bundle Apache POI 3.10-beta2 with its b [...]
-This version (and all previous ones) of Apache POI are vulnerable to the following issues:</p>
-<h3 id="cve-2014-3529-xml-external-entity-xxe-problem-in-apache-pois-openxml-parser">CVE-2014-3529: XML External Entity (XXE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Information disclosure …</em></p></summary><content type="html"><p>Apache Solr versions 4.8.0, 4.8.1, 4.9.0 bundle Apache POI 3.10-beta2 with its binary release tarball.
-This version (and all previous ones) of Apache POI are vulnerable to the following issues:</p>
-<h3 id="cve-2014-3529-xml-external-entity-xxe-problem-in-apache-pois-openxml-parser">CVE-2014-3529: XML External Entity (XXE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Information disclosure:</em> Apache POI uses Java's XML components to parse OpenXML files produced by Microsoft Office products (DOCX, XLSX, PPTX,...).
-Applications that accept such files from end-users are vulnerable to XML External Entity (XXE) attacks, which allows remote attackers to bypass
-security restrictions and read arbitrary files via a crafted OpenXML document that provides an XML external entity declaration in conjunction
-with an entity reference.</p>
-<h3 id="cve-2014-3574-xml-entity-expansion-xee-problem-in-apache-pois-openxml-parser">CVE-2014-3574: XML Entity Expansion (XEE) problem in Apache POI's OpenXML parser</h3>
-<p><em>Denial of service:</em> Apache POI uses Java's XML components and Apache Xmlbeans to parse OpenXML files produced by Microsoft Office products
-(DOCX, XLSX, PPTX,...). Applications that accept such files from end-users are vulnerable to XML Entity Expansion (XEE) attacks ("XML bombs"),
-which allows remote hackers to consume large amounts of CPU resources.</p>
-<p><strong>The Apache POI PMC released a bugfix version (3.10.1) today.</strong></p>
-<p>Solr users are affected by these issues, if they enable the "Apache Solr Content Extraction Library (Solr Cell)"
-contrib module from the folder "contrib/extraction" of the release tarball.</p>
-<p>Users of Apache Solr are strongly advised to keep the module disabled if they don't use it.
-Alternatively, users of Apache Solr 4.8.0, 4.8.1, or 4.9.0 can update the affected libraries by
-replacing the vulnerable JAR files in the distribution folder. Users of previous versions have
-to update their Solr release first, patching older versions is impossible.</p>
-<h3 id="to-replace-the-vulnerable-jar-files-follow-these-steps">To replace the vulnerable JAR files follow these steps:</h3>
-<ul>
-<li>
-<p>Download the <a href="http://poi.apache.org/download.html#POI-3.10.1">Apache POI 3.10.1</a> binary release.</p>
-</li>
-<li>
-<p>Unzip the archive.</p>
-</li>
-<li>
-<p>Delete the following files in your "solr-4.X.X/contrib/extraction/lib" folder:</p>
-<ul>
-<li>poi-3.10-beta2.jar</li>
-<li>poi-ooxml-3.10-beta2.jar</li>
-<li>poi-ooxml-schemas-3.10-beta2.jar</li>
-<li>poi-scratchpad-3.10-beta2.jar</li>
-<li>xmlbeans-2.3.0.jar</li>
-</ul>
-</li>
-<li>
-<p>Copy the following files from the base folder of the Apache POI distribution to the "solr-4.X.X/contrib/extraction/lib" folder:</p>
-<ul>
-<li>poi-3.10.1-20140818.jar</li>
-<li>poi-ooxml-3.10.1-20140818.jar</li>
-<li>poi-ooxml-schemas-3.10.1-20140818.jar</li>
-<li>poi-scratchpad-3.10.1-20140818.jar</li>
-</ul>
-</li>
-<li>
-<p>Copy "xmlbeans-2.6.0.jar" from POI's "ooxml-lib/" folder to the "solr-4.X.X/contrib/extraction/lib" folder.</p>
-</li>
-<li>
-<p>Verify that the "solr-4.X.X/contrib/extraction/lib" no longer contains any files with version number "3.10-beta2".</p>
-</li>
-<li>
-<p>Verify that the folder contains one xmlbeans JAR file with version 2.6.0.</p>
-</li>
-</ul>
-<p>If you just want to disable extraction of Microsoft Office documents, delete the files above and don't replace them.
-"Solr Cell" will automatically detect this and disable Microsoft Office document extraction.</p>
-<p>Coming versions of Apache Solr will have the updated libraries bundled.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Ref Guide for 4.9 Available</title><link href="/" rel="alternate"></link><published>2014-06-30T00:00:00+00:00</published><updated>2014-06-30T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-06-30:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that there i [...]
-of the Solr Reference Guide for Solr 4.9.</p>
-<p>The 408 page PDF serves as the definitive user's manual for Solr 4.9.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version
-of the Solr Reference Guide for Solr 4.9.</p>
-<p>The 408 page PDF serves as the definitive user's manual for Solr 4.9.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a>.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.9.0 Available</title><link href="/" rel="alternate"></link><published>2014-06-25T00:00:00+00:00</published><updated>2014-06-25T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-06-25:/</id><summary type="html">< [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.9.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.9.0 is available for immediate download at:
- <a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/4_9_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<p>Solr 4.9.0 Release Highlights:</p>
-<ul>
-<li>
-<p>Numerous optimizations for doc values search-time performance</p>
-</li>
-<li>
-<p>Allow a client application to request the minium achieved replication
- factor for an update request (single or batch) by sending an optional
- parameter "min_rf".</p>
-</li>
-<li>
-<p>Query re-ranking support with the new ReRankingQParserPlugin.</p>
-</li>
-<li>
-<p>A new [child ...] DocTransformer for optionally including Block-Join
- decendent documents inline in the results of a search.</p>
-</li>
-<li>
-<p>A new (default) Lucene49NormsFormat to better compress certain cases
- such as very short fields.</p>
-</li>
-</ul></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.8.1 Available</title><link href="/" rel="alternate"></link><published>2014-05-20T00:00:00+00:00</published><updated>2014-05-20T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-05-20:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.8.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.8.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.8.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.8.1 includes 10 bug fixes,
-as well as Lucene 4.8.1 and its bug fixes.</p>
-<p>See the <a href="/docs/4_8_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Ref Guide for 4.8 Available</title><link href="/" rel="alternate"></link><published>2014-05-02T00:00:00+00:00</published><updated>2014-05-02T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-05-02:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that there is a new version
-of the Solr Reference Guide available for Solr 4.8.</p>
-<p>The 396 page PDF serves as the definitive user's manual for Solr 4.8.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version
-of the Solr Reference Guide available for Solr 4.8.</p>
-<p>The 396 page PDF serves as the definitive user's manual for Solr 4.8.
-It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.8.0 Available</title><link href="/" rel="alternate"></link><published>2014-04-28T00:00:00+00:00</published><updated>2014-04-28T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-04-28:/</id><summary type="html">< [...]
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.8.0</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.8.0 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>See the <a href="/docs/4_8_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<h3 id="solr-480-release-highlights">Solr 4.8.0 Release Highlights:</h3>
-<ul>
-<li>
-<p>Apache Solr now requires Java 7 or greater (recommended is
- Oracle Java 7 or OpenJDK 7, minimum update 55; earlier versions
- have known JVM bugs affecting Solr).</p>
-</li>
-<li>
-<p>Apache Solr is fully compatible with Java 8.</p>
-</li>
-<li>
-<p><code class="inline">&lt;fields&gt;</code> and <code class="inline">&lt;types&gt;</code> tags have been deprecated from schema.xml.
- There is no longer any reason to keep them in the schema file,
- they may be safely removed. This allows intermixing of <code class="inline">&lt;fieldType&gt;</code>,
- <code class="inline">&lt;field&gt;</code> and <code class="inline">&lt;copyField&gt;</code> definitions if desired.</p>
-</li>
-<li>
-<p>The new {!complexphrase} query parser supports wildcards, ORs etc.
- inside Phrase Queries.</p>
-</li>
-<li>
-<p>New Collections API CLUSTERSTATUS action reports the status of
- collections, shards, and replicas, and also lists collection
- aliases and cluster properties.</p>
-</li>
-<li>
-<p>Added managed synonym and stopword filter factories, which enable
- synonym and stopword lists to be dynamically managed via REST API.</p>
-</li>
-<li>
-<p>JSON updates now support nested child documents, enabling {!child}
- and {!parent} block join queries.</p>
-</li>
-<li>
-<p>Added ExpandComponent to expand results collapsed by the
- CollapsingQParserPlugin, as well as the parent/child relationship
- of nested child documents.</p>
-</li>
-<li>
-<p>Long-running Collections API tasks can now be executed
- asynchronously; the new REQUESTSTATUS action provides status.</p>
-</li>
-<li>
-<p>Added a hl.qparser parameter to allow you to define a query parser
- for hl.q highlight queries.</p>
-</li>
-<li>
-<p>In Solr single-node mode, cores can now be created using named
- configsets.</p>
-</li>
-<li>
-<p>New DocExpirationUpdateProcessorFactory supports computing an
- expiration date for documents from the "TTL" expression, as well as
- automatically deleting expired documents on a periodic basis.</p>
-</li>
-</ul>
-<p>Solr 4.8.0 also includes many other new features as well as numerous
-optimizations and bugfixes of the corresponding
-<a href="/core/4_8_0/">Apache Lucene</a> release.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.7.2 Available</title><link href="/" rel="alternate"></link><published>2014-04-15T00:00:00+00:00</published><updated>2014-04-15T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-04-15:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.2</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.7.2 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.7.2 includes 2 bug fixes,
-as well as Lucene 4.7.2 and its bug fixes.</p>
-<p>See the <a href="/docs/4_7_2/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.7.1 Available</title><link href="/" rel="alternate"></link><published>2014-04-02T00:00:00+00:00</published><updated>2014-04-02T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-04-02:/</id><summary type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of Apache Solr 4.7.1</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.7.1 is available for immediate download at:
-<a href="https://solr.apache.org/downloads.html">https://solr.apache.org/downloads.html</a></p>
-<p>Solr 4.7.1 includes 28 bug fixes and one new configuration setting,
-as well as Lucene 4.7.1 and its bug fixes.</p>
-<p>See the <a href="/docs/4_7_1/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.8 will require Java 7</title><link href="/" rel="alternate"></link><published>2014-03-12T00:00:00+00:00</published><updated>2014-03-12T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-03-12:/</id><summary type="html"><p>The Apache Solr committers decided with a large majority on the vote to requ [...]
-<p>The next release will also contain some improvements for Java 7:</p>
-<ul>
-<li>
-<p>Better file handling (especially on Windows) in the directory implementations. Files can …</p></li></ul></summary><content type="html"><p>The Apache Solr committers decided with a large majority on the vote to require <strong>Java 7</strong> for the next minor release of Apache Solr (version 4.8)!</p>
-<p>The next release will also contain some improvements for Java 7:</p>
-<ul>
-<li>
-<p>Better file handling (especially on Windows) in the directory implementations. Files can now be deleted on windows, although the index is still open - like it was always possible on Unix environments (delete on last close semantics).</p>
-</li>
-<li>
-<p>Speed improvements in sorting comparators: Sorting now uses Java 7's own comparators for integer and long sorts, which are highly optimized by the Hotspot VM.</p>
-</li>
-</ul>
-<p>If you want to stay up-to-date with Lucene and Solr, you should upgrade your infrastructure to Java 7.
-Please be aware that you must use at least use Java 7u1.
-The recommended version at the moment is Java 7u25. Later versions like 7u40, 7u45,... have a bug causing index corrumption.
-Ideally use the Java 7u60 prerelease, which has fixed this bug. Once 7u60 is out, this will be the recommended version.
-In addition, there is no more Oracle/BEA JRockit available for Java 7, use the official Oracle Java 7.
-JRockit was never working correctly with Lucene/Solr (causing index corrumption), so this should not be an issue.
-Please also review our list of JVM bugs: <a href="http://wiki.apache.org/lucene-java/JavaBugs">http://wiki.apache.org/lucene-java/JavaBugs</a></p>
-<p><em>EDIT (as of 15 April 2014):</em> The recently released Java 7u55 fixes the above bug causing index corrumption.
-This version is now the recommended version for running Apache Solr.</p></content><category term="solr/news"></category></entry><entry><title>Apache Solr Ref Guide for 4.7 Available</title><link href="/" rel="alternate"></link><published>2014-03-05T00:00:00+00:00</published><updated>2014-03-05T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-03-05:/</id><summary type="html"><p>The Lucene PMC is pleased to announce that there is a new vers [...]
-<p>The 395 page PDF serves as the definitive user's manual for Solr 4.7. It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org …</a></p></summary><content type="html"><p>The Lucene PMC is pleased to announce that there is a new version of the Solr Reference Guide available for Solr 4.7.</p>
-<p>The 395 page PDF serves as the definitive user's manual for Solr 4.7. It can be downloaded from the Apache mirror network:
-<a href="https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/">https://www.apache.org/dyn/closer.lua/lucene/solr/ref-guide/</a></p></content><category term="solr/news"></category></entry><entry><title>Apache Solr 4.7.0 Available</title><link href="/" rel="alternate"></link><published>2014-02-26T00:00:00+00:00</published><updated>2014-02-26T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2014-02-26:/</id><summary type="html">< [...]
-Apache Solr 4.7</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word …</p></summary><content type="html"><p>The Lucene PMC is pleased to announce the release of
-Apache Solr 4.7</p>
-<p>Solr is the popular, blazing fast, open source NoSQL search platform
-from the Apache Lucene project. Its major features include powerful
-full-text search, hit highlighting, faceted search, dynamic
-clustering, database integration, rich document (e.g., Word, PDF)
-handling, and geospatial search. Solr is highly scalable, providing
-fault tolerant distributed search and indexing, and powers the search
-and navigation features of many of the world's largest internet sites.</p>
-<p>Solr 4.7 is available for immediate download at:
-<a href="https://solr.apache.org/mirrors-solr-latest-redir.html">https://solr.apache.org/mirrors-solr-latest-redir.html</a></p>
-<p>See the <a href="/docs/4_7_0/changes/Changes.html">CHANGES.txt</a>
-file included with the release for a full list of details.</p>
-<h3 id="solr-47-release-highlights">Solr 4.7 Release Highlights:</h3>
-<ul>
-<li>
-<p>A new migrate collection API to split all documents with a route key
- into another collection.</p>
-</li>
-<li>
-<p>Added support for tri-level compositeId routing.</p>
-</li>
-<li>
-<p>Admin UI - Added a new Files conf directory browser/file viewer.</p>
-</li>
-<li>
-<p>Add a QParserPlugin for Lucene's SimpleQueryParser.</p>
-</li>
-<li>
-<p>Suggest improvements: a new SuggestComponent that fully utilizes the
- Lucene suggester module; queries can now use multiple suggesters;
- Lucene's FreeTextSuggester and BlendedInfixSuggester are now supported.</p>
-</li>
-<li>
-<p>New cursorMark request param for efficient deep paging of sorted
- result sets. See <a href="http://s.apache.org/cursorpagination">http://s.apache.org/cursorpagination</a></p>
-</li>
-<li>
-<p>Add a Solr contrib that allows for building Solr indexes via Hadoop's
- MapReduce.</p>
-</li>
-<li>
-<p>Upgrade to Spatial4j 0.4. Various new options are now exposed
- automatically for an RPT field type. See Spatial4j CHANGES &amp; javadocs.
- <a href="https://github.com/spatial4j/spatial4j/blob/master/CHANGES.md">https://github.com/spatial4j/spatial4j/blob/master/CHANGES.md</a></p>
-</li>
-<li>
-<p>SSL support for SolrCloud.</p>
-</li>
-</ul>
-<p>Solr 4.7 also includes many other new features as well as numerous
- optimizations and bugfixes.</p></content><category term="solr/news"></category></entry></feed>
\ No newline at end of file
+Holidays!</p></content><category term="solr/news"></category></entry></feed>
\ No newline at end of file
diff --git a/output/feeds/solr/operator/news.atom.xml b/output/feeds/solr/operator/news.atom.xml
index 7d318e19f..3e71932c2 100644
--- a/output/feeds/solr/operator/news.atom.xml
+++ b/output/feeds/solr/operator/news.atom.xml
@@ -1,5 +1,5 @@
<?xml version="1.0" encoding="utf-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr - solr/operator/news</title><link href="/" rel="alternate"></link><link href="/feeds/solr/operator/news.atom.xml" rel="self"></link><id>/</id><updated>2024-04-12T00:00:00+00:00</updated><subtitle></subtitle><subtitle></subtitle><entry><title>Apache Solr Operator™ v0.8.1 available</title><link href="/apache-solr-operatortm-v081-available.html" rel="alternate"></link><published>2024-04-12T00:00:00+00:00</published><updated>2024-0 [...]
+<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr - solr/operator/news</title><link href="/" rel="alternate"></link><link href="/feeds/solr/operator/news.atom.xml" rel="self"></link><id>/</id><updated>2024-04-12T00:00:00+00:00</updated><entry><title>Apache Solr Operator™ v0.8.1 available</title><link href="/apache-solr-operatortm-v081-available.html" rel="alternate"></link><published>2024-04-12T00:00:00+00:00</published><updated>2024-04-12T00:00:00+00:00</updated><author><name [...]
<p>The Apache Solr Operator is a safe and easy way of managing a Solr ecosystem in Kubernetes.</p>
<p>This release contains numerous bug fixes, optimizations, and improvements, some of which are highlighted below …</p></summary><content type="html"><p>The Apache Solr PMC is pleased to announce the release of the Apache Solr Operator v0.8.1.</p>
<p>The Apache Solr Operator is a safe and easy way of managing a Solr ecosystem in Kubernetes.</p>
diff --git a/output/feeds/solr/security.atom.xml b/output/feeds/solr/security.atom.xml
index d3356ba70..e67938413 100644
--- a/output/feeds/solr/security.atom.xml
+++ b/output/feeds/solr/security.atom.xml
@@ -1,5 +1,5 @@
<?xml version="1.0" encoding="utf-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr - solr/security</title><link href="/" rel="alternate"></link><link href="/feeds/solr/security.atom.xml" rel="self"></link><id>/</id><updated>2024-04-12T00:00:00+00:00</updated><subtitle></subtitle><subtitle></subtitle><entry><title>CVE-2024-31391: Solr-Operator liveness and readiness probes may leak basic auth credentials</title><link href="/cve-2024-31391-solr-operator-liveness-and-readiness-probes-may-leak-basic-auth-credenti [...]
+<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Solr - solr/security</title><link href="/" rel="alternate"></link><link href="/feeds/solr/security.atom.xml" rel="self"></link><id>/</id><updated>2024-04-12T00:00:00+00:00</updated><entry><title>CVE-2024-31391: Solr-Operator liveness and readiness probes may leak basic auth credentials</title><link href="/cve-2024-31391-solr-operator-liveness-and-readiness-probes-may-leak-basic-auth-credentials.html" rel="alternate"></link><publishe [...]
