LOG-1243: Jackson databind bump and other - Githubissues

openshift / origin-aggregated-logging

139 stars 230 forks source link

LOG-1243: Jackson databind bump and other #2104

Closed jcantrill closed 3 years ago

jcantrill commented 3 years ago

Description

This PR provides fixes to

Address several CVE in the jackson library for elasticsearch v6.8.1
Converges on a single Dockerfile for upstream and downstream
Relies upon PNC RH artifacts for: elasticsearch, opendistro-security
Upstream build of prometheus-elasticsearch-exporter

Notes:

This PR introduces a dummy zip to get past container build failure for non-existing *.zip in upstream builds
Makes use of cached prometheus-elasticsearch-exporter during downstream build

/cc @ewolinetz @vimalk78

/cherrypick master

Links

https://issues.redhat.com/browse/LOG-1243
5.0 forward port of https://github.com/openshift/origin-aggregated-logging/pull/2099
replaces https://github.com/openshift/origin-aggregated-logging/pull/2095

openshift-ci-robot commented 3 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jcantrill, vimalk78

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/openshift/origin-aggregated-logging/blob/release-5.0/OWNERS)~~ [jcantrill] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment