You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Fernando Arribas <fe...@gmail.com> on 2024/09/27 09:10:50 UTC
Review Request 75217: RANGER-4939: Upgrade Elasticsearch version to 7.17.24
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75217/
-----------------------------------------------------------
Review request for ranger.
Repository: ranger
Description
-------
Elasticsearch version 7.10.2 is affected by a high vulnerability CVE-2023-31418. You must upgrade to version 7.17.22 to fix this vulnerability.
Diffs
-----
embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/ElasticSearchIndexBootStrapper.java 15a16e41f
pom.xml 7c2390fa8
ranger-elasticsearch-plugin-shim/src/main/java/org/apache/ranger/authorization/elasticsearch/plugin/RangerElasticsearchPlugin.java 2af13f87f
Diff: https://reviews.apache.org/r/75217/diff/1/
Testing
-------
Thanks,
Fernando Arribas
Re: Review Request 75217: RANGER-4939: Upgrade Elasticsearch version to 7.17.24
Posted by bhavik patel <bh...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75217/#review226959
-----------------------------------------------------------
Ship it!
Ship It!
- bhavik patel
On Sept. 27, 2024, 9:41 a.m., Fernando Arribas wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/75217/
> -----------------------------------------------------------
>
> (Updated Sept. 27, 2024, 9:41 a.m.)
>
>
> Review request for ranger.
>
>
> Repository: ranger
>
>
> Description
> -------
>
> Elasticsearch version 7.10.2 is affected by a high vulnerability CVE-2023-31418. You must upgrade to version 7.17.22 to fix this vulnerability.
>
>
> Diffs
> -----
>
> embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/ElasticSearchIndexBootStrapper.java 15a16e41f
> pom.xml 7c2390fa8
> ranger-elasticsearch-plugin-shim/src/main/java/org/apache/ranger/authorization/elasticsearch/plugin/RangerElasticsearchPlugin.java 2af13f87f
>
>
> Diff: https://reviews.apache.org/r/75217/diff/1/
>
>
> Testing
> -------
>
> ElasticSearchAccessAuditsServiceTest
>
> Write Test ->
>
> 11:37:55.892 [main] INFO org.apache.ranger.audit.destination.AuditDestination -- AuditDestination() enter
> 11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- BaseAuditProvider.init()
> 11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- propPrefix=ranger.audit.elasticsearch
> 11:37:55.926 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
> 11:37:55.938 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- Using providerName from property prefix. providerName=elasticsearch
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- providerName=elasticsearch
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.enabled=false
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.interval.sec=300
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.enabled=false
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.interval.sec=300
> 11:37:55.939 [main] INFO org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Connecting to ElasticSearch: User:elastic, http://localhost:9200/ranger_audits
> log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
> log4j:WARN Please initialize the log4j system properly.
> log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
> 11:37:57.298 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Index exists
> 11:37:57.602 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Indexed
>
>
> Read test ->
>
> 11:36:57.967 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- Running searchXAccessAudits:
> 11:36:57.980 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchMgr -- Initializing ElasticSearch User:elastic, http://localhost:9200/ranger_audits
> 11:36:58.002 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
> 11:36:58.018 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
> log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
> log4j:WARN Please initialize the log4j system properly.
> log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
> 11:36:59.868 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- searchXAccessAudits results (0 items):
>
>
> File Attachments
> ----------------
>
> Tests
> https://reviews.apache.org/media/uploaded/files/2024/09/27/9bc25394-eb0e-498e-885c-57ab17e53145__ExampleDoc.png
> Test2
> https://reviews.apache.org/media/uploaded/files/2024/09/27/7cae8430-9f5c-4e75-86a3-bd3d82feb019__DocsElastic.png
> Test3
> https://reviews.apache.org/media/uploaded/files/2024/09/27/ee8bdb51-53f1-49da-8428-c2566b785085__AuditsApacheRanger.png
>
>
> Thanks,
>
> Fernando Arribas
>
>
Re: Review Request 75217: RANGER-4939: Upgrade Elasticsearch version to 7.17.24
Posted by Fernando Arribas <fe...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75217/#review226971
-----------------------------------------------------------
Ship it!