Moderate</p>
<p><strong>Versions Affected:</strong><br>
Solr Operator 0.3.0 to 0.8.0</p>
@@ -180,7 +180,7 @@ Apache Calcite has a vulnerability, CVE-2022-39135, that is exploitable in Apach
An XXE attack may lead to the disclosure of confidential data, denial of service, server side request forgery (SSRF), port scanning from the Solr node, and other system impacts.</p>
<p><strong>Mitigation:</strong><br>
Most Solr installations don’t make use of the SQL functionality. For such users, the standard Solr security advice of using a firewall should be adequate. Nonetheless, the functionality can be disabled. As of Solr 9, it has been modularized and thus became opt-in, so nothing is needed for Solr 9 users that don’t use it. Users <em>not</em> using SolrCloud can’t use the functionality at all. For other users that wish to disable it, you must register a request handler that [...]
-<div class="codehilite"><pre><span></span><code><span class="err"> &lt;requestHandler name=&quot;/sql&quot; class=&quot;solr.NotFoundRequestHandler&quot;/&gt;</span>
+<div class="codehilite"><pre><span></span><code> &lt;requestHandler name=&quot;/sql&quot; class=&quot;solr.NotFoundRequestHandler&quot;/&gt;
</code></pre></div>
<p>Users needing this SQL functionality are forced to upgrade to Solr 9.1. If Solr 8.11.3 is released, then it will be an option as well. Simply replacing Calcite and other JAR files may mostly work but could fail depending on the particulars of the query. Users interested in this or in patching their own versions of Solr should examine SOLR-16421 for a source patch.</p>
@@ -484,40 +484,40 @@ Matei "Mal" Badanoiu</p>
<ul>
<li><a href="https://issues.apache.org/jira/browse/SOLR-13750">https://issues.apache.org/jira/browse/SOLR-13750</a></li>
<li><a href="https://cwiki.apache.org/confluence/display/SOLR/SolrSecurity">https://cwiki.apache.org/confluence/display/SOLR/SolrSecurity</a></li>
-</ul></content><category term="solr/security"></category></entry><entry><title>[ANNOUNCE] 8.1.1 and 8.2.0 users check ENABLE_REMOTE_JMX_OPTS setting</title><link href="/announce-811-and-820-users-check-enable_remote_jmx_opts-setting.html" rel="alternate"></link><published>2019-08-14T00:00:00+00:00</published><updated>2019-08-14T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2019-08-14:/announce-811-and-820-users-check-enable_remote_jmx_opts-settin [...]
+</ul></content><category term="solr/security"></category></entry><entry><title>[ANNOUNCE] 8.1.1 and 8.2.0 users check ENABLE_REMOTE_JMX_OPTS setting</title><link href="/announce-811-and-820-users-check-enable_remote_jmx_opts-setting.html" rel="alternate"></link><published>2019-08-14T00:00:00+00:00</published><updated>2019-08-14T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2019-08-14:/announce-811-and-820-users-check-enable_remote_jmx_opts-settin [...]
-<span class="n">Versions</span> <span class="n">Affected</span><span class="o">:</span>
-<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and</span> <span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span> <span class="k">for</span> <span class="n">Linux</span>
+<span class="n">Versions</span><span class="w"> </span><span class="n">Affected</span><span class="o">:</span>
+<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">Linux</span>
<span class="n">Description</span><span class="o">:</span>
-<span class="n">It</span> <span class="n">has</span> <span class="n">been</span> <span class="n">discovered</span> <span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">that</span> <span class="n">the</span> <span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and&l [...]
-<span class="n">setting</span> <span class="k">for</span> <span class="n">the</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span> <span class="n">setting</span> <span class="k">in</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span>& [...]
-<span class="n">shipping</span> <span class="k">with</span> <span class="n">Solr</span><span class="o">.</span>
+<span class="n">It</span><span class="w"> </span><span class="n">has</span><span class="w"> </span><span class="n">been</span><span class="w"> </span><span class="n">discovered</span><span class="w"> </span><span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">that</span><s [...]
+<span class="n">setting</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="w"> </span><span class="n">setting</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n"> [...]
+<span class="n">shipping</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">Solr</span><span class="o">.</span>
-<span class="n">Windows</span> <span class="n">users …</span></code></pre></div></summary><content type="html"><div class="codehilite"><pre><span></span><code><span class="n">Severity</span><span class="o">:</span> <span class="n">Low</span>
+<span class="n">Windows</span><span class="w"> </span><span class="n">users …</span></code></pre></div></summary><content type="html"><div class="codehilite"><pre><span></span><code><span class="n">Severity</span><span class="o">:</span><span class="w"> </span><span class="n">Low</span>
-<span class="n">Versions</span> <span class="n">Affected</span><span class="o">:</span>
-<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and</span> <span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span> <span class="k">for</span> <span class="n">Linux</span>
+<span class="n">Versions</span><span class="w"> </span><span class="n">Affected</span><span class="o">:</span>
+<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">Linux</span>
<span class="n">Description</span><span class="o">:</span>
-<span class="n">It</span> <span class="n">has</span> <span class="n">been</span> <span class="n">discovered</span> <span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">that</span> <span class="n">the</span> <span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and&l [...]
-<span class="n">setting</span> <span class="k">for</span> <span class="n">the</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span> <span class="n">setting</span> <span class="k">in</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span>& [...]
-<span class="n">shipping</span> <span class="k">with</span> <span class="n">Solr</span><span class="o">.</span>
+<span class="n">It</span><span class="w"> </span><span class="n">has</span><span class="w"> </span><span class="n">been</span><span class="w"> </span><span class="n">discovered</span><span class="w"> </span><span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">that</span><s [...]
+<span class="n">setting</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="w"> </span><span class="n">setting</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n"> [...]
+<span class="n">shipping</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">Solr</span><span class="o">.</span>
-<span class="n">Windows</span> <span class="n">users</span> <span class="n">and</span> <span class="n">users</span> <span class="k">with</span> <span class="n">custom</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span> <span class="n">files</span> <span class="n [...]
+<span class="n">Windows</span><span class="w"> </span><span class="n">users</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">users</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">custom</span><span class="w"> </span><span class="n">solr</span& [...]
-<span class="n">If</span> <span class="n">you</span> <span class="n">are</span> <span class="n">using</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span> <span class="n">file</span> <span class="n">fro [...]
-<span class="n">JMX</span> <span class="n">monitoring</span> <span class="n">will</span> <span class="n">be</span> <span class="n">enabled</span> <span class="n">and</span> <span class="n">exposed</span> <span class="n">on</span> <span class="n">JMX_PORT</span> <span class="o">(</span><span class="k">default</span> <span class="o">=</span> <sp [...]
-<span class="n">without</span> <span class="n">any</span> <span class="n">authentication</span><span class="o">.</span> <span class="n">So</span> <span class="k">if</span> <span class="n">your</span> <span class="n">firewalls</span> <span class="n">allows</span> <span class="n">inbound</span> <span class="n">traffic</span> <span class="n">on</span>
-<span class="n">JMX_PORT</span><span class="o">,</span> <span class="n">then</span> <span class="n">anyone</span> <span class="k">with</span> <span class="n">network</span> <span class="n">access</span> <span class="n">to</span> <span class="n">your</span> <span class="n">Solr</span> <span class="n">nodes</span> <span class="n">will</span> <sp [...]
-<span class="n">access</span> <span class="n">monitoring</span> <span class="n">data</span> <span class="n">exposed</span> <span class="n">over</span> <span class="n">JMX</span><span class="o">.</span>
+<span class="n">If</span><span class="w"> </span><span class="n">you</span><span class="w"> </span><span class="n">are</span><span class="w"> </span><span class="n">using</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="k">default</span><span class="w"> </span><span class="n">solr</span>< [...]
+<span class="n">JMX</span><span class="w"> </span><span class="n">monitoring</span><span class="w"> </span><span class="n">will</span><span class="w"> </span><span class="n">be</span><span class="w"> </span><span class="n">enabled</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">exposed</spa [...]
+<span class="n">without</span><span class="w"> </span><span class="n">any</span><span class="w"> </span><span class="n">authentication</span><span class="o">.</span><span class="w"> </span><span class="n">So</span><span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="n">your</span><span class="w"> </span&g [...]
+<span class="n">JMX_PORT</span><span class="o">,</span><span class="w"> </span><span class="n">then</span><span class="w"> </span><span class="n">anyone</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">network</span><span class="w"> </span><span class="n">access</span><span class="w"> </spa [...]
+<span class="n">access</span><span class="w"> </span><span class="n">monitoring</span><span class="w"> </span><span class="n">data</span><span class="w"> </span><span class="n">exposed</span><span class="w"> </span><span class="n">over</span><span class="w"> </span><span class="n">JMX</span><span class="o">.</span>
<span class="n">Mitigation</span><span class="o">:</span>
-<span class="n">Edit</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="o">,</span> <span class="kd">set</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="o">=</span><span class="kc">false</span> <span class="n">and</span> <span class [...]
-<span class="n">Alternatively</span> <span class="n">wait</span> <span class="k">for</span> <span class="n">the</span> <span class="n">future</span> <span class="mf">8.3</span><span class="o">.</span><span class="mi">0</span> <span class="n">release</span> <span class="n">and</span> <span class="n">upgrade</span><span class="o">.</span>
+<span class="n">Edit</span><span class="w"> </span><span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="o">,</span><span class="w"> </span><span class="kd">set</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="o">=< [...]
+<span class="n">Alternatively</span><span class="w"> </span><span class="n">wait</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">future</span><span class="w"> </span><span class="mf">8.3</span><span class="o">.</span><span class="mi">0</span [...]
<span class="n">References</span><span class="o">:</span>
-<span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">https</span><span class="o">://</span><span class="n">issues</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="sr">/jira/browse/</span><span class="n">SOLR</span><span class="o"> [...]
+<span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">https</span><span class="o">://</span><span class="n">issues</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="sr">/jira/browse/</span><span class="n">SOLR [...]
</code></pre></div></content><category term="solr/security"></category></entry><entry><title>CVE-2019-0193: Apache Solr, Remote Code Execution via DataImportHandler</title><link href="/cve-2019-0193-apache-solr-remote-code-execution-via-dataimporthandler.html" rel="alternate"></link><published>2019-07-31T00:00:00+00:00</published><updated>2019-07-31T00:00:00+00:00</updated><author><name>Solr Developers</name></author><id>tag:None,2019-07-31:/cve-2019-0193-apache-solr-re [...]
<p><strong>Vendor:</strong><br>
The Apache Software Foundation</p>
diff --git a/output/images/solr/book_solr_search_patterns.jpg b/output/images/solr/book_solr_search_patterns.jpg
old mode 100755
new mode 100644
diff --git a/output/news.html b/output/news.html
index 11f23ebeb..f818ab280 100644
--- a/output/news.html
+++ b/output/news.html
@@ -551,7 +551,7 @@ Apache Calcite has a vulnerability, CVE-2022-39135, that is exploitable in Apach
An XXE attack may lead to the disclosure of confidential data, denial of service, server side request forgery (SSRF), port scanning from the Solr node, and other system impacts.</p>
<p><strong>Mitigation:</strong><br>
Most Solr installations don’t make use of the SQL functionality. For such users, the standard Solr security advice of using a firewall should be adequate. Nonetheless, the functionality can be disabled. As of Solr 9, it has been modularized and thus became opt-in, so nothing is needed for Solr 9 users that don’t use it. Users <em>not</em> using SolrCloud can’t use the functionality at all. For other users that wish to disable it, you must register a request handler that masks the un [...]
-<div class="codehilite"><pre><span></span><code><span class="err"> <requestHandler name="/sql" class="solr.NotFoundRequestHandler"/></span>
+<div class="codehilite"><pre><span></span><code> <requestHandler name="/sql" class="solr.NotFoundRequestHandler"/>
</code></pre></div>
<p>Users needing this SQL functionality are forced to upgrade to Solr 9.1. If Solr 8.11.3 is released, then it will be an option as well. Simply replacing Calcite and other JAR files may mostly work but could fail depending on the particulars of the query. Users interested in this or in patching their own versions of Solr should examine SOLR-16421 for a source patch.</p>
@@ -589,11 +589,11 @@ CVE - <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-39135">CVE-2022-39135</
</code></pre></div>
<p><em>Windows:</em></p>
-<div class="codehilite"><pre><span></span><code>SET <span class="nv">SOLR_OPTS</span><span class="o">=</span>-XX:CompileCommand<span class="o">=</span>exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put
+<div class="codehilite"><pre><span></span><code>SET<span class="w"> </span><span class="nv">SOLR_OPTS</span><span class="o">=</span>-XX:CompileCommand<span class="o">=</span>exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put
</code></pre></div>
<p>Alternatively, you can inject the same flag with the <code>-a</code> argument, e.g:</p>
-<div class="codehilite"><pre><span></span><code>bin/solr -a <span class="s2">"-XX:CompileCommand=exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put"</span>
+<div class="codehilite"><pre><span></span><code>bin/solr<span class="w"> </span>-a<span class="w"> </span><span class="s2">"-XX:CompileCommand=exclude,com.github.benmanes.caffeine.cache.BoundedLocalCache::put"</span>
</code></pre></div>
<p>If you run Solr 9 with the official Docker image, we have already pushed an updated Docker image to Docker Hub that will inject the flag for you.
@@ -1436,30 +1436,30 @@ Matei "Mal" Badanoiu</p>
<h2 id="announce-811-and-820-users-check-enable_remote_jmx_opts-setting">14 August 2019, [ANNOUNCE] 8.1.1 and 8.2.0 users check ENABLE_REMOTE_JMX_OPTS setting
<a class="headerlink" href="#announce-811-and-820-users-check-enable_remote_jmx_opts-setting" title="Permanent link">¶</a>
</h2>
- <div class="codehilite"><pre><span></span><code><span class="n">Severity</span><span class="o">:</span> <span class="n">Low</span>
+ <div class="codehilite"><pre><span></span><code><span class="n">Severity</span><span class="o">:</span><span class="w"> </span><span class="n">Low</span>
-<span class="n">Versions</span> <span class="n">Affected</span><span class="o">:</span>
-<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and</span> <span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span> <span class="k">for</span> <span class="n">Linux</span>
+<span class="n">Versions</span><span class="w"> </span><span class="n">Affected</span><span class="o">:</span>
+<span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">Linux</span>
<span class="n">Description</span><span class="o">:</span>
-<span class="n">It</span> <span class="n">has</span> <span class="n">been</span> <span class="n">discovered</span> <span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">that</span> <span class="n">the</span> <span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span> <span class="n">and</span> <span class="mf">8.2</span><span class="o">.</span><span class="mi">0</span> <span class="n">releases</span> <span class="n">contain</span> <spa [...]
-<span class="n">setting</span> <span class="k">for</span> <span class="n">the</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span> <span class="n">setting</span> <span class="k">in</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span> <span class="n">file</span>
-<span class="n">shipping</span> <span class="k">with</span> <span class="n">Solr</span><span class="o">.</span>
+<span class="n">It</span><span class="w"> </span><span class="n">has</span><span class="w"> </span><span class="n">been</span><span class="w"> </span><span class="n">discovered</span><span class="w"> </span><span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">that</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="mf">8.1</span><span class="o">.</span><span class="mi">1</span><span class [...]
+<span class="n">setting</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="w"> </span><span class="n">setting</span><span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="k">default</span><span class="w"> </span><span class="n">solr</span><span class="o">.</span><span class [...]
+<span class="n">shipping</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">Solr</span><span class="o">.</span>
-<span class="n">Windows</span> <span class="n">users</span> <span class="n">and</span> <span class="n">users</span> <span class="k">with</span> <span class="n">custom</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span> <span class="n">files</span> <span class="n">are</span> <span class="n">not</span> <span class="n">affected</span><span class="o">.</span>
+<span class="n">Windows</span><span class="w"> </span><span class="n">users</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">users</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">custom</span><span class="w"> </span><span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="w"> </span><span class="n">files</span>< [...]
-<span class="n">If</span> <span class="n">you</span> <span class="n">are</span> <span class="n">using</span> <span class="n">the</span> <span class="k">default</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span> <span class="n">file</span> <span class="n">from</span> <span class="n">the</span> <span class="n">affected</span> <span class="n">releases</span><span class="o">,</span> <span class="n">then</span>
-<span class="n">JMX</span> <span class="n">monitoring</span> <span class="n">will</span> <span class="n">be</span> <span class="n">enabled</span> <span class="n">and</span> <span class="n">exposed</span> <span class="n">on</span> <span class="n">JMX_PORT</span> <span class="o">(</span><span class="k">default</span> <span class="o">=</span> <span class="mi">18983</span><span class="o">),</span>
-<span class="n">without</span> <span class="n">any</span> <span class="n">authentication</span><span class="o">.</span> <span class="n">So</span> <span class="k">if</span> <span class="n">your</span> <span class="n">firewalls</span> <span class="n">allows</span> <span class="n">inbound</span> <span class="n">traffic</span> <span class="n">on</span>
-<span class="n">JMX_PORT</span><span class="o">,</span> <span class="n">then</span> <span class="n">anyone</span> <span class="k">with</span> <span class="n">network</span> <span class="n">access</span> <span class="n">to</span> <span class="n">your</span> <span class="n">Solr</span> <span class="n">nodes</span> <span class="n">will</span> <span class="n">be</span> <span class="n">able</span> <span class="n">to</span>
-<span class="n">access</span> <span class="n">monitoring</span> <span class="n">data</span> <span class="n">exposed</span> <span class="n">over</span> <span class="n">JMX</span><span class="o">.</span>
+<span class="n">If</span><span class="w"> </span><span class="n">you</span><span class="w"> </span><span class="n">are</span><span class="w"> </span><span class="n">using</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="k">default</span><span class="w"> </span><span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="w"> </span><span class="n">file</span><span cla [...]
+<span class="n">JMX</span><span class="w"> </span><span class="n">monitoring</span><span class="w"> </span><span class="n">will</span><span class="w"> </span><span class="n">be</span><span class="w"> </span><span class="n">enabled</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">exposed</span><span class="w"> </span><span class="n">on</span><span class="w"> </span><span class="n">JMX_PORT</span><span class="w"> </span><span class="o">(</span [...]
+<span class="n">without</span><span class="w"> </span><span class="n">any</span><span class="w"> </span><span class="n">authentication</span><span class="o">.</span><span class="w"> </span><span class="n">So</span><span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="n">your</span><span class="w"> </span><span class="n">firewalls</span><span class="w"> </span><span class="n">allows</span><span class="w"> </span><span class="n">inbound</span><span class="w" [...]
+<span class="n">JMX_PORT</span><span class="o">,</span><span class="w"> </span><span class="n">then</span><span class="w"> </span><span class="n">anyone</span><span class="w"> </span><span class="k">with</span><span class="w"> </span><span class="n">network</span><span class="w"> </span><span class="n">access</span><span class="w"> </span><span class="n">to</span><span class="w"> </span><span class="n">your</span><span class="w"> </span><span class="n">Solr</span><span class="w"> </span> [...]
+<span class="n">access</span><span class="w"> </span><span class="n">monitoring</span><span class="w"> </span><span class="n">data</span><span class="w"> </span><span class="n">exposed</span><span class="w"> </span><span class="n">over</span><span class="w"> </span><span class="n">JMX</span><span class="o">.</span>
<span class="n">Mitigation</span><span class="o">:</span>
-<span class="n">Edit</span> <span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="o">,</span> <span class="kd">set</span> <span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="o">=</span><span class="kc">false</span> <span class="n">and</span> <span class="n">restart</span> <span class="n">Solr</span><span class="o">.</span>
-<span class="n">Alternatively</span> <span class="n">wait</span> <span class="k">for</span> <span class="n">the</span> <span class="n">future</span> <span class="mf">8.3</span><span class="o">.</span><span class="mi">0</span> <span class="n">release</span> <span class="n">and</span> <span class="n">upgrade</span><span class="o">.</span>
+<span class="n">Edit</span><span class="w"> </span><span class="n">solr</span><span class="o">.</span><span class="na">in</span><span class="o">.</span><span class="na">sh</span><span class="o">,</span><span class="w"> </span><span class="kd">set</span><span class="w"> </span><span class="n">ENABLE_REMOTE_JMX_OPTS</span><span class="o">=</span><span class="kc">false</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">restart</span><span class=" [...]
+<span class="n">Alternatively</span><span class="w"> </span><span class="n">wait</span><span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="n">the</span><span class="w"> </span><span class="n">future</span><span class="w"> </span><span class="mf">8.3</span><span class="o">.</span><span class="mi">0</span><span class="w"> </span><span class="n">release</span><span class="w"> </span><span class="n">and</span><span class="w"> </span><span class="n">upgrade< [...]
<span class="n">References</span><span class="o">:</span>
-<span class="o">[</span><span class="mi">1</span><span class="o">]</span> <span class="n">https</span><span class="o">://</span><span class="n">issues</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="sr">/jira/browse/</span><span class="n">SOLR</span><span class="o">-</span><span class="mi">13647</span>
+<span class="o">[</span><span class="mi">1</span><span class="o">]</span><span class="w"> </span><span class="n">https</span><span class="o">://</span><span class="n">issues</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="sr">/jira/browse/</span><span class="n">SOLR</span><span class="o">-</span><span class="mi">13647</span>
</code></pre></div>
<h2 id="cve-2019-0193-apache-solr-remote-code-execution-via-dataimporthandler">31 July 2019, CVE-2019-0193: Apache Solr, Remote Code Execution via DataImportHandler
<a class="headerlink" href="#cve-2019-0193-apache-solr-remote-code-execution-via-dataimporthandler" title="Permanent link">¶</a>
diff --git a/output/operator/articles/explore-v030-gke.html b/output/operator/articles/explore-v030-gke.html
index 1914e27d4..d20f8fb96 100644
--- a/output/operator/articles/explore-v030-gke.html
+++ b/output/operator/articles/explore-v030-gke.html
@@ -135,45 +135,45 @@ If you’re new to GKE, work through the <a href="https://cloud.google.com/kuber
To achieve better HA, you should deploy a <strong>regional</strong> GKE cluster across three zones (at least one Solr pod per zone).
Of course, you can deploy a zonal cluster to one zone for dev / testing purposes but the examples I show are based on a 3-node GKE cluster running in the us-central1 region with one node in each of three zones.</p>
<p>To get started, we need to install the nginx ingress controller into ingress-nginx namespace:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.45.0/deploy/static/provider/cloud/deploy.yaml</span>
+<div class="codehilite"><pre><span></span><code>kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.45.0/deploy/static/provider/cloud/deploy.yaml
</code></pre></div>
<p>For more information, see <a href="https://kubernetes.github.io/ingress-nginx/deploy/#gce-gke">Deploy Nginx Ingress on GKE</a>.</p>
<p>To verify the ingress controller is operating normally, do:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get pods -l app.kubernetes.io/name=ingress-nginx -n ingress-nginx \</span>
-<span class="err"> --field-selector status.phase=Running</span>
+<div class="codehilite"><pre><span></span><code>kubectl get pods -l app.kubernetes.io/name=ingress-nginx -n ingress-nginx \
+ --field-selector status.phase=Running
</code></pre></div>
<p>Should see expected output similar to:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">NAME READY STATUS RESTARTS AGE</span>
-<span class="err">ingress-nginx-controller-6c94f69c74-fxzp7 1/1 Running 0 6m23s</span>
+<div class="codehilite"><pre><span></span><code>NAME READY STATUS RESTARTS AGE
+ingress-nginx-controller-6c94f69c74-fxzp7 1/1 Running 0 6m23s
</code></pre></div>
<p>For this document, we’re going to deploy the operator and Solr to a namespace named <strong><code>sop030</code></strong>:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl create ns sop030</span>
-<span class="err">kubectl config set-context --current --namespace=sop030</span>
+<div class="codehilite"><pre><span></span><code>kubectl create ns sop030
+kubectl config set-context --current --namespace=sop030
</code></pre></div>
<h3 id="solr-operator-setup">Solr Operator Setup</h3>
<p>If you installed previous versions of the Solr operator, then please upgrade to the <strong>Apache Solr</strong> version using these instructions: <a href="https://apache.github.io/solr-operator/docs/upgrading-to-apache.html">Upgrading to Apache</a>.
Otherwise, add the Apache Solr Helm repo, install the <a href="#solr-crds">Solr CRDs</a> and <a href="https://artifacthub.io/packages/helm/apache-solr/solr-operator">install the Solr operator</a>:</p>
-<div class="codehilite"><pre><span></span><code><span class="n">helm</span> <span class="n">repo</span> <span class="k">add</span> <span class="n">apache</span><span class="o">-</span><span class="n">solr</span> <span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">solr</span><span class="p">.</span><span class="n">apache</span><span class="p">.</span><span class="n">org</span><span class="o">/</span><span class="n">charts</span>
-<span class="n">helm</span> <span class="n">repo</span> <span class="k">update</span>
+<div class="codehilite"><pre><span></span><code><span class="n">helm</span><span class="w"> </span><span class="n">repo</span><span class="w"> </span><span class="n">add</span><span class="w"> </span><span class="n">apache</span><span class="o">-</span><span class="n">solr</span><span class="w"> </span><span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">solr</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span c [...]
+<span class="n">helm</span><span class="w"> </span><span class="n">repo</span><span class="w"> </span><span class="n">update</span>
-<span class="n">kubectl</span> <span class="k">create</span> <span class="o">-</span><span class="n">f</span> <span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">solr</span><span class="p">.</span><span class="n">apache</span><span class="p">.</span><span class="n">org</span><span class="o">/</span><span class="k">operator</span><span class="o">/</span><span class="n">downloads</span><span class="o">/</span><span class="n">crds</span><span class=" [...]
+<span class="n">kubectl</span><span class="w"> </span><span class="n">create</span><span class="w"> </span><span class="o">-</span><span class="n">f</span><span class="w"> </span><span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">solr</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">org</span><span class="o">/</span><span class="n">operator</span><span class="o">/</span><span class="n">downloads</ [...]
-<span class="n">helm</span> <span class="n">upgrade</span> <span class="c1">--install solr-operator apache-solr/solr-operator \</span>
- <span class="c1">--version 0.3.0</span>
+<span class="n">helm</span><span class="w"> </span><span class="n">upgrade</span><span class="w"> </span><span class="o">--</span><span class="n">install</span><span class="w"> </span><span class="n">solr</span><span class="o">-</span><span class="n">operator</span><span class="w"> </span><span class="n">apache</span><span class="o">-</span><span class="n">solr</span><span class="o">/</span><span class="n">solr</span><span class="o">-</span><span class="n">operator</span><span class="w"> [...]
+<span class="w"> </span><span class="o">--</span><span class="n">version</span><span class="w"> </span><span class="mf">0.3</span><span class="o">.</span><span class="mi">0</span>
</code></pre></div>
<p>At this point, verify you have a Solr operator pod running in your namespace:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get pod -l control-plane=solr-operator</span>
-<span class="err">kubectl describe pod -l control-plane=solr-operator</span>
+<div class="codehilite"><pre><span></span><code>kubectl get pod -l control-plane=solr-operator
+kubectl describe pod -l control-plane=solr-operator
</code></pre></div>
<p>Notice I’m using a label selector filter instead of addressing the pods by ID, which saves me having to look up the ID to get pod details.</p>
<p>There should also be a <a href="https://github.com/pravega/zookeeper-operator">Zookeeper Operator</a> pod running in your namespace, verify using:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get pod -l component=zookeeper-operator</span>
+<div class="codehilite"><pre><span></span><code>kubectl get pod -l component=zookeeper-operator
</code></pre></div>
<h3 id="solr-crds">Solr CRDs</h3>
@@ -188,72 +188,72 @@ This provides a number of benefits:</p>
<p>The Solr operator defines CRDs that represent Solr specific objects, such as a SolrCloud resource, metrics exporter resource, and a backup/restore resource.
The SolrCloud CRD defines the configuration settings needed to deploy and manage a Solr cluster in a Kubernetes namespace.
First, let’s look at the SolrCloud CRD using kubectl:</p>
-<div class="codehilite"><pre><span></span><code><span class="o">#</span> <span class="k">get</span> <span class="n">a</span> <span class="n">list</span> <span class="k">of</span> <span class="k">all</span> <span class="n">CRDs</span> <span class="k">in</span> <span class="n">the</span> <span class="k">cluster</span>
-<span class="n">kubectl</span> <span class="k">get</span> <span class="n">crds</span>
+<div class="codehilite"><pre><span></span><code># get a list of all CRDs in the cluster
+kubectl get crds
-<span class="o">#</span> <span class="k">get</span> <span class="n">details</span> <span class="n">about</span> <span class="n">the</span> <span class="n">SolrCloud</span> <span class="n">CRD</span> <span class="n">Spec</span>
-<span class="n">kubectl</span> <span class="k">explain</span> <span class="n">solrclouds</span><span class="p">.</span><span class="n">spec</span>
-<span class="n">kubectl</span> <span class="k">explain</span> <span class="n">solrclouds</span><span class="p">.</span><span class="n">spec</span><span class="p">.</span><span class="n">solrImage</span>
+# get details about the SolrCloud CRD Spec
+kubectl explain solrclouds.spec
+kubectl explain solrclouds.spec.solrImage
-<span class="o">#</span> <span class="k">get</span> <span class="n">details</span> <span class="n">about</span> <span class="n">the</span> <span class="n">SolrCloud</span> <span class="n">CRD</span> <span class="n">Status</span>
-<span class="n">kubectl</span> <span class="k">explain</span> <span class="n">solrclouds</span><span class="p">.</span><span class="n">status</span>
+# get details about the SolrCloud CRD Status
+kubectl explain solrclouds.status
</code></pre></div>
<p>Take a moment to look over the output from the <code>explain</code> command above; the various structures and fields should seem familiar.
Feel free to dig down, exploring different parts of the SolrCloud CRD Spec and Status.</p>
<h3 id="creating-a-solr-cloud">Creating a Solr Cloud</h3>
<p>To deploy an instance of a SolrCloud object in a Kubernetes namespace, we craft a bit of YAML, such as the example shown below:</p>
-<div class="codehilite"><pre><span></span><code><span class="n">apiVersion</span><span class="o">:</span> <span class="n">solr</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="o">/</span><span class="n">v1beta1</span>
-<span class="n">kind</span><span class="o">:</span> <span class="n">SolrCloud</span>
+<div class="codehilite"><pre><span></span><code><span class="n">apiVersion</span><span class="o">:</span><span class="w"> </span><span class="n">solr</span><span class="o">.</span><span class="na">apache</span><span class="o">.</span><span class="na">org</span><span class="o">/</span><span class="n">v1beta1</span>
+<span class="n">kind</span><span class="o">:</span><span class="w"> </span><span class="n">SolrCloud</span>
<span class="n">metadata</span><span class="o">:</span>
- <span class="n">name</span><span class="o">:</span> <span class="n">explore</span>
+<span class="w"> </span><span class="n">name</span><span class="o">:</span><span class="w"> </span><span class="n">explore</span>
<span class="n">spec</span><span class="o">:</span>
- <span class="n">customSolrKubeOptions</span><span class="o">:</span>
- <span class="n">podOptions</span><span class="o">:</span>
- <span class="n">resources</span><span class="o">:</span>
- <span class="n">limits</span><span class="o">:</span>
- <span class="n">memory</span><span class="o">:</span> <span class="mi">3</span><span class="n">Gi</span>
- <span class="n">requests</span><span class="o">:</span>
- <span class="n">cpu</span><span class="o">:</span> <span class="mi">700</span><span class="n">m</span>
- <span class="n">memory</span><span class="o">:</span> <span class="mi">3</span><span class="n">Gi</span>
- <span class="n">dataStorage</span><span class="o">:</span>
- <span class="n">persistent</span><span class="o">:</span>
- <span class="n">pvcTemplate</span><span class="o">:</span>
- <span class="n">spec</span><span class="o">:</span>
- <span class="n">resources</span><span class="o">:</span>
- <span class="n">requests</span><span class="o">:</span>
- <span class="n">storage</span><span class="o">:</span> <span class="mi">2</span><span class="n">Gi</span>
- <span class="n">reclaimPolicy</span><span class="o">:</span> <span class="n">Delete</span>
- <span class="n">replicas</span><span class="o">:</span> <span class="mi">3</span>
- <span class="n">solrImage</span><span class="o">:</span>
- <span class="n">repository</span><span class="o">:</span> <span class="n">solr</span>
- <span class="n">tag</span><span class="o">:</span> <span class="mf">8.8</span><span class="o">.</span><span class="mi">2</span>
- <span class="n">solrJavaMem</span><span class="o">:</span> <span class="o">-</span><span class="n">Xms500M</span> <span class="o">-</span><span class="n">Xmx500M</span>
- <span class="n">updateStrategy</span><span class="o">:</span>
- <span class="n">method</span><span class="o">:</span> <span class="n">StatefulSet</span>
- <span class="n">zookeeperRef</span><span class="o">:</span>
- <span class="n">provided</span><span class="o">:</span>
- <span class="n">chroot</span><span class="o">:</span> <span class="o">/</span><span class="n">explore</span>
- <span class="n">image</span><span class="o">:</span>
- <span class="n">pullPolicy</span><span class="o">:</span> <span class="n">IfNotPresent</span>
- <span class="n">repository</span><span class="o">:</span> <span class="n">pravega</span><span class="o">/</span><span class="n">zookeeper</span>
- <span class="n">tag</span><span class="o">:</span> <span class="mf">0.2</span><span class="o">.</span><span class="mi">9</span>
- <span class="n">persistence</span><span class="o">:</span>
- <span class="n">reclaimPolicy</span><span class="o">:</span> <span class="n">Delete</span>
- <span class="n">spec</span><span class="o">:</span>
- <span class="n">accessModes</span><span class="o">:</span>
- <span class="o">-</span> <span class="n">ReadWriteOnce</span>
- <span class="n">resources</span><span class="o">:</span>
- <span class="n">requests</span><span class="o">:</span>
- <span class="n">storage</span><span class="o">:</span> <span class="mi">2</span><span class="n">Gi</span>
- <span class="n">replicas</span><span class="o">:</span> <span class="mi">3</span>
- <span class="n">zookeeperPodPolicy</span><span class="o">:</span>
- <span class="n">resources</span><span class="o">:</span>
- <span class="n">limits</span><span class="o">:</span>
- <span class="n">memory</span><span class="o">:</span> <span class="mi">500</span><span class="n">Mi</span>
- <span class="n">requests</span><span class="o">:</span>
- <span class="n">cpu</span><span class="o">:</span> <span class="mi">250</span><span class="n">m</span>
- <span class="n">memory</span><span class="o">:</span> <span class="mi">500</span><span class="n">Mi</span>
+<span class="w"> </span><span class="n">customSolrKubeOptions</span><span class="o">:</span>
+<span class="w"> </span><span class="n">podOptions</span><span class="o">:</span>
+<span class="w"> </span><span class="n">resources</span><span class="o">:</span>
+<span class="w"> </span><span class="n">limits</span><span class="o">:</span>
+<span class="w"> </span><span class="n">memory</span><span class="o">:</span><span class="w"> </span><span class="mi">3</span><span class="n">Gi</span>
+<span class="w"> </span><span class="n">requests</span><span class="o">:</span>
+<span class="w"> </span><span class="n">cpu</span><span class="o">:</span><span class="w"> </span><span class="mi">700</span><span class="n">m</span>
+<span class="w"> </span><span class="n">memory</span><span class="o">:</span><span class="w"> </span><span class="mi">3</span><span class="n">Gi</span>
+<span class="w"> </span><span class="n">dataStorage</span><span class="o">:</span>
+<span class="w"> </span><span class="n">persistent</span><span class="o">:</span>
+<span class="w"> </span><span class="n">pvcTemplate</span><span class="o">:</span>
+<span class="w"> </span><span class="n">spec</span><span class="o">:</span>
+<span class="w"> </span><span class="n">resources</span><span class="o">:</span>
+<span class="w"> </span><span class="n">requests</span><span class="o">:</span>
+<span class="w"> </span><span class="n">storage</span><span class="o">:</span><span class="w"> </span><span class="mi">2</span><span class="n">Gi</span>
+<span class="w"> </span><span class="n">reclaimPolicy</span><span class="o">:</span><span class="w"> </span><span class="n">Delete</span>
+<span class="w"> </span><span class="n">replicas</span><span class="o">:</span><span class="w"> </span><span class="mi">3</span>
+<span class="w"> </span><span class="n">solrImage</span><span class="o">:</span>
+<span class="w"> </span><span class="n">repository</span><span class="o">:</span><span class="w"> </span><span class="n">solr</span>
+<span class="w"> </span><span class="n">tag</span><span class="o">:</span><span class="w"> </span><span class="mf">8.8</span><span class="o">.</span><span class="mi">2</span>
+<span class="w"> </span><span class="n">solrJavaMem</span><span class="o">:</span><span class="w"> </span><span class="o">-</span><span class="n">Xms500M</span><span class="w"> </span><span class="o">-</span><span class="n">Xmx500M</span>
+<span class="w"> </span><span class="n">updateStrategy</span><span class="o">:</span>
+<span class="w"> </span><span class="n">method</span><span class="o">:</span><span class="w"> </span><span class="n">StatefulSet</span>
+<span class="w"> </span><span class="n">zookeeperRef</span><span class="o">:</span>
+<span class="w"> </span><span class="n">provided</span><span class="o">:</span>
+<span class="w"> </span><span class="n">chroot</span><span class="o">:</span><span class="w"> </span><span class="o">/</span><span class="n">explore</span>
+<span class="w"> </span><span class="n">image</span><span class="o">:</span>
+<span class="w"> </span><span class="n">pullPolicy</span><span class="o">:</span><span class="w"> </span><span class="n">IfNotPresent</span>
+<span class="w"> </span><span class="n">repository</span><span class="o">:</span><span class="w"> </span><span class="n">pravega</span><span class="o">/</span><span class="n">zookeeper</span>
+<span class="w"> </span><span class="n">tag</span><span class="o">:</span><span class="w"> </span><span class="mf">0.2</span><span class="o">.</span><span class="mi">9</span>
+<span class="w"> </span><span class="n">persistence</span><span class="o">:</span>
+<span class="w"> </span><span class="n">reclaimPolicy</span><span class="o">:</span><span class="w"> </span><span class="n">Delete</span>
+<span class="w"> </span><span class="n">spec</span><span class="o">:</span>
+<span class="w"> </span><span class="n">accessModes</span><span class="o">:</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="n">ReadWriteOnce</span>
+<span class="w"> </span><span class="n">resources</span><span class="o">:</span>
+<span class="w"> </span><span class="n">requests</span><span class="o">:</span>
+<span class="w"> </span><span class="n">storage</span><span class="o">:</span><span class="w"> </span><span class="mi">2</span><span class="n">Gi</span>
+<span class="w"> </span><span class="n">replicas</span><span class="o">:</span><span class="w"> </span><span class="mi">3</span>
+<span class="w"> </span><span class="n">zookeeperPodPolicy</span><span class="o">:</span>
+<span class="w"> </span><span class="n">resources</span><span class="o">:</span>
+<span class="w"> </span><span class="n">limits</span><span class="o">:</span>
+<span class="w"> </span><span class="n">memory</span><span class="o">:</span><span class="w"> </span><span class="mi">500</span><span class="n">Mi</span>
+<span class="w"> </span><span class="n">requests</span><span class="o">:</span>
+<span class="w"> </span><span class="n">cpu</span><span class="o">:</span><span class="w"> </span><span class="mi">250</span><span class="n">m</span>
+<span class="w"> </span><span class="n">memory</span><span class="o">:</span><span class="w"> </span><span class="mi">500</span><span class="n">Mi</span>
</code></pre></div>
<p>Play close attention to the resource requests / limits and disk sizes for Solr and Zookeeper; allocating the correct amount of memory, CPU, and disk for each Solr pod is an essential task when designing your cluster.
