Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RELEASE] Release version 1.3.11 #3630

Closed
21 of 34 tasks
github-actions bot opened this issue Jun 14, 2023 · 10 comments
Closed
21 of 34 tasks

[RELEASE] Release version 1.3.11 #3630

github-actions bot opened this issue Jun 14, 2023 · 10 comments
Assignees

Comments

@github-actions
Copy link
Contributor

github-actions bot commented Jun 14, 2023

Release OpenSearch and OpenSearch Dashboards 1.3.11

I noticed that a manifest was automatically created in manifests/1.3.11. Please follow the following checklist to make a release.

How to use this issue

This Release Issue

This issue captures the state of the OpenSearch release, its assignee is responsible for driving the release. Please contact them or @mention them on this issue for help. There are linked issues on components of the release where individual components can be tracked. More details are included in the Maintainers Release owner section.

Release Steps

There are several steps to the release process, these steps are completed as the whole release and components that are behind present risk to the release. The release owner completes the tasks in this ticket, whereas component owners resolve tasks on their ticket in their repositories.

Steps have completion dates for coordinating efforts between the components of a release; components can start as soon as they are ready far in advance of a future release.

Component List

To aid in understanding the state of the release there is a table with status indicating each component state. This is updated based on the status of the component issues.

Preparation

  • Assign this issue to a release owner.
  • Declare a pencils down date for new features to be merged.
  • June 22nd, 2023 is pencils down date for feature freeze.
  • Update this issue so all 1.3.11 placeholders have actual dates.
  • Document any new quality requirements or changes.
  • Finalize scope and feature set and update the Public Roadmap.
  • Create a release issue in every component repo based on component release issue template and link back to this issue, update Components section with these links.
  • Ensure the label is created in each component repo for this new version, and the next minor release. Create a version label
  • Ensure that all release issues created above are assigned to an owner in the component team.
  • Increase the build frequency for the this release from once a day (H 1 * * *) to once every hour (H/60 * * * *) in jenkinsFile.

Code Complete - Ends June 22nd, 2023

Release testing - Ends June 27th, 2023

  • Declare a release candidate build, and provide the instructions with the release candidates for teams on testing (June 23rd, 2023).
  • Stop builds for this version of OpenSearch and/or OpenSearch Dashboards in order to avoid accidental commits going in unknowingly. Restart only if necessary else manually run the build workflow and declare new release candidate.
  • After generate the release candidates, raise PR to lock input manifest refs of both OS and OSD builds with the commit ids from distribution manifest of the release candidates.
  • Sanity Testing (June 23rd, 2023 - June 27th, 2023): Sanity testing and fixing of critical issues found by teams. Teams test their components within the distribution, ensuring integration, backwards compatibility, and perf tests pass.
  • Publish all test results in the comments of this issue.

Performance testing validation - Ends June 27th, 2023

  • Performance tests do not show a regression.
  • Longevity tests do not show any issues.

Release - Ends June 29th, 2023

Post Release

  • Create release tags for each component (Jenkins job name: release-tag-creation).
  • Replace refs in manifests/1.3.11 with tags and remove checks.
  • If this is a major or minor version release, stop building previous patch version.
  • Generate distribution release notes reviewed by PM team for opensearch-build repository.
  • Increment version for Helm Charts (sample PR) for the 1.3.11 release.
  • Increment version for Ansible Charts (sample PR) for the 1.3.11 release.
  • Prepare for next patch release by incrementing patch versions for each component.
  • Update this template with any new or missed steps.
  • Create an issue for a retrospective, solicit feedback, and publish a summary.

Components

Replace with links to all component tracking issues.

Component On track Release Notes
{COMPONENT_ISSUE_LINK} {INDICATOR}} {STATUS}
Legend

Symbol Meaning
🟢 On track with overall release
🟡 Missed last milestone
🔴 Missed multiple milestones

@github-actions github-actions bot added release untriaged Issues that have not yet been triaged v1.3.11 labels Jun 14, 2023
@jordarlu jordarlu assigned jordarlu and Divyaasm and unassigned Divyaasm Jun 14, 2023
@zelinh zelinh removed the untriaged Issues that have not yet been triaged label Jun 15, 2023
@peterzhuamazon peterzhuamazon pinned this issue Jun 19, 2023
@jordarlu
Copy link
Contributor

jordarlu commented Jun 23, 2023

We have release candidates built and ready for testing.