Ship It!
- Fernando Arribas
On Sept. 27, 2024, 9:41 a.m., Fernando Arribas wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/75217/
> -----------------------------------------------------------
>
> (Updated Sept. 27, 2024, 9:41 a.m.)
>
>
> Review request for ranger.
>
>
> Repository: ranger
>
>
> Description
> -------
>
> Elasticsearch version 7.10.2 is affected by a high vulnerability CVE-2023-31418. You must upgrade to version 7.17.22 to fix this vulnerability.
>
>
> Diffs
> -----
>
> embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/ElasticSearchIndexBootStrapper.java 15a16e41f
> pom.xml 7c2390fa8
> ranger-elasticsearch-plugin-shim/src/main/java/org/apache/ranger/authorization/elasticsearch/plugin/RangerElasticsearchPlugin.java 2af13f87f
>
>
> Diff: https://reviews.apache.org/r/75217/diff/1/
>
>
> Testing
> -------
>
> ElasticSearchAccessAuditsServiceTest
>
> Write Test ->
>
> 11:37:55.892 [main] INFO org.apache.ranger.audit.destination.AuditDestination -- AuditDestination() enter
> 11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- BaseAuditProvider.init()
> 11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- propPrefix=ranger.audit.elasticsearch
> 11:37:55.926 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
> 11:37:55.938 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- Using providerName from property prefix. providerName=elasticsearch
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- providerName=elasticsearch
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.enabled=false
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.interval.sec=300
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.enabled=false
> 11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.interval.sec=300
> 11:37:55.939 [main] INFO org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Connecting to ElasticSearch: User:elastic, http://localhost:9200/ranger_audits
> log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
> log4j:WARN Please initialize the log4j system properly.
> log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
> 11:37:57.298 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Index exists
> 11:37:57.602 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Indexed
>
>
> Read test ->
>
> 11:36:57.967 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- Running searchXAccessAudits:
> 11:36:57.980 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchMgr -- Initializing ElasticSearch User:elastic, http://localhost:9200/ranger_audits
> 11:36:58.002 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
> 11:36:58.018 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
> log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
> log4j:WARN Please initialize the log4j system properly.
> log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
> 11:36:59.868 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- searchXAccessAudits results (0 items):
>
>
> File Attachments
> ----------------
>
> Tests
> https://reviews.apache.org/media/uploaded/files/2024/09/27/9bc25394-eb0e-498e-885c-57ab17e53145__ExampleDoc.png
> Test2
> https://reviews.apache.org/media/uploaded/files/2024/09/27/7cae8430-9f5c-4e75-86a3-bd3d82feb019__DocsElastic.png
> Test3
> https://reviews.apache.org/media/uploaded/files/2024/09/27/ee8bdb51-53f1-49da-8428-c2566b785085__AuditsApacheRanger.png
>
>
> Thanks,
>
> Fernando Arribas
>
>
Re: Review Request 75217: RANGER-4939: Upgrade Elasticsearch version to 7.17.24
Posted by Fernando Arribas <fe...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75217/
-----------------------------------------------------------
(Updated Sept. 27, 2024, 9:41 a.m.)
Review request for ranger.
Repository: ranger
Description
-------
Elasticsearch version 7.10.2 is affected by a high vulnerability CVE-2023-31418. You must upgrade to version 7.17.22 to fix this vulnerability.