@@ -263,12 +263,12 @@ Sizing for production is beyond the scope of this document and is very use-case
Your ops team will keep this YAML in source control, allowing them to automate the process of creating SolrCloud clusters in Kubernetes.
You could even build a Helm chart to manage your SolrCloud YAML and related objects, such as backup/restore and Prometheus exporter CRD definitions.</p>
<p>Open a shell and run the following to tail the operator pod logs:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl logs -l control-plane=solr-operator -f</span>
+<div class="codehilite"><pre><span></span><code>kubectl logs -l control-plane=solr-operator -f
</code></pre></div>
<p>Note that I’m using a label selector (<code>-l ...</code>) instead of addressing the pod by its ID; this alleviates having to find the pod ID every time I want to view the operator logs.</p>
<p>To deploy the <code>explore</code> SolrCloud to K8s, save the YAML shown above to a file named <strong>explore-SolrCloud.yaml</strong> and then run the following in another shell tab:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl apply -f explore-SolrCloud.yaml</span>
+<div class="codehilite"><pre><span></span><code>kubectl apply -f explore-SolrCloud.yaml
</code></pre></div>
<p><em>We'll make updates to the <code>explore-SolrCloud.yaml</code> file throughout the rest of this document.<br>
@@ -277,22 +277,22 @@ Any code section that starts with "<code>spec:</code>", refers to this file.</em
This initiates a reconcile process in the operator where it creates the various K8s objects needed to run the <code>explore</code> SolrCloud cluster (see diagram above).
Take a brief look at the logs for the operator as the SolrCloud instance gets deployed.</p>
<p>One of the main benefits of CRDs is you can interact with them using <code>kubectl</code> just like native K8s objects:</p>
-<div class="codehilite"><pre><span></span><code>$ kubectl get solrclouds
+<div class="codehilite"><pre><span></span><code>$<span class="w"> </span>kubectl<span class="w"> </span>get<span class="w"> </span>solrclouds
-NAME VERSION TARGETVERSION DESIREDNODES NODES READYNODES AGE
-explore <span class="m">8</span>.8.2 <span class="m">3</span> <span class="m">3</span> <span class="m">3</span> 73s
+NAME<span class="w"> </span>VERSION<span class="w"> </span>TARGETVERSION<span class="w"> </span>DESIREDNODES<span class="w"> </span>NODES<span class="w"> </span>READYNODES<span class="w"> </span>AGE
+explore<span class="w"> </span><span class="m">8</span>.8.2<span class="w"> </span><span class="m">3</span><span class="w"> </span><span class="m">3</span><span class="w"> </span><span class="m">3</span><span class="w"> </span>73s
-$ kubectl get solrclouds explore -o yaml
+$<span class="w"> </span>kubectl<span class="w"> </span>get<span class="w"> </span>solrclouds<span class="w"> </span>explore<span class="w"> </span>-o<span class="w"> </span>yaml
</code></pre></div>
<p>Behind the scenes, the operator created a <a href="https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/">StatefulSet</a> for managing a set of Solr pods.
Take a look at the <code>explore</code> StatefulSet using:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get sts explore -o yaml</span>
+<div class="codehilite"><pre><span></span><code>kubectl get sts explore -o yaml
</code></pre></div>
<p>There's one slightly nuanced setting I'm relying on for this initial SolrCloud definition:</p>
-<div class="codehilite"><pre><span></span><code><span class="err"> updateStrategy:</span>
-<span class="err"> method: StatefulSet</span>
+<div class="codehilite"><pre><span></span><code> updateStrategy:
+ method: StatefulSet
</code></pre></div>
<p>We need to start with <code>StatefulSet</code> as the <a href="https://apache.github.io/solr-operator/docs/solr-cloud/solr-cloud-crd.html#update-strategy"><code>updateStrategy</code> method</a> so that we can enable TLS on an existing SolrCloud.
@@ -324,86 +324,86 @@ If not already installed in your cluster, follow the basic instructions provided
<p>First, let’s get started with a self-signed certificate.
You’ll need to create a self-signed issuer (cert-manager CRD), certificate (cert-manager CRD), and a secret holding a keystore password.
Save the following yaml to a file, and apply it via <code>kubectl apply -f</code>.</p>
-<div class="codehilite"><pre><span></span><code><span class="c1">---</span>
-<span class="n">apiVersion</span><span class="p">:</span> <span class="n">v1</span>
-<span class="n">kind</span><span class="p">:</span> <span class="n">Secret</span>
-<span class="n">metadata</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">pkcs12</span><span class="o">-</span><span class="n">keystore</span><span class="o">-</span><span class="n">password</span>
-<span class="n">stringData</span><span class="p">:</span>
- <span class="n">password</span><span class="o">-</span><span class="k">key</span><span class="p">:</span> <span class="n">Test1234</span>
-
-<span class="c1">---</span>
-<span class="n">apiVersion</span><span class="p">:</span> <span class="n">cert</span><span class="o">-</span><span class="n">manager</span><span class="p">.</span><span class="n">io</span><span class="o">/</span><span class="n">v1</span>
-<span class="n">kind</span><span class="p">:</span> <span class="n">Issuer</span>
-<span class="n">metadata</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">selfsigned</span><span class="o">-</span><span class="n">issuer</span>
-<span class="n">spec</span><span class="p">:</span>
- <span class="n">selfSigned</span><span class="p">:</span> <span class="err">{}</span>
-
-<span class="c1">---</span>
-<span class="n">apiVersion</span><span class="p">:</span> <span class="n">cert</span><span class="o">-</span><span class="n">manager</span><span class="p">.</span><span class="n">io</span><span class="o">/</span><span class="n">v1</span>
-<span class="n">kind</span><span class="p">:</span> <span class="n">Certificate</span>
-<span class="n">metadata</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">explore</span><span class="o">-</span><span class="n">selfsigned</span><span class="o">-</span><span class="n">cert</span>
-<span class="n">spec</span><span class="p">:</span>
- <span class="n">subject</span><span class="p">:</span>
- <span class="n">organizations</span><span class="p">:</span> <span class="p">[</span><span class="ss">"self"</span><span class="p">]</span>
- <span class="n">dnsNames</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">localhost</span>
- <span class="n">secretName</span><span class="p">:</span> <span class="n">explore</span><span class="o">-</span><span class="n">selfsigned</span><span class="o">-</span><span class="n">cert</span><span class="o">-</span><span class="n">tls</span>
- <span class="n">issuerRef</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">selfsigned</span><span class="o">-</span><span class="n">issuer</span>
- <span class="n">keystores</span><span class="p">:</span>
- <span class="n">pkcs12</span><span class="p">:</span>
- <span class="k">create</span><span class="p">:</span> <span class="k">true</span>
- <span class="n">passwordSecretRef</span><span class="p">:</span>
- <span class="k">key</span><span class="p">:</span> <span class="n">password</span><span class="o">-</span><span class="k">key</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">pkcs12</span><span class="o">-</span><span class="n">keystore</span><span class="o">-</span><span class="n">password</span>
+<div class="codehilite"><pre><span></span><code>---
+apiVersion: v1
+kind: Secret
+metadata:
+ name: pkcs12-keystore-password
+stringData:
+ password-key: Test1234
+
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+ name: selfsigned-issuer
+spec:
+ selfSigned: {}
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+ name: explore-selfsigned-cert
+spec:
+ subject:
+ organizations: ["self"]
+ dnsNames:
+ - localhost
+ secretName: explore-selfsigned-cert-tls
+ issuerRef:
+ name: selfsigned-issuer
+ keystores:
+ pkcs12:
+ create: true
+ passwordSecretRef:
+ key: password-key
+ name: pkcs12-keystore-password
</code></pre></div>
<p>Notice I requested a PKCS12 keystore to be generated for my certificate using:</p>
-<div class="codehilite"><pre><span></span><code><span class="err"> keystores:</span>
-<span class="err"> pkcs12:</span>
-<span class="err"> create: true</span>
+<div class="codehilite"><pre><span></span><code> keystores:
+ pkcs12:
+ create: true
</code></pre></div>
<p>This is a nice feature of cert-manager when working with Java based applications as Java supports reading PKCS12 natively whereas you’d need to convert the tls.crt and tls.key files using keytool if cert-manager did not do this for you automatically.</p>
<p>Cert-manager creates a Kubernetes secret holding the X.509 certificate, private key, and PKCS12 compliant keystore used by Solr.
Take a moment to inspect the contents of the secret using:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get secret explore-selfsigned-cert-tls -o yaml</span>
+<div class="codehilite"><pre><span></span><code>kubectl get secret explore-selfsigned-cert-tls -o yaml
</code></pre></div>
<p>Update your SolrCloud CRD definition in <code>explore-SolrCloud.yaml</code> to enable TLS and point to the secret holding the keystore:</p>
-<div class="codehilite"><pre><span></span><code><span class="n">spec</span><span class="p">:</span>
- <span class="p">...</span>
-
- <span class="n">solrAddressability</span><span class="p">:</span>
- <span class="n">commonServicePort</span><span class="p">:</span> <span class="mi">443</span>
- <span class="k">external</span><span class="p">:</span>
- <span class="n">domainName</span><span class="p">:</span> <span class="n">YOUR_DOMAIN_NAME_HERE</span>
- <span class="k">method</span><span class="p">:</span> <span class="n">Ingress</span>
- <span class="n">nodePortOverride</span><span class="p">:</span> <span class="mi">443</span>
- <span class="n">useExternalAddress</span><span class="p">:</span> <span class="k">false</span>
- <span class="n">podPort</span><span class="p">:</span> <span class="mi">8983</span>
-
- <span class="n">solrTLS</span><span class="p">:</span>
- <span class="n">restartOnTLSSecretUpdate</span><span class="p">:</span> <span class="k">true</span>
- <span class="n">pkcs12Secret</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">explore</span><span class="o">-</span><span class="n">selfsigned</span><span class="o">-</span><span class="n">cert</span><span class="o">-</span><span class="n">tls</span>
- <span class="k">key</span><span class="p">:</span> <span class="n">keystore</span><span class="p">.</span><span class="n">p12</span>
- <span class="n">keyStorePasswordSecret</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">pkcs12</span><span class="o">-</span><span class="n">keystore</span><span class="o">-</span><span class="n">password</span>
- <span class="k">key</span><span class="p">:</span> <span class="n">password</span><span class="o">-</span><span class="k">key</span>
+<div class="codehilite"><pre><span></span><code>spec:
+ ...
+
+ solrAddressability:
+ commonServicePort: 443
+ external:
+ domainName: YOUR_DOMAIN_NAME_HERE
+ method: Ingress
+ nodePortOverride: 443
+ useExternalAddress: false
+ podPort: 8983
+
+ solrTLS:
+ restartOnTLSSecretUpdate: true
+ pkcs12Secret:
+ name: explore-selfsigned-cert-tls
+ key: keystore.p12
+ keyStorePasswordSecret:
+ name: pkcs12-keystore-password
+ key: password-key
</code></pre></div>
<p>Notice that I'm also exposing Solr externally via an Ingress and switching the common service port to 443, which is more intuitive when working with TLS enabled services.
Apply your changes to the SolrCloud CRD using:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl apply -f explore-SolrCloud.yaml</span>
+<div class="codehilite"><pre><span></span><code>kubectl apply -f explore-SolrCloud.yaml
</code></pre></div>
<p>This will trigger a rolling restart of the Solr pods to enable TLS using your self-signed cert. Verify Solr is serving
traffic over HTTPS by opening a port-forward to one of the Solr pods (port 8983) and then do:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">curl https://localhost:8983/solr/admin/info/system -k</span>
+<div class="codehilite"><pre><span></span><code>curl https://localhost:8983/solr/admin/info/system -k
</code></pre></div>
<h3 id="lets-encrypt-issued-tls-certs">Let’s Encrypt Issued TLS Certs</h3>
@@ -412,67 +412,67 @@ I’m going to use Let’s Encrypt to issue a cert for my Solr cluster for a dom
If you don't have a domain name for your Solr cluster, you can just skip this section and refer back to it when needed.
The process I’m using here is based on the docs at: <a href="https://cert-manager.io/docs/configuration/acme/dns01/google/">ACME DNS01 Resolver for Google</a>.</p>
<p>Here’s the Let’s Encrypt issuer I created for my GKE environment:</p>
-<div class="codehilite"><pre><span></span><code><span class="c1">---</span>
-<span class="n">apiVersion</span><span class="p">:</span> <span class="n">cert</span><span class="o">-</span><span class="n">manager</span><span class="p">.</span><span class="n">io</span><span class="o">/</span><span class="n">v1</span>
-<span class="n">kind</span><span class="p">:</span> <span class="n">Issuer</span>
-<span class="n">metadata</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">acme</span><span class="o">-</span><span class="n">letsencrypt</span><span class="o">-</span><span class="n">issuer</span>
-<span class="n">spec</span><span class="p">:</span>
- <span class="n">acme</span><span class="p">:</span>
- <span class="n">server</span><span class="p">:</span> <span class="n">https</span><span class="p">:</span><span class="o">//</span><span class="n">acme</span><span class="o">-</span><span class="n">v02</span><span class="p">.</span><span class="n">api</span><span class="p">.</span><span class="n">letsencrypt</span><span class="p">.</span><span class="n">org</span><span class="o">/</span><span class="n">directory</span>
- <span class="n">email</span><span class="p">:</span> <span class="o">***</span> <span class="n">REDACTED</span> <span class="o">***</span>
- <span class="n">privateKeySecretRef</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">acme</span><span class="o">-</span><span class="n">letsencrypt</span><span class="o">-</span><span class="n">issuer</span><span class="o">-</span><span class="n">pk</span>
- <span class="n">solvers</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">dns01</span><span class="p">:</span>
- <span class="n">cloudDNS</span><span class="p">:</span>
- <span class="n">project</span><span class="p">:</span> <span class="n">GCP_PROJECT</span>
- <span class="n">serviceAccountSecretRef</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">clouddns</span><span class="o">-</span><span class="n">dns01</span><span class="o">-</span><span class="n">solver</span><span class="o">-</span><span class="n">svc</span><span class="o">-</span><span class="n">acct</span>
- <span class="k">key</span><span class="p">:</span> <span class="k">key</span><span class="p">.</span><span class="n">json</span>
-
-<span class="c1">---</span>
-<span class="n">apiVersion</span><span class="p">:</span> <span class="n">cert</span><span class="o">-</span><span class="n">manager</span><span class="p">.</span><span class="n">io</span><span class="o">/</span><span class="n">v1</span>
-<span class="n">kind</span><span class="p">:</span> <span class="n">Certificate</span>
-<span class="n">metadata</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">explore</span><span class="o">-</span><span class="n">solr</span><span class="o">-</span><span class="n">tls</span><span class="o">-</span><span class="n">cert</span>
-<span class="n">spec</span><span class="p">:</span>
- <span class="n">dnsNames</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">YOUR_DOMAIN_NAME_HERE</span>
- <span class="n">issuerRef</span><span class="p">:</span>
- <span class="n">kind</span><span class="p">:</span> <span class="n">Issuer</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">acme</span><span class="o">-</span><span class="n">letsencrypt</span><span class="o">-</span><span class="n">issuer</span>
- <span class="n">keystores</span><span class="p">:</span>
- <span class="n">pkcs12</span><span class="p">:</span>
- <span class="k">create</span><span class="p">:</span> <span class="k">true</span>
- <span class="n">passwordSecretRef</span><span class="p">:</span>
- <span class="k">key</span><span class="p">:</span> <span class="n">password</span><span class="o">-</span><span class="k">key</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">pkcs12</span><span class="o">-</span><span class="n">keystore</span><span class="o">-</span><span class="n">password</span>
- <span class="n">secretName</span><span class="p">:</span> <span class="n">explore</span><span class="o">-</span><span class="n">solr</span><span class="o">-</span><span class="n">tls</span><span class="o">-</span><span class="n">letsencrypt</span>
- <span class="n">subject</span><span class="p">:</span>
- <span class="n">countries</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">USA</span>
- <span class="n">organizationalUnits</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">k8s</span>
- <span class="n">organizations</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">solr</span>
+<div class="codehilite"><pre><span></span><code>---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+ name: acme-letsencrypt-issuer
+spec:
+ acme:
+ server: https://acme-v02.api.letsencrypt.org/directory
+ email: *** REDACTED ***
+ privateKeySecretRef:
+ name: acme-letsencrypt-issuer-pk
+ solvers:
+ <span class="k">-</span> dns01:
+ cloudDNS:
+ project: GCP_PROJECT
+ serviceAccountSecretRef:
+ name: clouddns-dns01-solver-svc-acct
+ key: key.json
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+ name: explore-solr-tls-cert
+spec:
+ dnsNames:
+ <span class="k">-</span> YOUR_DOMAIN_NAME_HERE
+ issuerRef:
+ kind: Issuer
+ name: acme-letsencrypt-issuer
+ keystores:
+ pkcs12:
+ create: true
+ passwordSecretRef:
+ key: password-key
+ name: pkcs12-keystore-password
+ secretName: explore-solr-tls-letsencrypt
+ subject:
+ countries:
+ <span class="k">-</span> USA
+ organizationalUnits:
+ <span class="k">-</span> k8s
+ organizations:
+ <span class="k">-</span> solr
</code></pre></div>
<p>Creating a certificate issuer typically involves some platform specific configuration.