OpenSearch Docker

Start without security
Docker command docker pull docker pull opensearchstaging/opensearch:1.3.11.8029 && docker run -it -d -p 9200:9200 -e "discovery.type=single-node" -e "DISABLE_SECURITY_PLUGIN=true" opensearchstaging/opensearch:1.3.11.8029
Connect command curl http://localhost:9200

Start with security
Docker command docker pull opensearchstaging/opensearch:1.3.11.8029 && docker run -it -d -p 9200:9200 -e "discovery.type=single-node" opensearchstaging/opensearch:1.3.11.8029
Connect command curl --insecure https://admin:admin@localhost:9200

OpenSearch Dashboards Docker

Start without security
Docker command docker pull opensearchstaging/opensearch-dashboards:1.3.11.6320 && docker run -it -d --network="host" -e "DISABLE_SECURITY_DASHBOARDS_PLUGIN=true" opensearchstaging/opensearch-dashboards:1.3.11.6320
URL http://localhost:5601

Start with security
Docker command docker pull opensearchstaging/opensearch-dashboards:1.3.11.6320 && docker run -it -d --network="host" opensearchstaging/opensearch-dashboards:1.3.11.6320
URL http://localhost:5601

Use below artifacts to deploy OpenSearch and OpenSearch Dashboards on different platforms

OpenSearch - Build 8029

OpenSearch Dashboards - Build 6320

How to install via yum, tarball, windows etc?]

@jordarlu
Copy link
Contributor

jordarlu commented Jun 23, 2023

Integ Test Results

OpenSearch 8029 integ-test result

Failure with rpm x64 🔴

2023-06-23 21:37:38 ERROR    | index-management     | with-security        | FAIL  |
2023-06-23 21:37:38 ERROR    | index-management     | without-security     | FAIL  |

Success with rpm arm64

Failure with tar x64 🔴

2023-06-23 21:40:40 ERROR    | index-management     | without-security     | FAIL  |

Failure with tar arm64 🔴

2023-06-23 21:46:51 ERROR    | index-management     | without-security     | FAIL  |

OpenSearch Dashboards 6320 integ-test result

Failure with rpm x64 🔴

2023-06-23 21:23:22 ERROR    | alertingDashboards   | without-security     | FAIL  |
2023-06-23 21:44:13 ERROR    | observabilityDashboards | with-security        | FAIL  |
2023-06-23 21:44:13 ERROR    | observabilityDashboards | without-security     | FAIL  |
2023-06-23 21:29:06 ERROR    | reportsDashboards    | with-security        | FAIL  |
2023-06-23 21:29:06 ERROR    | reportsDashboards    | without-security     | FAIL  |

Failure with rpm arm64 🔴

2023-06-23 21:27:32 ERROR    | alertingDashboards   | without-security     | FAIL  |
2023-06-23 21:56:23 ERROR    | observabilityDashboards | with-security        | FAIL  |
2023-06-23 21:32:29 ERROR    | reportsDashboards    | with-security        | FAIL  |
2023-06-23 21:32:29 ERROR    | reportsDashboards    | without-security     | FAIL  |

Failure with tar x64 🔴

2023-06-23 21:45:11 ERROR    | observabilityDashboards | without-security     | FAIL  |
2023-06-23 21:32:35 ERROR    | reportsDashboards    | with-security        | FAIL  |
2023-06-23 21:32:35 ERROR    | reportsDashboards    | without-security     | FAIL  |
2023-06-23 21:14:00 ERROR    | securityDashboards   | with-security        | FAIL  |

Failure with tar arm64 🔴

2023-06-23 21:28:32 ERROR    | alertingDashboards   | without-security     | FAIL  |
2023-06-23 21:54:57 ERROR    | observabilityDashboards | without-security     | FAIL  |
2023-06-23 21:34:14 ERROR    | reportsDashboards    | with-security        | FAIL  |
2023-06-23 21:34:14 ERROR    | reportsDashboards    | without-security     | FAIL  |

