Discuss the in-use JDK and change/upgrade if agreed upon (from 409)

[gigamorph]

Problem Description: Java is required by Gradle, MLCP, and CoRB. It is deployed in our local development environments as well as an ec2 instance used to deploy to (Gradle), load content within (MLCP), or change content already in MarkLogic (CoRB) to all non-PROD environments. Local development environments are also used to deploy to the shared instances.

To my knowledge, we're using various flavors of OpenJDK 1.8 and 11, all of which are pretty old and likely contain security vulnerabilities.

Expected Behavior/Solution:

• Discuss and upgrade the in-use JDK

Requirements: The scope of this ticket:

1. Select a JDK vendor/source.
2. Select a version thereof.
3. Upgrade all associated environments.

@jac237, any guidance from InfoSec? Note that these installs are not within the MarkLogic clusters but are used to connect to them, as described above.

Needed for promotion: If an item on the list is not needed, it should be crossed off but not removed.

• [ ] Wireframe/Mockup - Mike
• [ ] Committee discussions - Sarah
• [ ] Feasibility/Team discussion - Sarah
• [ ] Backend requirements - TBD
• [ ] Frontend requirements- TBD
• [ ] Are new regression tests required for QA - Amy
• [ ] Questions
• List of questions for discussions. Answers should be documented within the issue.

UAT/LUX Examples:

• Example endpoints from LUX to use for development and testing, if applicable.

Dependencies/Blocks: N/A

Related Github Issues: N/A

Related links: N/A

~Wireframe/Mockup:~ ~Place wireframe/mockup for the proposed solution at end of ticket.~

[prowns]

agenda - team meeting 8/23/24

[clarkepeterf]

I am able to use gradle / MLCP with the latest Temurin / OpenJDK LTS version (Java 21)

Here is my version info: OpenJDK Runtime Environment Temurin-21.0.4+7 (build 21.0.4+7-LTS)

Would we like to install the same on the data loader / pipeline machine?

Is there any other place we should install?

[clarkepeterf]

Looking into FLUX (which we will likely start using instead of MLCP), it says it needs Java 11 or 17, so maybe should consider using one of those. Maybe we upgrade to Java 17 for slightly longer support time.

https://marklogic.github.io/flux/

[clarkepeterf]

I'd say start using java 17

[jffcamp]

Test by loading a few docs into DEV using MLCP

[xinjianguosccs]

upgrade work is recorded in private repo https://git.yale.edu/lux-its/datatransfer/issues/59