For GKE, notice I’m using the DNS01 resolver, which requires credentials for a service account that has DNS admin permission, which you’ll need to configure in your GCP console or using the gcloud CLI.
In my environment, I’m storing the credentials in a secret named: <code>clouddns-dns01-solver-svc-acct</code>.</p>
<p>You can tail the logs on the cert-manager pod (in the cert-manager namespace) to track the progress of the issuing process. </p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl logs -l app.kubernetes.io/name=cert-manager -n cert-manager</span>
+<div class="codehilite"><pre><span></span><code>kubectl logs -l app.kubernetes.io/name=cert-manager -n cert-manager
</code></pre></div>
<p>Once the TLS cert is issued by Let's Encrypt, re-configure (assuming you worked through the self-signed process above) your SolrCloud instance to expose Solr via an Ingress and use the PKCS12 keystore holding the certificate and private key stored in the TLS secret created by cert-manager:</p>
-<div class="codehilite"><pre><span></span><code><span class="n">spec</span><span class="p">:</span>
- <span class="p">...</span>
+<div class="codehilite"><pre><span></span><code>spec:
+ ...
- <span class="n">solrTLS</span><span class="p">:</span>
- <span class="n">pkcs12Secret</span><span class="p">:</span>
- <span class="n">name</span><span class="p">:</span> <span class="n">explore</span><span class="o">-</span><span class="n">solr</span><span class="o">-</span><span class="n">tls</span><span class="o">-</span><span class="n">letsencrypt</span>
- <span class="k">key</span><span class="p">:</span> <span class="n">keystore</span><span class="p">.</span><span class="n">p12</span>
+ solrTLS:
+ pkcs12Secret:
+ name: explore-solr-tls-letsencrypt
+ key: keystore.p12
</code></pre></div>
<p>The final step is to create a DNS A record to map the IP address of your Ingress (created by the Solr operator) to the hostname for your Ingress.</p>
@@ -484,17 +484,17 @@ Refer to the Solr Operator documentation for <a href="https://apache.github.io/s
As of <code>v0.3.0</code>, the Solr operator supports basic authentication and Solr’s rule based authorization controls.</p>
<p>The easiest way to get started is to have the operator bootstrap basic authentication and authorization controls.
For detailed instructions, see: <a href="https://apache.github.io/solr-operator/docs/solr-cloud/solr-cloud-crd.html#authentication-and-authorization">Authentication and Authorization</a></p>
-<div class="codehilite"><pre><span></span><code><span class="n">spec</span><span class="p">:</span>
- <span class="p">...</span>
+<div class="codehilite"><pre><span></span><code>spec:
+ ...
- <span class="n">solrSecurity</span><span class="p">:</span>
- <span class="n">authenticationType</span><span class="p">:</span> <span class="n">Basic</span>
+ solrSecurity:
+ authenticationType: Basic
</code></pre></div>
<p>The operator configures credentials for three Solr users: <code>admin</code>, <code>k8s-oper</code>, and <code>solr</code>.</p>
<p>Login to the Solr admin Web UI as the admin user by doing:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get secret explore-solrcloud-security-bootstrap \</span>
-<span class="err"> -o jsonpath='{.data.admin}' | base64 --decode</span>
+<div class="codehilite"><pre><span></span><code>kubectl get secret explore-solrcloud-security-bootstrap \
+ -o jsonpath='{.data.admin}' | base64 --decode
</code></pre></div>
<p>At this point, all traffic into and between Solr pods is encrypted using TLS and API endpoints are locked down via Solr’s Rule-based authorization controls and basic authentication.
@@ -509,44 +509,44 @@ At some point, the healthy replicas may become overloaded by requests, so any av
<p>To begin our exploration of high availability with the Solr operator, let’s ensure Solr pods are evenly distributed around the cluster using pod anti-affinity.</p>
<p>Once you determine the number of Solr pods you need, you’ll also want to distribute the pods across your Kubernetes cluster in a balanced manner in order to withstand random node failures as well as zone-level outages (for multi-zone clusters) using <a href="https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity">Pod Anti-affinity</a> rules.</p>
<p>To see the zones for each node in your cluster, do:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get nodes -L topology.kubernetes.io/zone</span>
+<div class="codehilite"><pre><span></span><code>kubectl get nodes -L topology.kubernetes.io/zone
</code></pre></div>
<p>In the following <strong>podAntiAffinity</strong> example, pods that match the <strong>solr-cloud=explore</strong> label selector are distributed across different nodes and zones in the cluster.</p>
<p><em>Tip: The Solr operator sets the “solr-cloud” label to the name of your SolrCloud instance on all pods.</em></p>
-<div class="codehilite"><pre><span></span><code><span class="n">spec</span><span class="p">:</span>
- <span class="p">...</span>
-
- <span class="n">customSolrKubeOptions</span><span class="p">:</span>
- <span class="n">podOptions</span><span class="p">:</span>
- <span class="n">affinity</span><span class="p">:</span>
- <span class="n">podAntiAffinity</span><span class="p">:</span>
- <span class="n">preferredDuringSchedulingIgnoredDuringExecution</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">weight</span><span class="p">:</span> <span class="mi">100</span>
- <span class="n">podAffinityTerm</span><span class="p">:</span>
- <span class="n">labelSelector</span><span class="p">:</span>
- <span class="n">matchExpressions</span><span class="p">:</span>
- <span class="o">-</span> <span class="k">key</span><span class="p">:</span> <span class="ss">"technology"</span>
- <span class="k">operator</span><span class="p">:</span> <span class="k">In</span>
- <span class="k">values</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">solr</span><span class="o">-</span><span class="n">cloud</span>
- <span class="o">-</span> <span class="k">key</span><span class="p">:</span> <span class="ss">"solr-cloud"</span>
- <span class="k">operator</span><span class="p">:</span> <span class="k">In</span>
- <span class="k">values</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">explore</span>
- <span class="n">topologyKey</span><span class="p">:</span> <span class="n">topology</span><span class="p">.</span><span class="n">kubernetes</span><span class="p">.</span><span class="n">io</span><span class="o">/</span><span class="k">zone</span>
- <span class="n">requiredDuringSchedulingIgnoredDuringExecution</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">labelSelector</span><span class="p">:</span>
- <span class="n">matchExpressions</span><span class="p">:</span>
- <span class="o">-</span> <span class="k">key</span><span class="p">:</span> <span class="ss">"technology"</span>
- <span class="k">operator</span><span class="p">:</span> <span class="k">In</span>
- <span class="k">values</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">solr</span><span class="o">-</span><span class="n">cloud</span>
- <span class="o">-</span> <span class="k">key</span><span class="p">:</span> <span class="ss">"solr-cloud"</span>
- <span class="k">operator</span><span class="p">:</span> <span class="k">In</span>
- <span class="k">values</span><span class="p">:</span>
- <span class="o">-</span> <span class="n">explore</span>
- <span class="n">topologyKey</span><span class="p">:</span> <span class="n">kubernetes</span><span class="p">.</span><span class="n">io</span><span class="o">/</span><span class="n">hostname</span>
+<div class="codehilite"><pre><span></span><code>spec:
+ ...
+
+ customSolrKubeOptions:
+ podOptions:
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - weight: 100
+ podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: "technology"
+ operator: In
+ values:
+ - solr-cloud
+ - key: "solr-cloud"
+ operator: In
+ values:
+ - explore
+ topologyKey: topology.kubernetes.io/zone
+ requiredDuringSchedulingIgnoredDuringExecution:
+ - labelSelector:
+ matchExpressions:
+ - key: "technology"
+ operator: In
+ values:
+ - solr-cloud
+ - key: "solr-cloud"
+ operator: In
+ values:
+ - explore
+ topologyKey: kubernetes.io/hostname
</code></pre></div>
<p><em>Obviously this doesn't matter much when you have 3 nodes across 3 zones with 3 Solr pods, you'd get a balanced distribution with just the hostname anti-affinity rule; for large clusters, it's important to have rules for both hostnames and zones.</em></p>
@@ -559,8 +559,8 @@ Thus, it's a good idea to plan your pod affinity rules before rolling out SolrCl
Kubernetes does its best to distribute pods evenly across nodes, but multiple pods will get scheduled on the same node at some point (obviously).</p>
<p>Assuming you requested 3 replicas for the “explore” SolrCloud, you should have an even distribution of pods across the three zones.
Run the following command to get the number of unique nodes that your Solr Pods are running on, and count how many there are.</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get po -l solr-cloud=explore,technology=solr-cloud \</span>
-<span class="err"> -o json | jq -r '.items | sort_by(.spec.nodeName)[] | [.spec.nodeName] | @tsv' | uniq | wc -l</span>
+<div class="codehilite"><pre><span></span><code><span class="n">kubectl</span><span class="w"> </span><span class="k">get</span><span class="w"> </span><span class="n">po</span><span class="w"> </span><span class="o">-</span><span class="n">l</span><span class="w"> </span><span class="n">solr</span><span class="o">-</span><span class="n">cloud</span><span class="o">=</span><span class="n">explore</span><span class="p">,</span><span class="n">technology</span><span class="o">=</span><span [...]
+<span class="w"> </span><span class="o">-</span><span class="n">o</span><span class="w"> </span><span class="n">json</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span class="n">jq</span><span class="w"> </span><span class="o">-</span><span class="n">r</span><span class="w"> </span><span class="s1">'.items | sort_by(.spec.nodeName)[] | [.spec.nodeName] | @tsv'</span><span class="w"> </span><span class="o">|</span><span class="w"> </span><span cla [...]
</code></pre></div>
<p><em>Output should be: 3</em></p>
@@ -570,7 +570,7 @@ Run the following command to get the number of unique nodes that your Solr Pods
you still need to ensure all replicas for the collections that require HA get placed in order to take advantage of the cluster layout.
In other words, it doesn't do any good to distribute pods around the cluster to support HA if all the replicas for the same shard end up on the same node or zone.
On the Solr side, a good rule to start with is to have replicas for the same shard prefer other hosts using:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">{"node": "#ANY", "shard": "#EACH", "replica":"<2"},</span>
+<div class="codehilite"><pre><span></span><code>{"node": "#ANY", "shard": "#EACH", "replica":"<2"},
</code></pre></div>
<p>See <a href="https://solr.apache.org/guide/solrcloud-autoscaling-overview.html">Solr Auto-scaling</a> for more information about this another other types of rules.</p>
@@ -579,39 +579,39 @@ On the Solr side, a good rule to start with is to have replicas for the same sha
see: <a href="https://github.com/apache/solr/blob/main/solr/core/src/java/org/apache/solr/cluster/placement/plugins/AffinityPlacementFactory.java">solr/core/src/java/org/apache/solr/cluster/placement/plugins/AffinityPlacementFactory.java</a> for details.</em></p>
<p>For multi-AZ clusters, each Solr pod in a StatefulSet needs the <strong>availability_zone</strong> Java system property set, which is a unique label that identifies the zone for that pod.
The <strong>availability_zone</strong> property can be used in an auto-scaling rule to distribute replicas across all available zones in the SolrCloud cluster.</p>
-<div class="codehilite"><pre><span></span><code><span class="err">{"replica":"#EQUAL", "shard":"#EACH", "sysprop.availability_zone":"#EACH"},</span>
+<div class="codehilite"><pre><span></span><code>{"replica":"#EQUAL", "shard":"#EACH", "sysprop.availability_zone":"#EACH"},
</code></pre></div>
<p>If the service account for your Solr pods has the get nodes permission, you can get the zone from the node metadata using the <a href="https://kubernetes.io/docs/tasks/inject-data-application/downward-api-volume-expose-pod-information/#the-downward-api">Downward API</a>.
However, many admins are reluctant to give out this permission.
A GCP specific solution where we <code>curl</code> the <a href="http://metadata.google.internal/computeMetadata/v1/instance/zone">http://metadata.google.internal/computeMetadata/v1/instance/zone</a> API is shown below:</p>
-<div class="codehilite"><pre><span></span><code>spec:
- ...
-
- customSolrKubeOptions:
- podOptions:
- initContainers: # additional init containers for the Solr pods
- - name: set-zone # GKE specific, avoids giving get nodes permission to the service account
- image: curlimages/curl:latest
- command:
- - '/bin/sh'
- - '-c'
- - |
- zone=$(curl -sS http://metadata.google.internal/computeMetadata/v1/instance/zone -H 'Metadata-Flavor: Google')
- zone=<span class="cp">${</span><span class="n">zone</span><span class="c1">##*/</span><span class="cp">}</span>
- if [ "<span class="cp">${</span><span class="n">zone</span><span class="cp">}</span>" != "" ]; then
- echo "export SOLR_OPTS=\"\<span class="cp">${</span><span class="n">SOLR_OPTS</span><span class="cp">}</span> -Davailability_zone=<span class="cp">${</span><span class="n">zone</span><span class="cp">}</span>\"" > /docker-entrypoint-initdb.d/set-zone.sh
- fi
- volumeMounts:
- - name: initdb
- mountPath: /docker-entrypoint-initdb.d
- volumes:
- - defaultContainerMount:
- mountPath: /docker-entrypoint-initdb.d
- name: initdb
- name: initdb
- source:
- emptyDir: {}
+<div class="codehilite"><pre><span></span><code><span class="n">spec</span><span class="p">:</span>
+<span class="w"> </span><span class="o">...</span>
+
+<span class="w"> </span><span class="n">customSolrKubeOptions</span><span class="p">:</span>
+<span class="w"> </span><span class="n">podOptions</span><span class="p">:</span>
+<span class="w"> </span><span class="n">initContainers</span><span class="p">:</span><span class="w"> </span><span class="c1"># additional init containers for the Solr pods</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="n">name</span><span class="p">:</span><span class="w"> </span><span class="n">set</span><span class="o">-</span><span class="n">zone</span><span class="w"> </span><span class="c1"># GKE specific, avoids giving get nodes permission to the service account</span>
+<span class="w"> </span><span class="n">image</span><span class="p">:</span><span class="w"> </span><span class="n">curlimages</span><span class="o">/</span><span class="n">curl</span><span class="p">:</span><span class="n">latest</span>
+<span class="w"> </span><span class="n">command</span><span class="p">:</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="s1">'/bin/sh'</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="s1">'-c'</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="o">|</span>
+<span class="w"> </span><span class="n">zone</span><span class="o">=$</span><span class="p">(</span><span class="n">curl</span><span class="w"> </span><span class="o">-</span><span class="n">sS</span><span class="w"> </span><span class="n">http</span><span class="p">:</span><span class="o">//</span><span class="n">metadata</span><span class="o">.</span><span class="n">google</span><span class="o">.</span><span class="n">internal</span><span class="o">/</span><span class="n"> [...]
+<span class="w"> </span><span class="n">zone</span><span class="o">=$</span><span class="p">{</span><span class="n">zone</span><span class="c1">##*/}</span>
+<span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">[</span><span class="w"> </span><span class="s2">"${zone}"</span><span class="w"> </span><span class="o">!=</span><span class="w"> </span><span class="s2">""</span><span class="w"> </span><span class="p">];</span><span class="w"> </span><span class="n">then</span>
+<span class="w"> </span><span class="n">echo</span><span class="w"> </span><span class="s2">"export SOLR_OPTS=</span><span class="se">\"</span><span class="s2">\${SOLR_OPTS} -Davailability_zone=${zone}</span><span class="se">\"</span><span class="s2">"</span><span class="w"> </span><span class="o">></span><span class="w"> </span><span class="o">/</span><span class="n">docker</span><span class="o">-</span><span class="n">entrypoint</span><span class=" [...]
+<span class="w"> </span><span class="n">fi</span>
+<span class="w"> </span><span class="n">volumeMounts</span><span class="p">:</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="n">name</span><span class="p">:</span><span class="w"> </span><span class="n">initdb</span>
+<span class="w"> </span><span class="n">mountPath</span><span class="p">:</span><span class="w"> </span><span class="o">/</span><span class="n">docker</span><span class="o">-</span><span class="n">entrypoint</span><span class="o">-</span><span class="n">initdb</span><span class="o">.</span><span class="n">d</span>
+<span class="w"> </span><span class="n">volumes</span><span class="p">:</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="n">defaultContainerMount</span><span class="p">:</span>
+<span class="w"> </span><span class="n">mountPath</span><span class="p">:</span><span class="w"> </span><span class="o">/</span><span class="n">docker</span><span class="o">-</span><span class="n">entrypoint</span><span class="o">-</span><span class="n">initdb</span><span class="o">.</span><span class="n">d</span>
+<span class="w"> </span><span class="n">name</span><span class="p">:</span><span class="w"> </span><span class="n">initdb</span>
+<span class="w"> </span><span class="n">name</span><span class="p">:</span><span class="w"> </span><span class="n">initdb</span>
+<span class="w"> </span><span class="n">source</span><span class="p">:</span>
+<span class="w"> </span><span class="n">emptyDir</span><span class="p">:</span><span class="w"> </span><span class="p">{}</span>
</code></pre></div>
<p>Notice the initContainer adds the <code>set-zone.sh</code> script to <code>/docker-entrypoint-initdb.d</code>.
@@ -641,14 +641,14 @@ What’s more, these custom reconcile processes adhere to the idea of idempotenc
The reconcile can be called 100 times given the same starting state, the results should be identical from the 1st and 100th.</p>
<p>Recall that I originally used the <code>StatefulSet</code> method so that we could migrate an existing cluster to use TLS.
Let's switch that to use the <code>Managed</code> method using the following config:</p>
-<div class="codehilite"><pre><span></span><code><span class="n">spec</span><span class="p">:</span>
- <span class="p">...</span>
+<div class="codehilite"><pre><span></span><code>spec:
+ ...
- <span class="n">updateStrategy</span><span class="p">:</span>
- <span class="n">managed</span><span class="p">:</span>
- <span class="n">maxPodsUnavailable</span><span class="p">:</span> <span class="mi">2</span>
- <span class="n">maxShardReplicasUnavailable</span><span class="p">:</span> <span class="mi">2</span>
- <span class="k">method</span><span class="p">:</span> <span class="n">Managed</span>
+ updateStrategy:
+ managed:
+ maxPodsUnavailable: 2
+ maxShardReplicasUnavailable: 2
+ method: Managed
</code></pre></div>
<p><em>Add this to your <code>explore-SolrCloud.yaml</code> and apply the changes.</em> </p>
@@ -663,62 +663,62 @@ use the <a href="https://apache.github.io/solr-operator/docs/solr-prometheus-exp
<h3 id="prometheus-exporter">Prometheus Exporter</h3>
<p>The operator <a href="https://apache.github.io/solr-operator/docs/solr-prometheus-exporter/">documentation</a> covers how to deploy a Prometheus exporter for your SolrCloud instance.