Diffs
-----
embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/ElasticSearchIndexBootStrapper.java 15a16e41f
pom.xml 7c2390fa8
ranger-elasticsearch-plugin-shim/src/main/java/org/apache/ranger/authorization/elasticsearch/plugin/RangerElasticsearchPlugin.java 2af13f87f
Diff: https://reviews.apache.org/r/75217/diff/1/
Testing
-------
ElasticSearchAccessAuditsServiceTest
Write Test ->
11:37:55.892 [main] INFO org.apache.ranger.audit.destination.AuditDestination -- AuditDestination() enter
11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- BaseAuditProvider.init()
11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- propPrefix=ranger.audit.elasticsearch
11:37:55.926 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
11:37:55.938 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- Using providerName from property prefix. providerName=elasticsearch
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- providerName=elasticsearch
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.enabled=false
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.interval.sec=300
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.enabled=false
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.interval.sec=300
11:37:55.939 [main] INFO org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Connecting to ElasticSearch: User:elastic, http://localhost:9200/ranger_audits
log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
11:37:57.298 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Index exists
11:37:57.602 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Indexed
Read test ->
11:36:57.967 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- Running searchXAccessAudits:
11:36:57.980 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchMgr -- Initializing ElasticSearch User:elastic, http://localhost:9200/ranger_audits
11:36:58.002 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
11:36:58.018 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
11:36:59.868 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- searchXAccessAudits results (0 items):
File Attachments (updated)
----------------
Tests
https://reviews.apache.org/media/uploaded/files/2024/09/27/9bc25394-eb0e-498e-885c-57ab17e53145__ExampleDoc.png
Test2
https://reviews.apache.org/media/uploaded/files/2024/09/27/7cae8430-9f5c-4e75-86a3-bd3d82feb019__DocsElastic.png
Test3
https://reviews.apache.org/media/uploaded/files/2024/09/27/ee8bdb51-53f1-49da-8428-c2566b785085__AuditsApacheRanger.png
Thanks,
Fernando Arribas
Re: Review Request 75217: RANGER-4939: Upgrade Elasticsearch version to 7.17.24
Posted by Fernando Arribas <fe...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/75217/
-----------------------------------------------------------
(Updated Sept. 27, 2024, 9:38 a.m.)
Review request for ranger.
Repository: ranger
Description
-------
Elasticsearch version 7.10.2 is affected by a high vulnerability CVE-2023-31418. You must upgrade to version 7.17.22 to fix this vulnerability.
Diffs
-----
embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/ElasticSearchIndexBootStrapper.java 15a16e41f
pom.xml 7c2390fa8
ranger-elasticsearch-plugin-shim/src/main/java/org/apache/ranger/authorization/elasticsearch/plugin/RangerElasticsearchPlugin.java 2af13f87f
Diff: https://reviews.apache.org/r/75217/diff/1/
Testing (updated)
-------
ElasticSearchAccessAuditsServiceTest
Write Test ->
11:37:55.892 [main] INFO org.apache.ranger.audit.destination.AuditDestination -- AuditDestination() enter
11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- BaseAuditProvider.init()
11:37:55.900 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- propPrefix=ranger.audit.elasticsearch
11:37:55.926 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
11:37:55.938 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- Using providerName from property prefix. providerName=elasticsearch
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- providerName=elasticsearch
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.enabled=false
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- xasecure.audit.log.status.log.interval.sec=300
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.enabled=false
11:37:55.938 [main] INFO org.apache.ranger.audit.provider.BaseAuditHandler -- ranger.audit.elasticsearch.status.log.interval.sec=300
11:37:55.939 [main] INFO org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Connecting to ElasticSearch: User:elastic, http://localhost:9200/ranger_audits
log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
11:37:57.298 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Index exists
11:37:57.602 [main] DEBUG org.apache.ranger.audit.destination.ElasticSearchAuditDestination -- Indexed
Read test ->
11:36:57.967 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- Running searchXAccessAudits:
11:36:57.980 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchMgr -- Initializing ElasticSearch User:elastic, http://localhost:9200/ranger_audits
11:36:58.002 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- ==> MiscUtil.initLocalHost()
11:36:58.018 [main] DEBUG org.apache.ranger.audit.provider.MiscUtil -- <== MiscUtil.initLocalHost()
log4j:WARN No appenders could be found for logger (org.apache.http.impl.nio.client.MainClientExec).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
11:36:59.868 [main] INFO org.apache.ranger.elasticsearch.ElasticSearchAccessAuditsServiceTest -- searchXAccessAudits results (0 items):
Thanks,
Fernando Arribas