@stephen-crawford
Copy link
Contributor

Do we have any updates on the status of this? It looks like all the failures are related or similar. For instance, the SecurityDashboards failure comes after successful cluster checks with an eventual output of

available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:10:28.208Z","state":"green","icon":"success","uiColor":"secondary"}]},"metrics":{"last_updated":"2023-06-23T21:10:25.155Z","collection_interval_in_millis":5000,"os":{"platform":"linux","platformRelease":"linux-5.10.178-162.673.amzn2.x86_64","load":{"1m":6.86376953125,"5m":4.615234375,"15m":2.19677734375},"memory":{"total_in_bytes":32809476096,"free_in_bytes":4303745024,"used_in_bytes":28505731072},"uptime_in_millis":892000,"distro":"RHEL","distroRelease":"RHEL-undefined"},"process":{"memory":{"heap":{"total_in_bytes":106291200,"used_in_bytes":85187552,"size_limit":1526909922},"resident_set_size_in_bytes":145252352},"pid":255,"event_loop_delay":0.12347099999897182,"uptime_in_millis":32223.999999999996},"response_times":{"avg_in_millis":0,"max_in_millis":0},"concurrent_connections":0,"requests":{"disconnects":0,"total":0,"statusCodes":{},"status_codes":{}}}}

2023-06-23 21:10:28 INFO     Service is available

2023-06-23 21:10:28 INFO     Waiting for service to become available

2023-06-23 21:10:28 INFO     Pinging service attempt 0

2023-06-23 21:10:28 INFO     Pinging https://localhost:9200/_cluster/health

2023-06-23 21:10:28 INFO     200: {"cluster_name":"opensearch","status":"green","timed_out":false,"number_of_nodes":1,"number_of_data_nodes":1,"discovered_master":true,"active_primary_shards":2,"active_shards":2,"relocating_shards":0,"initializing_shards":0,"unassigned_shards":0,"delayed_unassigned_shards":0,"number_of_pending_tasks":0,"number_of_in_flight_fetch":0,"task_max_waiting_in_queue_millis":0,"active_shards_percent_as_number":100.0}

2023-06-23 21:10:28 INFO     Service is available

2023-06-23 21:10:28 INFO     ===============================================

2023-06-23 21:10:28 INFO     Running integration tests for securityDashboards

2023-06-23 21:10:28 INFO     ===============================================

2023-06-23 21:10:28 INFO     Executing "bash /tmp/tmpawx33_jb/securityDashboards/integtest.sh -b localhost -p 5601 -s true -t securityDashboards -v 1.3.11 -o default" in /tmp/tmpawx33_jb/securityDashboards

2023-06-23 21:12:48 INFO     Stderr reported for component: securityDashboards

2023-06-23 21:12:48 INFO     npm WARN old lockfile 

npm WARN old lockfile The package-lock.json file was created with an old version of npm,

npm WARN old lockfile so supplemental metadata must be fetched from the registry.

npm WARN old lockfile 

npm WARN old lockfile This is a one-time fix-up, please be patient...

npm WARN old lockfile 

npm WARN deprecated [email protected]: The querystring API is considered Legacy. new code should use the URLSearchParams API instead.

Couldn't determine Mocha version

tput: No value for $TERM and no -T specified

Browserslist: caniuse-lite is outdated. Please run:

npx browserslist@latest --update-db


Why you should do it regularly:

https://github.com/browserslist/browserslist#browsers-data-updating

Couldn't determine Mocha version

tput: No value for $TERM and no -T specified

error Command failed with exit code 1.

In comparison, alertign dashboards for tar arm x64 comes out with

available","since":"2023-06-23T21:20:26.838Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:20:26.838Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:20:26.838Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:20:26.838Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:20:26.838Z","state":"green","icon":"success","uiColor":"secondary"},{"id":"plugin:[email protected]","message":"All dependencies are available","since":"2023-06-23T21:20:26.838Z","state":"green","icon":"success","uiColor":"secondary"}]},"metrics":{"last_updated":"2023-06-23T21:20:22.950Z","collection_interval_in_millis":5000,"os":{"platform":"linux","platformRelease":"linux-5.10.178-162.673.amzn2.aarch64","load":{"1m":6.6806640625,"5m":6.12353515625,"15m":3.68408203125},"memory":{"total_in_bytes":33023156224,"free_in_bytes":3338104832,"used_in_bytes":29685051392},"uptime_in_millis":1485000,"distro":"RHEL","distroRelease":"RHEL-undefined"},"process":{"memory":{"heap":{"total_in_bytes":80080896,"used_in_bytes":68770360,"size_limit":1526909922},"resident_set_size_in_bytes":112513024},"pid":3477,"event_loop_delay":0.24886799999512732,"uptime_in_millis":22639},"response_times":{"avg_in_millis":0,"max_in_millis":0},"concurrent_connections":0,"requests":{"disconnects":0,"total":0,"statusCodes":{},"status_codes":{}}}}

2023-06-23 21:20:26 INFO     Service is available

2023-06-23 21:20:26 INFO     Waiting for service to become available

2023-06-23 21:20:26 INFO     Pinging service attempt 0

2023-06-23 21:20:26 INFO     Pinging http://localhost:9200/_cluster/health

2023-06-23 21:20:26 INFO     200: {"cluster_name":"opensearch","status":"green","timed_out":false,"number_of_nodes":1,"number_of_data_nodes":1,"discovered_master":true,"active_primary_shards":1,"active_shards":1,"relocating_shards":0,"initializing_shards":0,"unassigned_shards":0,"delayed_unassigned_shards":0,"number_of_pending_tasks":0,"number_of_in_flight_fetch":0,"task_max_waiting_in_queue_millis":0,"active_shards_percent_as_number":100.0}

2023-06-23 21:20:26 INFO     Service is available

2023-06-23 21:20:26 INFO     ===============================================

2023-06-23 21:20:26 INFO     Running integration tests for alertingDashboards

2023-06-23 21:20:26 INFO     ===============================================

2023-06-23 21:20:26 INFO     Executing "bash /tmp/tmp142eium8/alertingDashboards/integtest.sh -b localhost -p 5601 -s false -t alertingDashboards -v 1.3.11 -o default" in /tmp/tmp142eium8/alertingDashboards

2023-06-23 21:28:30 INFO     Stderr reported for component: alertingDashboards

2023-06-23 21:28:30 INFO     tput: No value for $TERM and no -T specified

Browserslist: caniuse-lite is outdated. Please run:

  npx browserslist@latest --update-db

  Why you should do it regularly: https://github.com/browserslist/browserslist#browsers-data-updating

tput: No value for $TERM and no -T specified

error Command failed with exit code 1.

So the same issue on the surface but nothing obviously specific to one plugin or another.

@jordarlu
Copy link
Contributor

Docker-Scan CVEs: OpenSearch, OpenSearch DashBoards

@jordarlu
Copy link
Contributor

Docker-Scan CVEs re-run after rebuilding to mitigate CVEs related with AL2 : OpenSearch, OpenSearch DashBoards

@peterzhuamazon
Copy link
Member

Native plugin installation:

./opensearch-plugin install repository-s3
-> Installing repository-s3
-> Downloading repository-s3 from opensearch
[=================================================] 100%
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@     WARNING: plugin requires additional permissions     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
* java.lang.RuntimePermission accessDeclaredMembers
* java.lang.RuntimePermission getClassLoader
* java.lang.reflect.ReflectPermission suppressAccessChecks
* java.net.NetPermission setDefaultAuthenticator
* java.net.SocketPermission * connect,resolve
* java.util.PropertyPermission opensearch.allow_insecure_settings read,write
See http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html
for descriptions of what these permissions allow and the associated risks.