Since we enabled basic auth and TLS, you’ll need to ensure the exporter can talk to the secured Solr pods using the following config settings:</p>
-<div class="codehilite"><pre><span></span><code><span class="err"> solrReference:</span>
-<span class="err"> cloud:</span>
-<span class="err"> name: "explore"</span>
-<span class="err"> basicAuthSecret: explore-solrcloud-basic-auth</span>
-<span class="err"> solrTLS:</span>
-<span class="err"> restartOnTLSSecretUpdate: true</span>
-<span class="err"> pkcs12Secret:</span>
-<span class="err"> name: explore-selfsigned-cert-tls</span>
-<span class="err"> key: keystore.p12</span>
-<span class="err"> keyStorePasswordSecret:</span>
-<span class="err"> name: pkcs12-keystore-password</span>
-<span class="err"> key: password-key</span>
+<div class="codehilite"><pre><span></span><code> solrReference:
+ cloud:
+ name: "explore"
+ basicAuthSecret: explore-solrcloud-basic-auth
+ solrTLS:
+ restartOnTLSSecretUpdate: true
+ pkcs12Secret:
+ name: explore-selfsigned-cert-tls
+ key: keystore.p12
+ keyStorePasswordSecret:
+ name: pkcs12-keystore-password
+ key: password-key
</code></pre></div>
<p><em>Make sure the <code>pkcs12Secret.name</code> is correct depending on whether you're using the self-signed cert or one issued by another CA such as Let's Encrypt.</em> </p>
<p>Ensure the service the Prometheus operator scrapes metrics from is correct:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl get svc -l solr-prometheus-exporter=explore-prom-exporter</span>
+<div class="codehilite"><pre><span></span><code><span class="n">kubectl</span><span class="w"> </span><span class="n">get</span><span class="w"> </span><span class="n">svc</span><span class="w"> </span><span class="o">-</span><span class="n">l</span><span class="w"> </span><span class="n">solr</span><span class="o">-</span><span class="n">prometheus</span><span class="o">-</span><span class="n">exporter</span><span class="o">=</span><span class="n">explore</span><span class="o">-</span>< [...]
</code></pre></div>
<p>If this shows a healthy service, then create a <a href="https://github.com/prometheus-operator/prometheus-operator/blob/master/Documentation/user-guides/getting-started.md">service monitor</a>
to trigger Prometheus to start scraping metrics from the exporter pod via the <code>explore-prom-exporter-solr-metrics</code> service.</p>
-<div class="codehilite"><pre><span></span><code><span class="n">apiVersion</span><span class="o">:</span> <span class="n">monitoring</span><span class="o">.</span><span class="na">coreos</span><span class="o">.</span><span class="na">com</span><span class="o">/</span><span class="n">v1</span>
-<span class="n">kind</span><span class="o">:</span> <span class="n">ServiceMonitor</span>
+<div class="codehilite"><pre><span></span><code><span class="n">apiVersion</span><span class="o">:</span><span class="w"> </span><span class="n">monitoring</span><span class="o">.</span><span class="na">coreos</span><span class="o">.</span><span class="na">com</span><span class="o">/</span><span class="n">v1</span>
+<span class="n">kind</span><span class="o">:</span><span class="w"> </span><span class="n">ServiceMonitor</span>
<span class="n">metadata</span><span class="o">:</span>
- <span class="n">name</span><span class="o">:</span> <span class="n">solr</span><span class="o">-</span><span class="n">metrics</span>
- <span class="n">labels</span><span class="o">:</span>
- <span class="n">release</span><span class="o">:</span> <span class="n">prometheus</span><span class="o">-</span><span class="n">stack</span>
+<span class="w"> </span><span class="n">name</span><span class="o">:</span><span class="w"> </span><span class="n">solr</span><span class="o">-</span><span class="n">metrics</span>
+<span class="w"> </span><span class="n">labels</span><span class="o">:</span>
+<span class="w"> </span><span class="n">release</span><span class="o">:</span><span class="w"> </span><span class="n">prometheus</span><span class="o">-</span><span class="n">stack</span>
<span class="n">spec</span><span class="o">:</span>
- <span class="n">selector</span><span class="o">:</span>
- <span class="n">matchLabels</span><span class="o">:</span>
- <span class="n">solr</span><span class="o">-</span><span class="n">prometheus</span><span class="o">-</span><span class="n">exporter</span><span class="o">:</span> <span class="n">explore</span><span class="o">-</span><span class="n">prom</span><span class="o">-</span><span class="n">exporter</span>
- <span class="n">namespaceSelector</span><span class="o">:</span>
- <span class="n">matchNames</span><span class="o">:</span>
- <span class="o">-</span> <span class="n">sop030</span>
- <span class="n">endpoints</span><span class="o">:</span>
- <span class="o">-</span> <span class="n">port</span><span class="o">:</span> <span class="n">solr</span><span class="o">-</span><span class="n">metrics</span>
- <span class="n">interval</span><span class="o">:</span> <span class="mi">15</span><span class="n">s</span>
+<span class="w"> </span><span class="n">selector</span><span class="o">:</span>
+<span class="w"> </span><span class="n">matchLabels</span><span class="o">:</span>
+<span class="w"> </span><span class="n">solr</span><span class="o">-</span><span class="n">prometheus</span><span class="o">-</span><span class="n">exporter</span><span class="o">:</span><span class="w"> </span><span class="n">explore</span><span class="o">-</span><span class="n">prom</span><span class="o">-</span><span class="n">exporter</span>
+<span class="w"> </span><span class="n">namespaceSelector</span><span class="o">:</span>
+<span class="w"> </span><span class="n">matchNames</span><span class="o">:</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="n">sop030</span>
+<span class="w"> </span><span class="n">endpoints</span><span class="o">:</span>
+<span class="w"> </span><span class="o">-</span><span class="w"> </span><span class="n">port</span><span class="o">:</span><span class="w"> </span><span class="n">solr</span><span class="o">-</span><span class="n">metrics</span>
+<span class="w"> </span><span class="n">interval</span><span class="o">:</span><span class="w"> </span><span class="mi">15</span><span class="n">s</span>
</code></pre></div>
<p><em>You'll need at least one collection created in your cluster before the exporter starts generating useful metrics.</em></p>
<h3 id="grafana-dashboards">Grafana Dashboards</h3>
<p>Use kubectl expose to create a LoadBalancer (external IP) for Grafana:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl expose deployment prometheus-stack-grafana --type=LoadBalancer \</span>
-<span class="err"> --name=grafana -n monitoring</span>
+<div class="codehilite"><pre><span></span><code><span class="nx">kubectl</span><span class="w"> </span><span class="nx">expose</span><span class="w"> </span><span class="nx">deployment</span><span class="w"> </span><span class="nx">prometheus</span><span class="o">-</span><span class="nx">stack</span><span class="o">-</span><span class="nx">grafana</span><span class="w"> </span><span class="o">--</span><span class="k">type</span><span class="p">=</span><span class="nx">LoadBalancer</span [...]
+<span class="w"> </span><span class="o">--</span><span class="nx">name</span><span class="p">=</span><span class="nx">grafana</span><span class="w"> </span><span class="o">-</span><span class="nx">n</span><span class="w"> </span><span class="nx">monitoring</span>
</code></pre></div>
<p>After waiting a bit, get the external IP address for the grafana service by doing:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">kubectl -n monitoring get service grafana \</span>
-<span class="err"> -o jsonpath='{.status.loadBalancer.ingress[0].ip}'</span>
+<div class="codehilite"><pre><span></span><code><span class="n">kubectl</span><span class="w"> </span><span class="o">-</span><span class="n">n</span><span class="w"> </span><span class="n">monitoring</span><span class="w"> </span><span class="n">get</span><span class="w"> </span><span class="n">service</span><span class="w"> </span><span class="n">grafana</span><span class="w"> </span>\
+<span class="w"> </span><span class="o">-</span><span class="n">o</span><span class="w"> </span><span class="n">jsonpath</span><span class="o">=</span><span class="s1">'{.status.loadBalancer.ingress[0].ip}'</span>
</code></pre></div>
<p>Alternatively, you can just open a port-forward to the Grafana pod listening on port 3000. </p>
<p>Login to Grafana using <code>admin</code> and <code>prom-operator</code></p>
<p>Download the default Solr dashboard from the source distribution:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">wget -q -O grafana-solr-dashboard.json \</span>
-<span class="err"> "https://raw.githubusercontent.com/apache/lucene-solr/branch_8x/solr/contrib/prometheus-exporter/conf/grafana-solr-dashboard.json"</span>
+<div class="codehilite"><pre><span></span><code><span class="n">wget</span><span class="w"> </span><span class="o">-</span><span class="n">q</span><span class="w"> </span><span class="o">-</span><span class="n">O</span><span class="w"> </span><span class="n">grafana</span><span class="o">-</span><span class="n">solr</span><span class="o">-</span><span class="n">dashboard</span><span class="o">.</span><span class="n">json</span><span class="w"> </span>\
+<span class="w"> </span><span class="s2">"https://raw.githubusercontent.com/apache/lucene-solr/branch_8x/solr/contrib/prometheus-exporter/conf/grafana-solr-dashboard.json"</span>
</code></pre></div>
<p>Manually import the <code>grafana-solr-dashboard.json</code> file into Grafana.</p>
@@ -726,7 +726,7 @@ to trigger Prometheus to start scraping metrics from the exporter pod via the <c
then be sure to add the following query parameter to your query requests to prefer replicas in the same zone
(which helps cut down on cross-zone traffic per request when all zones have healthy replicas).
If you don’t have a query load test tool, then I recommend looking at Gatling (gatling.io).</p>
-<div class="codehilite"><pre><span></span><code><span class="err">shards.preference=node.sysprop:sysprop.availability_zone,replica.location:local</span>
+<div class="codehilite"><pre><span></span><code>shards.preference=node.sysprop:sysprop.availability_zone,replica.location:local
</code></pre></div>
<h2 id="wrap-up">Wrap-up</h2>
@@ -737,218 +737,218 @@ Hopefully I’ll be able to cover some of these additional aspects in a future p
Let’s us know, we’re on slack <a href="https://kubernetes.slack.com/messages/solr-operator">#solr-operator</a> or via <a href="https://github.com/apache/solr-operator/issues">GitHub Issues</a>.</p>
<p>Here’s a final listing of the SolrCloud, Prometheus Exporter, and supporting objects YAML I used in this post. Enjoy!</p>
<div class="codehilite"><pre><span></span><code><span class="nn">---</span>
-<span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">v1</span>
-<span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Secret</span>
+<span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">v1</span>
+<span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Secret</span>
<span class="nt">metadata</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
<span class="nt">stringData</span><span class="p">:</span>
- <span class="nt">password-key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Test1234</span>
+<span class="w"> </span><span class="nt">password-key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Test1234</span>
<span class="nn">---</span>
-<span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">cert-manager.io/v1</span>
-<span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Issuer</span>
+<span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">cert-manager.io/v1</span>
+<span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Issuer</span>
<span class="nt">metadata</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">selfsigned-issuer</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">selfsigned-issuer</span>
<span class="nt">spec</span><span class="p">:</span>
- <span class="nt">selfSigned</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
+<span class="w"> </span><span class="nt">selfSigned</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">{}</span>
<span class="nn">---</span>
-<span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">cert-manager.io/v1</span>
-<span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Certificate</span>
+<span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">cert-manager.io/v1</span>
+<span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Certificate</span>
<span class="nt">metadata</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert</span>
<span class="nt">spec</span><span class="p">:</span>
- <span class="nt">subject</span><span class="p">:</span>
- <span class="nt">organizations</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="s">"self"</span><span class="p p-Indicator">]</span>
- <span class="nt">dnsNames</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">localhost</span>
- <span class="nt">secretName</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert-tls</span>
- <span class="nt">issuerRef</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">selfsigned-issuer</span>
- <span class="nt">keystores</span><span class="p">:</span>
- <span class="nt">pkcs12</span><span class="p">:</span>
- <span class="nt">create</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
- <span class="nt">passwordSecretRef</span><span class="p">:</span>
- <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">password-key</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
+<span class="w"> </span><span class="nt">subject</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">organizations</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[</span><span class="s">"self"</span><span class="p p-Indicator">]</span>
+<span class="w"> </span><span class="nt">dnsNames</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+<span class="w"> </span><span class="nt">secretName</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert-tls</span>
+<span class="w"> </span><span class="nt">issuerRef</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">selfsigned-issuer</span>
+<span class="w"> </span><span class="nt">keystores</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">pkcs12</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">create</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w"> </span><span class="nt">passwordSecretRef</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password-key</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
<span class="nn">---</span>
-<span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">solr.apache.org/v1beta1</span>
-<span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">SolrCloud</span>
+<span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr.apache.org/v1beta1</span>
+<span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">SolrCloud</span>
<span class="nt">metadata</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore</span>
<span class="nt">spec</span><span class="p">:</span>
- <span class="nt">customSolrKubeOptions</span><span class="p">:</span>
- <span class="nt">podOptions</span><span class="p">:</span>
- <span class="nt">resources</span><span class="p">:</span>
- <span class="nt">limits</span><span class="p">:</span>
- <span class="nt">memory</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">3Gi</span>
- <span class="nt">requests</span><span class="p">:</span>
- <span class="nt">cpu</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">700m</span>
- <span class="nt">memory</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">3Gi</span>
- <span class="nt">affinity</span><span class="p">:</span>
- <span class="nt">podAntiAffinity</span><span class="p">:</span>
- <span class="nt">preferredDuringSchedulingIgnoredDuringExecution</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="nt">weight</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">100</span>
- <span class="nt">podAffinityTerm</span><span class="p">:</span>
- <span class="nt">labelSelector</span><span class="p">:</span>
- <span class="nt">matchExpressions</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="nt">key</span><span class="p">:</span> <span class="s">"technology"</span>
- <span class="nt">operator</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">In</span>
- <span class="nt">values</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">solr-cloud</span>
- <span class="p p-Indicator">-</span> <span class="nt">key</span><span class="p">:</span> <span class="s">"solr-cloud"</span>
- <span class="nt">operator</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">In</span>
- <span class="nt">values</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">explore</span>
- <span class="nt">topologyKey</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">topology.kubernetes.io/zone</span>
- <span class="nt">requiredDuringSchedulingIgnoredDuringExecution</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="nt">labelSelector</span><span class="p">:</span>
- <span class="nt">matchExpressions</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="nt">key</span><span class="p">:</span> <span class="s">"technology"</span>
- <span class="nt">operator</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">In</span>
- <span class="nt">values</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">solr-cloud</span>
- <span class="p p-Indicator">-</span> <span class="nt">key</span><span class="p">:</span> <span class="s">"solr-cloud"</span>
- <span class="nt">operator</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">In</span>
- <span class="nt">values</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">explore</span>
- <span class="nt">topologyKey</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">kubernetes.io/hostname</span>
- <span class="nt">initContainers</span><span class="p">:</span> <span class="c1"># additional init containers for the Solr pods</span>
- <span class="p p-Indicator">-</span> <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">set-zone</span> <span class="c1"># GKE specific, avoids giving get nodes permission to the service account</span>
- <span class="nt">image</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">curlimages/curl:latest</span>
- <span class="nt">command</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="s">'/bin/sh'</span>
- <span class="p p-Indicator">-</span> <span class="s">'-c'</span>
- <span class="p p-Indicator">-</span> <span class="p p-Indicator">|</span>
- <span class="no">zone=$(curl -sS http://metadata.google.internal/computeMetadata/v1/instance/zone -H 'Metadata-Flavor: Google')</span>
- <span class="no">zone=${zone##*/}</span>
- <span class="no">if [ "${zone}" != "" ]; then</span>
- <span class="no">echo "export SOLR_OPTS=\"\${SOLR_OPTS} -Davailability_zone=${zone}\"" > /docker-entrypoint-initdb.d/set-zone.sh</span>
- <span class="no">fi</span>
- <span class="nt">volumeMounts</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">initdb</span>
- <span class="nt">mountPath</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">/docker-entrypoint-initdb.d</span>
- <span class="nt">volumes</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="nt">defaultContainerMount</span><span class="p">:</span>
- <span class="nt">mountPath</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">/docker-entrypoint-initdb.d</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">initdb</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">initdb</span>
- <span class="nt">source</span><span class="p">:</span>
- <span class="nt">emptyDir</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
-
- <span class="nt">dataStorage</span><span class="p">:</span>
- <span class="nt">persistent</span><span class="p">:</span>
- <span class="nt">pvcTemplate</span><span class="p">:</span>
- <span class="nt">spec</span><span class="p">:</span>
- <span class="nt">resources</span><span class="p">:</span>
- <span class="nt">requests</span><span class="p">:</span>
- <span class="nt">storage</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">2Gi</span>
- <span class="nt">reclaimPolicy</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Delete</span>
- <span class="nt">replicas</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">3</span>
- <span class="nt">solrImage</span><span class="p">:</span>
- <span class="nt">repository</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">solr</span>
- <span class="nt">tag</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">8.8.2</span>
- <span class="nt">solrJavaMem</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">-Xms500M -Xmx510M</span>
- <span class="nt">updateStrategy</span><span class="p">:</span>
- <span class="nt">managed</span><span class="p">:</span>
- <span class="nt">maxPodsUnavailable</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">2</span>
- <span class="nt">maxShardReplicasUnavailable</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">2</span>
- <span class="nt">method</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Managed</span>
-
- <span class="nt">solrAddressability</span><span class="p">:</span>
- <span class="nt">commonServicePort</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">443</span>
- <span class="nt">external</span><span class="p">:</span>
- <span class="nt">domainName</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">YOUR_DOMAIN_NAME_HERE</span>
- <span class="nt">method</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Ingress</span>
- <span class="nt">nodePortOverride</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">443</span>
- <span class="nt">useExternalAddress</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">false</span>
- <span class="nt">podPort</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">8983</span>
-
- <span class="nt">solrTLS</span><span class="p">:</span>
- <span class="nt">restartOnTLSSecretUpdate</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
- <span class="nt">pkcs12Secret</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert-tls</span>
- <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">keystore.p12</span>
- <span class="nt">keyStorePasswordSecret</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
- <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">password-key</span>
-
- <span class="nt">solrSecurity</span><span class="p">:</span>
- <span class="nt">authenticationType</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Basic</span>
-
- <span class="nt">zookeeperRef</span><span class="p">:</span>
- <span class="nt">provided</span><span class="p">:</span>
- <span class="nt">chroot</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">/explore</span>
- <span class="nt">image</span><span class="p">:</span>
- <span class="nt">pullPolicy</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">IfNotPresent</span>
- <span class="nt">repository</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">pravega/zookeeper</span>
- <span class="nt">tag</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">0.2.9</span>
- <span class="nt">persistence</span><span class="p">:</span>
- <span class="nt">reclaimPolicy</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Delete</span>
- <span class="nt">spec</span><span class="p">:</span>
- <span class="nt">accessModes</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">ReadWriteOnce</span>
- <span class="nt">resources</span><span class="p">:</span>
- <span class="nt">requests</span><span class="p">:</span>
- <span class="nt">storage</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">2Gi</span>
- <span class="nt">replicas</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">3</span>
- <span class="nt">zookeeperPodPolicy</span><span class="p">:</span>
- <span class="nt">resources</span><span class="p">:</span>
- <span class="nt">limits</span><span class="p">:</span>
- <span class="nt">memory</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">500Mi</span>
- <span class="nt">requests</span><span class="p">:</span>
- <span class="nt">cpu</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">250m</span>
- <span class="nt">memory</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">500Mi</span>
+<span class="w"> </span><span class="nt">customSolrKubeOptions</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">podOptions</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">resources</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">limits</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">memory</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">3Gi</span>
+<span class="w"> </span><span class="nt">requests</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">cpu</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">700m</span>
+<span class="w"> </span><span class="nt">memory</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">3Gi</span>
+<span class="w"> </span><span class="nt">affinity</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">podAntiAffinity</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">preferredDuringSchedulingIgnoredDuringExecution</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">weight</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">100</span>
+<span class="w"> </span><span class="nt">podAffinityTerm</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">labelSelector</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">matchExpressions</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="s">"technology"</span>
+<span class="w"> </span><span class="nt">operator</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">In</span>
+<span class="w"> </span><span class="nt">values</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr-cloud</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="s">"solr-cloud"</span>
+<span class="w"> </span><span class="nt">operator</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">In</span>
+<span class="w"> </span><span class="nt">values</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore</span>
+<span class="w"> </span><span class="nt">topologyKey</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">topology.kubernetes.io/zone</span>
+<span class="w"> </span><span class="nt">requiredDuringSchedulingIgnoredDuringExecution</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">labelSelector</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">matchExpressions</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="s">"technology"</span>
+<span class="w"> </span><span class="nt">operator</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">In</span>
+<span class="w"> </span><span class="nt">values</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr-cloud</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="s">"solr-cloud"</span>
+<span class="w"> </span><span class="nt">operator</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">In</span>
+<span class="w"> </span><span class="nt">values</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore</span>
+<span class="w"> </span><span class="nt">topologyKey</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">kubernetes.io/hostname</span>
+<span class="w"> </span><span class="nt">initContainers</span><span class="p">:</span><span class="w"> </span><span class="c1"># additional init containers for the Solr pods</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">set-zone</span><span class="w"> </span><span class="c1"># GKE specific, avoids giving get nodes permission to the service account</span>
+<span class="w"> </span><span class="nt">image</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">curlimages/curl:latest</span>
+<span class="w"> </span><span class="nt">command</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="s">'/bin/sh'</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="s">'-c'</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="p p-Indicator">|</span>
+<span class="w"> </span><span class="no">zone=$(curl -sS http://metadata.google.internal/computeMetadata/v1/instance/zone -H 'Metadata-Flavor: Google')</span>
+<span class="w"> </span><span class="no">zone=${zone##*/}</span>
+<span class="w"> </span><span class="no">if [ "${zone}" != "" ]; then</span>
+<span class="w"> </span><span class="no">echo "export SOLR_OPTS=\"\${SOLR_OPTS} -Davailability_zone=${zone}\"" > /docker-entrypoint-initdb.d/set-zone.sh</span>
+<span class="w"> </span><span class="no">fi</span>
+<span class="w"> </span><span class="nt">volumeMounts</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">initdb</span>
+<span class="w"> </span><span class="nt">mountPath</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">/docker-entrypoint-initdb.d</span>
+<span class="w"> </span><span class="nt">volumes</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">defaultContainerMount</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">mountPath</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">/docker-entrypoint-initdb.d</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">initdb</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">initdb</span>
+<span class="w"> </span><span class="nt">source</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">emptyDir</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">{}</span>
+
+<span class="w"> </span><span class="nt">dataStorage</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">persistent</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">pvcTemplate</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">spec</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">resources</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">requests</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">storage</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">2Gi</span>
+<span class="w"> </span><span class="nt">reclaimPolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Delete</span>
+<span class="w"> </span><span class="nt">replicas</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">3</span>
+<span class="w"> </span><span class="nt">solrImage</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">repository</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr</span>
+<span class="w"> </span><span class="nt">tag</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">8.8.2</span>
+<span class="w"> </span><span class="nt">solrJavaMem</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">-Xms500M -Xmx510M</span>
+<span class="w"> </span><span class="nt">updateStrategy</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">managed</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">maxPodsUnavailable</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">2</span>
+<span class="w"> </span><span class="nt">maxShardReplicasUnavailable</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">2</span>
+<span class="w"> </span><span class="nt">method</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Managed</span>
+
+<span class="w"> </span><span class="nt">solrAddressability</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">commonServicePort</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">443</span>
+<span class="w"> </span><span class="nt">external</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">domainName</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">YOUR_DOMAIN_NAME_HERE</span>
+<span class="w"> </span><span class="nt">method</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Ingress</span>
+<span class="w"> </span><span class="nt">nodePortOverride</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">443</span>
+<span class="w"> </span><span class="nt">useExternalAddress</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w"> </span><span class="nt">podPort</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">8983</span>
+
+<span class="w"> </span><span class="nt">solrTLS</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">restartOnTLSSecretUpdate</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w"> </span><span class="nt">pkcs12Secret</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert-tls</span>
+<span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">keystore.p12</span>
+<span class="w"> </span><span class="nt">keyStorePasswordSecret</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
+<span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password-key</span>
+
+<span class="w"> </span><span class="nt">solrSecurity</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">authenticationType</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Basic</span>
+
+<span class="w"> </span><span class="nt">zookeeperRef</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">provided</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">chroot</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">/explore</span>
+<span class="w"> </span><span class="nt">image</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">pullPolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">IfNotPresent</span>
+<span class="w"> </span><span class="nt">repository</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">pravega/zookeeper</span>
+<span class="w"> </span><span class="nt">tag</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">0.2.9</span>
+<span class="w"> </span><span class="nt">persistence</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">reclaimPolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Delete</span>
+<span class="w"> </span><span class="nt">spec</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">accessModes</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ReadWriteOnce</span>
+<span class="w"> </span><span class="nt">resources</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">requests</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">storage</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">2Gi</span>
+<span class="w"> </span><span class="nt">replicas</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">3</span>
+<span class="w"> </span><span class="nt">zookeeperPodPolicy</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">resources</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">limits</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">memory</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">500Mi</span>
+<span class="w"> </span><span class="nt">requests</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">cpu</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">250m</span>
+<span class="w"> </span><span class="nt">memory</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">500Mi</span>
<span class="nn">---</span>
-<span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">solr.apache.org/v1beta1</span>
-<span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">SolrPrometheusExporter</span>
+<span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr.apache.org/v1beta1</span>
+<span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">SolrPrometheusExporter</span>
<span class="nt">metadata</span><span class="p">:</span>
- <span class="nt">labels</span><span class="p">:</span>
- <span class="nt">controller-tools.k8s.io</span><span class="p">:</span> <span class="s">"1.0"</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore-prom-exporter</span>
+<span class="w"> </span><span class="nt">labels</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">controller-tools.k8s.io</span><span class="p">:</span><span class="w"> </span><span class="s">"1.0"</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore-prom-exporter</span>
<span class="nt">spec</span><span class="p">:</span>
- <span class="nt">customKubeOptions</span><span class="p">:</span>
- <span class="nt">podOptions</span><span class="p">:</span>
- <span class="nt">resources</span><span class="p">:</span>
- <span class="nt">requests</span><span class="p">:</span>
- <span class="nt">cpu</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">300m</span>
- <span class="nt">memory</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">800Mi</span>
- <span class="nt">solrReference</span><span class="p">:</span>
- <span class="nt">cloud</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="s">"explore"</span>
- <span class="nt">basicAuthSecret</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore-solrcloud-basic-auth</span>
- <span class="nt">solrTLS</span><span class="p">:</span>
- <span class="nt">restartOnTLSSecretUpdate</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
- <span class="nt">pkcs12Secret</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert-tls</span>
- <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">keystore.p12</span>
- <span class="nt">keyStorePasswordSecret</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
- <span class="nt">key</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">password-key</span>
- <span class="nt">numThreads</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">6</span>
- <span class="nt">image</span><span class="p">:</span>
- <span class="nt">repository</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">solr</span>
- <span class="nt">tag</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">8.8.2</span>
+<span class="w"> </span><span class="nt">customKubeOptions</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">podOptions</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">resources</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">requests</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">cpu</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">300m</span>
+<span class="w"> </span><span class="nt">memory</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">800Mi</span>
+<span class="w"> </span><span class="nt">solrReference</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">cloud</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="s">"explore"</span>
+<span class="w"> </span><span class="nt">basicAuthSecret</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore-solrcloud-basic-auth</span>
+<span class="w"> </span><span class="nt">solrTLS</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">restartOnTLSSecretUpdate</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w"> </span><span class="nt">pkcs12Secret</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore-selfsigned-cert-tls</span>
+<span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">keystore.p12</span>
+<span class="w"> </span><span class="nt">keyStorePasswordSecret</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">pkcs12-keystore-password</span>
+<span class="w"> </span><span class="nt">key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password-key</span>
+<span class="w"> </span><span class="nt">numThreads</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">6</span>
+<span class="w"> </span><span class="nt">image</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">repository</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr</span>
+<span class="w"> </span><span class="nt">tag</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">8.8.2</span>
<span class="nn">---</span>
-<span class="nt">apiVersion</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">monitoring.coreos.com/v1</span>
-<span class="nt">kind</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">ServiceMonitor</span>
+<span class="nt">apiVersion</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">monitoring.coreos.com/v1</span>
+<span class="nt">kind</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ServiceMonitor</span>
<span class="nt">metadata</span><span class="p">:</span>
- <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">solr-metrics</span>
- <span class="nt">labels</span><span class="p">:</span>
- <span class="nt">release</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">prometheus-stack</span>
+<span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr-metrics</span>
+<span class="w"> </span><span class="nt">labels</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">release</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">prometheus-stack</span>
<span class="nt">spec</span><span class="p">:</span>
- <span class="nt">selector</span><span class="p">:</span>
- <span class="nt">matchLabels</span><span class="p">:</span>
- <span class="nt">solr-prometheus-exporter</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">explore-prom-exporter</span>
- <span class="nt">namespaceSelector</span><span class="p">:</span>
- <span class="nt">matchNames</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">sop030</span>
- <span class="nt">endpoints</span><span class="p">:</span>
- <span class="p p-Indicator">-</span> <span class="nt">port</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">solr-metrics</span>
- <span class="nt">interval</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">15s</span>
+<span class="w"> </span><span class="nt">selector</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">matchLabels</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">solr-prometheus-exporter</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">explore-prom-exporter</span>
+<span class="w"> </span><span class="nt">namespaceSelector</span><span class="p">:</span>
+<span class="w"> </span><span class="nt">matchNames</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">sop030</span>
+<span class="w"> </span><span class="nt">endpoints</span><span class="p">:</span>
+<span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">port</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">solr-metrics</span>
+<span class="w"> </span><span class="nt">interval</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">15s</span>
</code></pre></div> </div>
</div>
<footer>
diff --git a/output/operator/community.html b/output/operator/community.html
index 44313ed7a..ed4a90b65 100644
--- a/output/operator/community.html
+++ b/output/operator/community.html
@@ -167,7 +167,7 @@ have installed the command line version.</p>
No GIT client software is required.</p>
<h4 id="cloning-the-repository">Cloning the repository</h4>
<p>To work on the code locally, you may clone the git repository:</p>
-<div class="codehilite"><pre><span></span><code><span class="err">git clone https://github.com/apache/solr-operator.git</span>
+<div class="codehilite"><pre><span></span><code>git clone https://github.com/apache/solr-operator.git
</code></pre></div>
<p>Then use GitHub's <a href="https://docs.github.com/en/github/getting-started-with-github/fork-a-repo">fork feature</a>
diff --git a/output/security.html b/output/security.html
index c2fc4e231..94f223598 100644
--- a/output/security.html
+++ b/output/security.html
@@ -430,7 +430,7 @@ Apache Calcite has a vulnerability, CVE-2022-39135, that is exploitable in Apach
An XXE attack may lead to the disclosure of confidential data, denial of service, server side request forgery (SSRF), port scanning from the Solr node, and other system impacts.</p>
<p><strong>Mitigation:</strong><br>
Most Solr installations don’t make use of the SQL functionality. For such users, the standard Solr security advice of using a firewall should be adequate. Nonetheless, the functionality can be disabled. As of Solr 9, it has been modularized and thus became opt-in, so nothing is needed for Solr 9 users that don’t use it. Users <em>not</em> using SolrCloud can’t use the functionality at all. For other users that wish to disable it, you must register a request handler that masks the un [...]
-<div class="codehilite"><pre><span></span><code><span class="err"> <requestHandler name="/sql" class="solr.NotFoundRequestHandler"/></span>
+<div class="codehilite"><pre><span></span><code> <requestHandler name="/sql" class="solr.NotFoundRequestHandler"/>
</code></pre></div>
<p>Users needing this SQL functionality are forced to upgrade to Solr 9.1. If Solr 8.11.3 is released, then it will be an option as well. Simply replacing Calcite and other JAR files may mostly work but could fail depending on the particulars of the query. Users interested in this or in patching their own versions of Solr should examine SOLR-16421 for a source patch.</p>
@@ -656,358 +656,360 @@ Github user <code>s00py</code></p>
<th>state</th>
<th>detail</th>
</tr>
+ <!-- BEGIN STATIC TABLE SOLR-17339 -->
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2022-33980">CVE-2022-33980</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-33980">CVE-2022-33980</a> </td>
<td>
- < 9.1
+ < 9.1
</td>
<td>
- commons-configuration2-2.7.jar </td>
+ commons-configuration2-2.7.jar </td>
<td>not affected</td>
<td>Solr uses commons-configuration2 for "hadoop-auth" only (for Kerberos). It is only used for loading Hadoop configuration files that would only ever be provided by trusted administrators, not externally (untrusted).</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2022-42889">CVE-2022-42889</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-42889">CVE-2022-42889</a> </td>
<td>
- < 9.1
+ < 9.1
</td>
<td>
- commons-text-1.9.jar </td>
+ commons-text-1.9.jar </td>
<td>not affected</td>
<td>Solr uses commons-text directly (StringEscapeUtils.escapeEcmaScript) in LoadAdminUiServlet that is not vulnerable. Solr also has a "hadoop-auth" module that uses Apache Hadoop which uses commons-text through commons-configuration2. For Solr, the concern is limited to loading Hadoop configuration files that would only ever be provided by trusted administrators, not externally (untrusted).</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2022-25168">CVE-2022-25168</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-25168">CVE-2022-25168</a> </td>
<td>
- < 9.1
+ < 9.1
</td>
<td>
- hadoop-common-3.2.2.jar </td>
+ hadoop-common-3.2.2.jar </td>
<td>not affected</td>
<td>The vulnerable code won't be used by Solr because Solr only is only using HDFS as a client.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44832">CVE-2021-44832</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44832">CVE-2021-44832</a> </td>
<td>
7.4-8.11.1
</td>
<td>
- log4j-core-2.14.1.jar, log4j-core-2.16.0.jar </td>
+ log4j-core-2.14.1.jar, log4j-core-2.16.0.jar </td>
<td>not affected</td>
<td>Solr's default log configuration doesn't use JDBCAppender and we don't imagine a user would want to use it or other obscure appenders.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45105">CVE-2021-45105</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45105">CVE-2021-45105</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-45046">CVE-2021-45046</a> </td>
<td>
7.4-8.11.1
</td>
<td>
- log4j-core-2.14.1.jar, log4j-core-2.16.0.jar </td>
+ log4j-core-2.14.1.jar, log4j-core-2.16.0.jar </td>
<td>not affected</td>
<td>The MDC data used by Solr are for the collection, shard, replica, core and node names, and a potential trace id, which are all sanitized. Furthermore, Solr's default log configuration doesn't use double-dollar-sign and we don't imagine a user would want to do that.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2020-13955">CVE-2020-13955</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2020-13955">CVE-2020-13955</a> </td>
<td>
8.1.0- today
</td>
<td>
- avatica-core-1.13.0.jar, calcite-core-1.18.0.jar </td>
+ avatica-core-1.13.0.jar, calcite-core-1.18.0.jar </td>
<td>not affected</td>
<td>Solr's SQL adapter does not use the vulnerable class "HttpUtils". Calcite only used it to talk to Druid or Splunk.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2018-10237">CVE-2018-10237</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-10237">CVE-2018-10237</a> </td>
<td>
5.4.0-today
</td>
<td>
- carrot2-guava-18.0.jar </td>
+ carrot2-guava-18.0.jar </td>
<td>not affected</td>
<td>Only used with the Carrot2 clustering engine.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2014-0114">CVE-2014-0114</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2014-0114">CVE-2014-0114</a> </td>
<td>
4.9.0-7.5.0
</td>
<td>
- commons-beanutils-1.8.3.jar </td>
+ commons-beanutils-1.8.3.jar </td>
<td>not affected</td>
<td>This is only used at compile time and it cannot be used to attack Solr. Since it is generally unnecessary, the dependency has been removed as of 7.5.0. See SOLR-12617.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2019-10086">CVE-2019-10086</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-10086">CVE-2019-10086</a> </td>
<td>
8.0.0-8.3.0
</td>
<td>
- commons-beanutils-1.9.3.jar </td>
+ commons-beanutils-1.9.3.jar </td>
<td>not affected</td>
<td>While commons-beanutils was removed in 7.5, it was added back in 8.0 in error and removed again in 8.3. The vulnerable class was not used in any Solr code path. This jar remains a dependency of both Velocity and hadoop-common, but Solr does not use it in our implementations.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2012-2098">CVE-2012-2098</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1324">CVE-2018-1324</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-11771">CVE-2018-11771</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2012-2098">CVE-2012-2098</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1324">CVE-2018-1324</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-11771">CVE-2018-11771</a> </td>
<td>
4.6.0-today
</td>
<td>
- commons-compress (only as part of Ant 1.8.2) </td>
+ commons-compress (only as part of Ant 1.8.2) </td>
<td>not affected</td>
<td>Only used in test framework and at build time.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1000632">CVE-2018-1000632</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1000632">CVE-2018-1000632</a> </td>
<td>
4.6.0-today
</td>
<td>
- dom4j-1.6.1.jar </td>
+ dom4j-1.6.1.jar </td>
<td>not affected</td>
<td>Only used in Solr tests.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2018-10237">CVE-2018-10237</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-10237">CVE-2018-10237</a> </td>
<td>
4.6.0-today
</td>
<td>
- guava-*.jar </td>
+ guava-*.jar </td>
<td>not affected</td>
<td>Only used in tests.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2017-15718">CVE-2017-15718</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-15718">CVE-2017-15718</a> </td>
<td>
6.6.1-7.6.0
</td>
<td>
- hadoop-auth-2.7.4.jar, hadoop-hdfs-2.7.4.jar (all Hadoop) </td>
+ hadoop-auth-2.7.4.jar, hadoop-hdfs-2.7.4.jar (all Hadoop) </td>
<td>not affected</td>
<td>Does not impact Solr because Solr uses Hadoop as a client library.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14952">CVE-2017-14952</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14952">CVE-2017-14952</a> </td>
<td>
6.0.0-7.5.0
</td>
<td>
- icu4j-56.1.jar, icu4j-59.1.jar </td>
+ icu4j-56.1.jar, icu4j-59.1.jar </td>
<td>not affected</td>
<td>Issue applies only to the C++ release of ICU and not ICU4J, which is what Lucene uses. ICU4J is at v63.2 as of Lucene/Solr 7.6.0</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2017-15095">CVE-2017-15095</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-17485">CVE-2017-17485</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-7525">CVE-2017-7525</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-5968">CVE-2018-5968</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-7489">CVE-2018-7489</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-12086">CVE-2019-12086</a>, <a href="https://nvd.nist.gov/ [...]
