Update to kibana 6.8.6 opendistro-security 0.10.1.1

[periklis]

Description

This PR provides upgrades for Kibana and the plugins:

• elastic/kibana: v6.8.1 to v6.8.6 Changelog
• opendistro-for-elasticsearch/security-kibana-plugin: v0.10.0.4 to v0.10.1.1 Changelog
• openshift-logging: Bump compatibility to v6.8.6

Notable changes besides vendoring source code:

• Dockerfile.rhel8: Drop vendored nodejs (v10.15.2) binary in favour of ubi8.nodejs.10 (v10.23.1) binary to ensure security upgrades on production.
• Update rh-manifest.txt via module_list.sh.
• Fix module_list.sh docs to ensure python dependency available on UBI base image for one-time execution.
• Vendoring source code and building plugins:
  • Download elastic/kibana-oss-6.8.6 from https://www.elastic.co/downloads/past-releases/kibana-oss-6-8-6
  • Download opendistro-for-elasticsearch/security-kibana-plugin v0.10.1.1 from https://github.com/opendistro-for-elasticsearch/security-kibana-plugin/releases/tag/v0.10.1.1
  • Unpack & move both under kibana/vendored_tar_src
  • Patch kibana/build-plugins.sh to build plugins for kibana v6.8.6 and OD v0.10.1.1
  • Execute kibana/build-plugins.sh
  • Patch lib/openshift_logging_plugin/package.json to be compatible with kibana v6.8.6

Notable CVEs addressed

• lodash bump to 4.7.13
  • https://bugzilla.redhat.com/show_bug.cgi?id=1849514
  • https://bugzilla.redhat.com/show_bug.cgi?id=1929028
  • https://bugzilla.redhat.com/show_bug.cgi?id=1929029
  • https://bugzilla.redhat.com/show_bug.cgi?id=1931268
  • https://bugzilla.redhat.com/show_bug.cgi?id=1931269

/cc @ewolinetz /assign @jcantrill

/cherry-pick release-4.6

Links

• Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1933978

[periklis]

/hold Waiting for ES 6.8.6 builds to be available

[periklis]

/hold

[openshift-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: periklis To complete the pull request process, please assign ewolinetz after the PR has been reviewed. You can assign the PR to them by writing /assign @ewolinetz in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/openshift/origin-aggregated-logging/blob/master/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

[periklis]

Closing this as it is staged for later.

/close

[openshift-ci-robot]

@periklis: Closed this PR.

In response to [this](https://github.com/openshift/origin-aggregated-logging/pull/2079#issuecomment-800083061): >Closing this as it is staged for later. > >/close Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.