LOG-1272: Fix various flaws in elasticsearch5 image related to jaskso…

openshift / origin-aggregated-logging

139 stars 230 forks source link

LOG-1272: Fix various flaws in elasticsearch5 image related to jaskso… #2105

Closed jcantrill closed 3 years ago

jcantrill commented 3 years ago

Description

This PR provides fixes to

Address several CVE in the jackson library for elasticsearch v6.8.1
Converges on a single Dockerfile for upstream and downstream
Relies upon PNC RH artifacts for: elasticsearch, opendistro-security
Upstream build of prometheus-elasticsearch-exporter

Notes:

This PR introduces a dummy zip to get past container build failure for non-existing *.zip in upstream builds
Makes use of cached prometheus-elasticsearch-exporter during downstream build

/cc @ewolinetz @vimalk78

/cherrypick master

Links

https://issues.redhat.com/browse/LOG-1272
5.1 forward port of https://github.com/openshift/origin-aggregated-logging/pull/2104
Additional changes on top of https://github.com/openshift/origin-aggregated-logging/pull/2099

jcantrill commented 3 years ago

/retest

jcantrill commented 3 years ago

/retest

openshift-ci-robot commented 3 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jcantrill, vimalk78

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/openshift/origin-aggregated-logging/blob/master/OWNERS)~~ [jcantrill] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

vimalk78 commented 3 years ago

/refresh

jcantrill commented 3 years ago

/cherrypick master

openshift-cherrypick-robot commented 3 years ago

@jcantrill: base branch (master) needs to differ from target branch (master)

In response to [this](https://github.com/openshift/origin-aggregated-logging/pull/2105#issuecomment-823399218): >/cherrypick master Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.