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-15095">CVE-2017-15095</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-17485">CVE-2017-17485</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-7525">CVE-2017-7525</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-5968">CVE-2018-5968</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-7489">CVE-2018-7489</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-12086">CVE-2019-12086</a>, <a href="https://nvd [...]
<td>
4.7.0-today
</td>
<td>
- jackson-databind-*.jar </td>
+ jackson-databind-*.jar </td>
<td>not affected</td>
- <td>These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See <a href="https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062">https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-y [...]
+ <td>These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See <a href="https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062">https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-y [...]
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2019-10241">CVE-2019-10241</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-10247">CVE-2019-10247</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-10241">CVE-2019-10241</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-10247">CVE-2019-10247</a> </td>
<td>
7.7.0-8.2
</td>
<td>
- jetty-9.4.14 </td>
+ jetty-9.4.14 </td>
<td>not affected</td>
<td>Solr upgraded to Jetty 9.4.19 for the 8.2 release. Additionally, the path to exploit these vulnerabilities was fixed in 8.1 and 7.7.2. Earlier versions can manually patch their configurations as described in SOLR-13409.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2020-27218">CVE-2020-27218</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2020-27218">CVE-2020-27218</a> </td>
<td>
7.3.0-8.8.0
</td>
<td>
- jetty-9.4.0 to 9.4.34 </td>
+ jetty-9.4.0 to 9.4.34 </td>
<td>not affected</td>
<td>Only exploitable through use of Jetty's GzipHandler, which is only implemented in Embedded Solr Server.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2020-27223">CVE-2020-27223</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2020-27223">CVE-2020-27223</a> </td>
<td>
7.3.0-present
</td>
<td>
- jetty-9.4.6 to 9.4.36 </td>
+ jetty-9.4.6 to 9.4.36 </td>
<td>not affected</td>
<td>Only exploitable if Solr's webapp directory is deployed as a symlink, which is not Solr's default.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2021-33813">CVE-2021-33813</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-33813">CVE-2021-33813</a> </td>
<td>
to present
</td>
<td>
- jdom-*.jar </td>
+ jdom-*.jar </td>
<td>not affected</td>
<td>JDOM is only used in Solr Cell, which should not be used in production which makes the vulnerability unexploitable. It is a dependency of Apache Tika, which has analyzed the issue and determined the vulnerability is limited to two libraries not commonly used in search applications, see TIKA-3488 for details. Since Tika should be used outside of Solr, use a version of Tika which updates the affected libraries if concerned about exposure to this issue.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1000056">CVE-2018-1000056</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1000056">CVE-2018-1000056</a> </td>
<td>
4.6.0-7.6.0
</td>
<td>
- junit-4.10.jar </td>
+ junit-4.10.jar </td>
<td>not affected</td>
<td>JUnit only used in tests; CVE only refers to a Jenkins plugin not used by Solr.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2014-7940">CVE-2014-7940</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2016-6293">CVE-2016-6293</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2016-7415">CVE-2016-7415</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14952">CVE-2017-14952</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-17484">CVE-2017-17484</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-7867">CVE-2017-7867</a>, <a href="https://nvd.nist.gov/vu [...]
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2014-7940">CVE-2014-7940</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2016-6293">CVE-2016-6293</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2016-7415">CVE-2016-7415</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14952">CVE-2017-14952</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-17484">CVE-2017-17484</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-7867">CVE-2017-7867</a>, <a href="https://nvd.n [...]
<td>
7.3.1
</td>
<td>
- lucene-analyzers-icu-7.3.1.jar </td>
+ lucene-analyzers-icu-7.3.1.jar </td>
<td>not affected</td>
<td>All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2019-16869">CVE-2019-16869</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-16869">CVE-2019-16869</a> </td>
<td>
8.2-8.3
</td>
<td>
- netty-all-4.1.29.Final.jar </td>
+ netty-all-4.1.29.Final.jar </td>
<td>not affected</td>
<td>This is not included in Solr but is a dependency of ZooKeeper 3.5.5. The version was upgraded in ZooKeeper 3.5.6, included with Solr 8.3. The specific classes mentioned in the CVE are not used in Solr (nor in ZooKeeper as far as the Solr community can determine).</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14868">CVE-2017-14868</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14949">CVE-2017-14949</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14868">CVE-2017-14868</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-14949">CVE-2017-14949</a> </td>
<td>
5.2.0-today
</td>
<td>
- org.restlet-2.3.0.jar </td>
+ org.restlet-2.3.0.jar </td>
<td>not affected</td>
<td>Solr should not be exposed outside a firewall where bad actors can send HTTP requests. These two CVEs specifically involve classes (SimpleXMLProvider and XmlRepresentation, respectively) that Solr does not use in any code path.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2015-5237">CVE-2015-5237</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2015-5237">CVE-2015-5237</a> </td>
<td>
6.5.0-today
</td>
<td>
- protobuf-java-3.1.0.jar </td>
+ protobuf-java-3.1.0.jar </td>
<td>not affected</td>
<td>Dependency for Hadoop and Calcite. ??</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1471">CVE-2018-1471</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1471">CVE-2018-1471</a> </td>
<td>
5.4.0-7.7.2, 8.0-8.3
</td>
<td>
- simple-xml-2.7.1.jar </td>
+ simple-xml-2.7.1.jar </td>
<td>not affected</td>
<td>Dependency of Carrot2 and used during compilation, not at runtime (see SOLR-769. This .jar was replaced in Solr 8.3 and backported to 7.7.3 (see SOLR-13779).</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2018-8088">CVE-2018-8088</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-8088">CVE-2018-8088</a> </td>
<td>
4.x-today
</td>
<td>
- slf4j-api-1.7.24.jar, jcl-over-slf4j-1.7.24.jar, jul-to-slf4j-1.7.24.jar </td>
+ slf4j-api-1.7.24.jar, jcl-over-slf4j-1.7.24.jar, jul-to-slf4j-1.7.24.jar </td>
<td>not affected</td>
<td>The reported CVE impacts org.slf4j.ext.EventData, which is not used in Solr.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1335">CVE-2018-1335</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1335">CVE-2018-1335</a> </td>
<td>
7.3.1-7.5.0
</td>
<td>
- tika-core.1.17.jar </td>
+ tika-core.1.17.jar </td>
<td>not affected</td>
<td>Solr does not run tika-server, so this is not a problem.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-">CVE-</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-">CVE-</a> </td>
<td>
7.3.1-today
</td>
<td>
- tika-core.*.jar </td>
+ tika-core.*.jar </td>
<td>not affected</td>
<td>All Tika issues that could be Solr vulnerabilities would only be exploitable if untrusted files are indexed with SolrCell. This is not recommended in production systems, so Solr does not consider these valid CVEs for Solr.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-">CVE-</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-">CVE-</a> </td>
<td>
6.6.2-today
</td>
<td>
- velocity-tools-2.0.jar </td>
+ velocity-tools-2.0.jar </td>
<td>not affected</td>
<td>Solr does not ship a Struts jar. This is a transitive POM listing and not included with Solr (see comment in SOLR-2849).</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2016-6809">CVE-2016-6809</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1335">CVE-2018-1335</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1338">CVE-2018-1338</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1339">CVE-2018-1339</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2016-6809">CVE-2016-6809</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1335">CVE-2018-1335</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1338">CVE-2018-1338</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-1339">CVE-2018-1339</a> </td>
<td>
5.5.5, 6.2.0-today
</td>
<td>
- vorbis-java-tika-0.8.jar </td>
+ vorbis-java-tika-0.8.jar </td>
<td>not affected</td>
<td>See <a href="https://github.com/Gagravarr/VorbisJava/issues/30">https://github.com/Gagravarr/VorbisJava/issues/30</a>; reported CVEs are not related to OggVorbis at all.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2012-0881">CVE-2012-0881</a> </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2012-0881">CVE-2012-0881</a> </td>
<td>
~2.9-today
</td>
<td>
- xercesImpl-2.9.1.jar </td>
+ xercesImpl-2.9.1.jar </td>
<td>not affected</td>
<td>Only used in Lucene Benchmarks and Solr tests.</td>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2023-51074">CVE-2023-51074</a>, GHSA-pfh2-hfmq-phg5 </td>
+ <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-51074">CVE-2023-51074</a>, GHSA-pfh2-hfmq-phg5 </td>
<td>
all
</td>
<td>
- json-path-2.8.0.jar </td>
+ json-path-2.8.0.jar </td>
<td>not affected</td>
<td>The only places we use json-path is for querying (via Calcite) and for transforming/indexing custom JSON. Since the advisory describes a problem that is limited to the current thread, and users that are allowed to query/transform/index are already trusted to cause load to some extent, this advisory does not appear to have impact on the way json-path is used in Solr.</td>
</tr>
+ <!-- END STATIC TABLE SOLR-17339 -->
</table>
</div>
</div>
diff --git a/output/solr.vex.json b/output/solr.vex.json
deleted file mode 100644
index ef5a19533..000000000
--- a/output/solr.vex.json
+++ /dev/null
@@ -1,1010 +0,0 @@
-{
- "bomFormat": "CycloneDX",
- "specVersion": "1.4",
- "version": 1,
- "metadata": {
- "component": {
- "name": "solr",
- "version": "SNAPSHOT",
- "type": "application",
- "bom-ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- },
- "vulnerabilities": [
- {
- "id": "CVE-2022-33980",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-33980"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr uses commons-configuration2 for \"hadoop-auth\" only (for Kerberos). It is only used for loading Hadoop configuration files that would only ever be provided by trusted administrators, not externally (untrusted)."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2022-42889",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42889"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr uses commons-text directly (StringEscapeUtils.escapeEcmaScript) in LoadAdminUiServlet that is not vulnerable. Solr also has a \"hadoop-auth\" module that uses Apache Hadoop which uses commons-text through commons-configuration2. For Solr, the concern is limited to loading Hadoop configuration files that would only ever be provided by trusted administrators, not externally (untrusted)."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2022-25168",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25168"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "The vulnerable code won't be used by Solr because Solr only is only using HDFS as a client."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2021-44832",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44832"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr's default log configuration doesn't use JDBCAppender and we don't imagine a user would want to use it or other obscure appenders."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2021-45105",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45105"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "The MDC data used by Solr are for the collection, shard, replica, core and node names, and a potential trace id, which are all sanitized. Furthermore, Solr's default log configuration doesn't use double-dollar-sign and we don't imagine a user would want to do that."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2021-45046",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45046"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "The MDC data used by Solr are for the collection, shard, replica, core and node names, and a potential trace id, which are all sanitized. Furthermore, Solr's default log configuration doesn't use double-dollar-sign and we don't imagine a user would want to do that."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2020-13955",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13955"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr's SQL adapter does not use the vulnerable class \"HttpUtils\". Calcite only used it to talk to Druid or Splunk."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-10237",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only used with the Carrot2 clustering engine."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2014-0114",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0114"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "This is only used at compile time and it cannot be used to attack Solr. Since it is generally unnecessary, the dependency has been removed as of 7.5.0. See SOLR-12617."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-10086",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10086"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "While commons-beanutils was removed in 7.5, it was added back in 8.0 in error and removed again in 8.3. The vulnerable class was not used in any Solr code path. This jar remains a dependency of both Velocity and hadoop-common, but Solr does not use it in our implementations."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2012-2098",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2098"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only used in test framework and at build time."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1324",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1324"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only used in test framework and at build time."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-11771",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11771"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only used in test framework and at build time."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1000632",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000632"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only used in Solr tests."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-10237",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10237"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only used in tests."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-15718",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15718"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Does not impact Solr because Solr uses Hadoop as a client library."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-14952",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14952"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Issue applies only to the C++ release of ICU and not ICU4J, which is what Lucene uses. ICU4J is at v63.2 as of Lucene/Solr 7.6.0"
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-15095",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15095"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-17485",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17485"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-7525",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7525"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-5968",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5968"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-7489",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7489"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-12086",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12086"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-12384",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12384"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-12814",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12814"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-14379",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14379"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-14439",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14439"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2020-35490",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35490"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2020-35491",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35491"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2021-20190",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20190"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-14540",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14540"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-16335",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16335"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "These CVEs, and most of the known jackson-databind CVEs since 2017, are all related to problematic 'gadgets' that could be exploited during deserialization of untrusted data. The Jackson developers described 4 conditions that must be met in order for a problematic gadget to be exploited. See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062. Solr's use of jackson-databind does not meet 1 of the 4 conditions described [...]
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-10241",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr upgraded to Jetty 9.4.19 for the 8.2 release. Additionally, the path to exploit these vulnerabilities was fixed in 8.1 and 7.7.2. Earlier versions can manually patch their configurations as described in SOLR-13409."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-10247",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr upgraded to Jetty 9.4.19 for the 8.2 release. Additionally, the path to exploit these vulnerabilities was fixed in 8.1 and 7.7.2. Earlier versions can manually patch their configurations as described in SOLR-13409."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2020-27218",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27218"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only exploitable through use of Jetty's GzipHandler, which is only implemented in Embedded Solr Server."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2020-27223",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27223"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only exploitable if Solr's webapp directory is deployed as a symlink, which is not Solr's default."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2021-33813",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33813"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "JDOM is only used in Solr Cell, which should not be used in production which makes the vulnerability unexploitable. It is a dependency of Apache Tika, which has analyzed the issue and determined the vulnerability is limited to two libraries not commonly used in search applications, see TIKA-3488 for details. Since Tika should be used outside of Solr, use a version of Tika which updates the affected libraries if concerned about exposure to this issue."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1000056",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000056"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "JUnit only used in tests; CVE only refers to a Jenkins plugin not used by Solr."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2014-7940",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7940"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2016-6293",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6293"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2016-7415",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7415"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-14952",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14952"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-17484",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17484"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-7867",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7867"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-7868",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7868"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All of these issues apply to the C++ release of ICU and not ICU4J, which is what Lucene uses."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2019-16869",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "This is not included in Solr but is a dependency of ZooKeeper 3.5.5. The version was upgraded in ZooKeeper 3.5.6, included with Solr 8.3. The specific classes mentioned in the CVE are not used in Solr (nor in ZooKeeper as far as the Solr community can determine)."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-14868",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14868"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr should not be exposed outside a firewall where bad actors can send HTTP requests. These two CVEs specifically involve classes (SimpleXMLProvider and XmlRepresentation, respectively) that Solr does not use in any code path."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2017-14949",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14949"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr should not be exposed outside a firewall where bad actors can send HTTP requests. These two CVEs specifically involve classes (SimpleXMLProvider and XmlRepresentation, respectively) that Solr does not use in any code path."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2015-5237",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5237"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Dependency for Hadoop and Calcite. ??"
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1471",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1471"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Dependency of Carrot2 and used during compilation, not at runtime (see SOLR-769. This .jar was replaced in Solr 8.3 and backported to 7.7.3 (see SOLR-13779)."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-8088",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "The reported CVE impacts org.slf4j.ext.EventData, which is not used in Solr."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1335",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1335"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr does not run tika-server, so this is not a problem."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "All Tika issues that could be Solr vulnerabilities would only be exploitable if untrusted files are indexed with SolrCell. This is not recommended in production systems, so Solr does not consider these valid CVEs for Solr."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Solr does not ship a Struts jar. This is a transitive POM listing and not included with Solr (see comment in SOLR-2849)."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2016-6809",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6809"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "See https://github.com/Gagravarr/VorbisJava/issues/30; reported CVEs are not related to OggVorbis at all."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1335",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1335"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "See https://github.com/Gagravarr/VorbisJava/issues/30; reported CVEs are not related to OggVorbis at all."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1338",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1338"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "See https://github.com/Gagravarr/VorbisJava/issues/30; reported CVEs are not related to OggVorbis at all."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2018-1339",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1339"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "See https://github.com/Gagravarr/VorbisJava/issues/30; reported CVEs are not related to OggVorbis at all."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2012-0881",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0881"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "Only used in Lucene Benchmarks and Solr tests."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2022-39135",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-39135"
- },
- "analysis": {
- "state": "exploitable",
- "response": [
- "update"
- ],
- "detail": "Apache Calcite has a vulnerability, CVE-2022-39135, that is exploitable in Apache Solr in SolrCloud mode. If an untrusted user can supply SQL queries to Solr's '/sql' handler (even indirectly via proxies / other apps), then the user could perform an XML External Entity (XXE) attack. This might have been exposed by some deployers of Solr in order for internal analysts to use JDBC based tooling, but would have unlikely been granted to wider audiences."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "CVE-2023-51074",
- "source": {
- "name": "NVD",
- "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51074"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "The only places we use json-path is for querying (via Calcite) and for transforming/indexing custom JSON. Since the advisory describes a problem that is limited to the current thread, and users that are allowed to query/transform/index are already trusted to cause load to some extent, this advisory does not appear to have impact on the way json-path is used in Solr."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- },
- {
- "id": "GHSA-pfh2-hfmq-phg5",
- "source": {
- "name": "GITHUB",
- "url": "https://github.com/advisories/GHSA-pfh2-hfmq-phg5"
- },
- "analysis": {
- "state": "not_affected",
- "detail": "The only places we use json-path is for querying (via Calcite) and for transforming/indexing custom JSON. Since the advisory describes a problem that is limited to the current thread, and users that are allowed to query/transform/index are already trusted to cause load to some extent, this advisory does not appear to have impact on the way json-path is used in Solr."
- },
- "affects": [
- {
- "ref": "24c354b2-068e-5094-8552-fd058faed8dc"
- }
- ]
- }
- ]
-}
\ No newline at end of file
diff --git a/output/theme/images/book_solr_search_patterns.jpg b/output/theme/images/book_solr_search_patterns.jpg
old mode 100755
new mode 100644