Continue with installation? [y/N]y
-> Installed repository-s3 with folder name repository-s3

@peterzhuamazon
Copy link
Member

peterzhuamazon commented Jun 29, 2023

ARM64 docker run:


opensearch-dashboards  | {"type":"log","@timestamp":"2023-06-29T21:12:29Z","tags":["info","plugins-system"],"pid":1,"message":"Starting [46] plugins: [alertingDashboards,usageCollection,opensearchDashboardsUsageCollection,opensearchDashboardsLegacy,mapsLegacy,share,opensearchUiShared,legacyExport,embeddable,expressions,data,home,console,apmOss,management,indexPatternManagement,advancedSettings,savedObjects,securityDashboards,reportsDashboards,indexManagementDashboards,anomalyDetectionDashboards,dashboard,visualizations,visTypeVega,visTypeTimeline,timeline,visTypeTable,visTypeMarkdown,tileMap,regionMap,customImportMapDashboards,inputControlVis,ganttChartDashboards,visualize,queryWorkbenchDashboards,notificationsDashboards,charts,visTypeVislib,visTypeTimeseries,visTypeTagcloud,visTypeMetric,observabilityDashboards,discover,savedObjectsManagement,bfetch]"}
opensearch-node1       | [2023-06-29T21:12:29,290][INFO ][o.o.s.s.ConfigHelper     ] [opensearch-node1] Index .opendistro_security already contains doc with id whitelist, skipping update.
opensearch-node1       | [2023-06-29T21:12:29,298][INFO ][o.o.s.s.ConfigHelper     ] [opensearch-node1] Will update 'allowlist' with /usr/share/opensearch/config/opensearch-security/allowlist.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
opensearch-node1       | [2023-06-29T21:12:29,319][INFO ][o.o.s.s.ConfigHelper     ] [opensearch-node1] Index .opendistro_security already contains doc with id allowlist, skipping update.
opensearch-node1       | [2023-06-29T21:12:29,319][INFO ][o.o.s.s.ConfigHelper     ] [opensearch-node1] Will update 'audit' with /usr/share/opensearch/config/opensearch-security/audit.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
opensearch-node1       | [2023-06-29T21:12:29,382][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node1] Detected cluster change event for destination migration
opensearch-node1       | [2023-06-29T21:12:29,383][INFO ][o.o.s.s.ConfigHelper     ] [opensearch-node1] Index .opendistro_security already contains doc with id audit, skipping update.
opensearch-node2       | [2023-06-29T21:12:29,403][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node2] Detected cluster change event for destination migration
opensearch-node1       | [2023-06-29T21:12:29,512][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node1] Detected cluster change event for destination migration
opensearch-node2       | [2023-06-29T21:12:29,516][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node2] Detected cluster change event for destination migration
opensearch-dashboards  | {"type":"log","@timestamp":"2023-06-29T21:12:29Z","tags":["listening","info"],"pid":1,"message":"Server running at http://0.0.0.0:5601"}
opensearch-node1       | [2023-06-29T21:12:29,823][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node1] Detected cluster change event for destination migration
opensearch-node2       | [2023-06-29T21:12:29,841][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node2] Detected cluster change event for destination migration
opensearch-node2       | [2023-06-29T21:12:29,844][INFO ][o.o.c.r.a.AllocationService] [opensearch-node2] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[security-auditlog-2021.12.11][0]]]).
opensearch-node1       | [2023-06-29T21:12:29,906][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node1] Detected cluster change event for destination migration
opensearch-node2       | [2023-06-29T21:12:29,911][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [opensearch-node2] Detected cluster change event for destination migration
opensearch-node1       | [2023-06-29T21:12:29,915][INFO ][stdout                   ] [opensearch-node1] [FINE] No subscribers registered for event class org.opensearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
opensearch-dashboards  | {"type":"log","@timestamp":"2023-06-29T21:12:29Z","tags":["info","http","server","OpenSearchDashboards"],"pid":1,"message":"http server running at http://0.0.0.0:5601"}
opensearch-node1       | [2023-06-29T21:12:29,916][INFO ][stdout                   ] [opensearch-node1] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent
opensearch-node1       | [2023-06-29T21:12:29,917][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing on REST API is enabled.
opensearch-node1       | [2023-06-29T21:12:29,917][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from REST API auditing.
opensearch-node1       | [2023-06-29T21:12:29,918][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing on Transport API is enabled.
opensearch-node1       | [2023-06-29T21:12:29,918][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from Transport API auditing.
opensearch-node1       | [2023-06-29T21:12:29,919][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing of request body is enabled.
opensearch-node1       | [2023-06-29T21:12:29,919][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Bulk requests resolution is disabled during request auditing.
opensearch-node1       | [2023-06-29T21:12:29,919][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Index resolution is enabled during request auditing.
opensearch-node1       | [2023-06-29T21:12:29,919][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Sensitive headers auditing is enabled.
opensearch-node1       | [2023-06-29T21:12:29,919][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing requests from kibanaserver users is disabled.
opensearch-node1       | [2023-06-29T21:12:29,922][WARN ][o.o.s.a.r.AuditMessageRouter] [opensearch-node1] No endpoint configured for categories [BAD_HEADERS, FAILED_LOGIN, MISSING_PRIVILEGES, GRANTED_PRIVILEGES, OPENDISTRO_SECURITY_INDEX_ATTEMPT, SSL_EXCEPTION, AUTHENTICATED, INDEX_EVENT, COMPLIANCE_DOC_READ, COMPLIANCE_DOC_WRITE, COMPLIANCE_EXTERNAL_CONFIG, COMPLIANCE_INTERNAL_CONFIG_READ, COMPLIANCE_INTERNAL_CONFIG_WRITE], using default endpoint
opensearch-node1       | [2023-06-29T21:12:29,923][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing of external configuration is disabled.
opensearch-node1       | [2023-06-29T21:12:29,924][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing of internal configuration is enabled.
opensearch-node1       | [2023-06-29T21:12:29,924][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing only metadata information for read request is enabled.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing will watch {} for read requests.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing read operation requests from kibanaserver users is disabled.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing only metadata information for write request is enabled.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing diffs for write requests is disabled.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing write operation requests from kibanaserver users is disabled.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Auditing will watch <NONE> for write requests.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] .opendistro_security is used as internal security index.
opensearch-node1       | [2023-06-29T21:12:29,925][INFO ][o.o.s.a.i.AuditLogImpl   ] [opensearch-node1] Internal index used for posting audit logs is null
opensearch-node1       | [2023-06-29T21:12:29,926][INFO ][o.o.s.c.ConfigurationRepository] [opensearch-node1] Hot-reloading of audit configuration is enabled
opensearch-node1       | [2023-06-29T21:12:29,926][INFO ][o.o.s.c.ConfigurationRepository] [opensearch-node1] Node 'opensearch-node1' initialized
 curl https://localhost:9200 -ku admin:admin
{
  "name" : "opensearch-node1",
  "cluster_name" : "opensearch-cluster",
  "cluster_uuid" : "teJylxlBQVKqXt_doKdSxQ",
  "version" : {
    "distribution" : "opensearch",
    "number" : "2.2.0",
    "build_type" : "tar",
    "build_hash" : "b1017fa3b9a1c781d4f34ecee411e0cdf930a515",
    "build_date" : "2022-08-09T02:28:05.169390805Z",
    "build_snapshot" : false,
    "lucene_version" : "9.3.0",
    "minimum_wire_compatibility_version" : "7.10.0",
    "minimum_index_compatibility_version" : "7.0.0"
  },
  "tagline" : "The OpenSearch Project: https://opensearch.org/"
}

@peterzhuamazon
Copy link
Member

Verify signature:

gpg --verify opensearch-1.3.11-linux-arm64.tar.gz.sig
gpg: Signature made Wed 28 Jun 2023 08:31:52 PM UTC using RSA key ID 542C03B4
gpg: Good signature from "OpenSearch project <[email protected]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: C5B7 4989 65EF D1C2 924B  A9D5 39D3 1987 9310 D3FC
     Subkey fingerprint: 2187 3199 B103 0FCD 49DA  83F8 C2EE 2AF6 542C 03B4

@gaiksaya
Copy link
Member

gaiksaya commented Jul 3, 2023

Closing this issue as 1.3.11 is released!

@gaiksaya gaiksaya closed this as completed Jul 3, 2023
@gaiksaya gaiksaya unpinned this issue Jul 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants