Partition merge requestshttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests2023-03-31T07:41:20Zhttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/365Vulnerability fix for IBM2023-03-31T07:41:20ZDevdatta SantraVulnerability fix for IBMVulnerability fix for IBM for netty, tomcat and jackson libs
| CVE-2022-42003 | https://nvd.nist.gov/vuln/detail/CVE-2022-42003 |
|----------------|-------------------------------------------------|
| CVE-2022-45143 | https://nvd.nist.g...Vulnerability fix for IBM for netty, tomcat and jackson libs
| CVE-2022-42003 | https://nvd.nist.gov/vuln/detail/CVE-2022-42003 |
|----------------|-------------------------------------------------|
| CVE-2022-45143 | https://nvd.nist.gov/vuln/detail/CVE-2022-45143 |
| CVE-2022-41881 | https://nvd.nist.gov/vuln/detail/CVE-2022-41881 |M17 - Release 0.20Devdatta SantraDevdatta Santrahttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/363Renaming dependency helm chart repo to osdu-aws and removing versioning const...2023-03-17T19:46:39ZMarc Burnie [AWS]Renaming dependency helm chart repo to osdu-aws and removing versioning constraintsM17 - Release 0.20Marc Burnie [AWS]Marc Burnie [AWS]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/362[GONRG-6649] Move domainTls var to global2023-08-18T15:29:20ZOleksandr Kosse (EPAM)[GONRG-6649] Move domainTls var to globalM17 - Release 0.20https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/361Fixed vulnerabilities for partition service2023-03-23T13:30:15ZRahul KhapreFixed vulnerabilities for partition serviceRahul KhapreRahul Khaprehttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/360[GONRG-6649] Use global vars in partition2023-08-18T15:29:22ZOleksandr Kosse (EPAM)[GONRG-6649] Use global vars in partitionM17 - Release 0.20https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/359Generate Swagger using springdoc-openapi OAS 3.02023-03-21T05:12:41ZThulasi Dass SubramanianGenerate Swagger using springdoc-openapi OAS 3.0**Link to ADR(Architecture Decision Record)** : [Swagger using springdoc-openapi](https://community.opengroup.org/osdu/platform/system/home/-/issues/97)
## OpenAPI 3.0 related changes
* upgraded to latest **springdoc openapi** latest v...**Link to ADR(Architecture Decision Record)** : [Swagger using springdoc-openapi](https://community.opengroup.org/osdu/platform/system/home/-/issues/97)
## OpenAPI 3.0 related changes
* upgraded to latest **springdoc openapi** latest version [1.6.14](https://mvnrepository.com/artifact/org.springdoc/springdoc-openapi-ui/1.6.14)
* Populate OpenAPI Object fields *\[info, tags, servers, security\]*
* Documented **PartitionApi & Info** API with OpenAPI 3.0 **Annotations**
* Added the standard HTTP Response(4xx, 5x\*\*\*\*x) for API Responses
* Custom Path for
* **Swagger UI**: https://host/context-path/swagger (will redirect to https://host/context-path/swagger-ui/index.html)
* **api-docs (JSON)** : https://host/context-path/api-docs
* **api-docs (YAML)** : https://host/context-path/api-docs.yaml
* Azure Swagger - GLAB Environment (_for Reference_)
* **Swagger UI**: https://osdu-glab.msft-osdu-test.org/api/partition/v1/swagger (will redirect to https://osdu-glab.msft-osdu-test.org/api/partition/v1/swagger-ui/index.html)
* **api-docs (JSON)** : https://osdu-glab.msft-osdu-test.org/api/partition/v1/api-docs
* **api-docs (YAML)** : https://osdu-glab.msft-osdu-test.org/api/partition/v1/api-docs.yaml
## Other Changes
- **Configurable** descriptions managed in [swagger.properties](https://community.opengroup.org/osdu/platform/system/partition/-/blob/az/td-oas/partition-core/src/main/resources/swagger.properties)
- added **Integration Test** cases for _**Swagger-UI, api-docs**_ endpoints
- Deleted HomeController
- Updated Readme for swagger related information
## References
- https://springdoc.org/faq.html#_can_i_use_spring_property_with_swagger_annotations
- https://springdoc.org/migrating-from-springfox.htmlM17 - Release 0.20Thulasi Dass SubramanianThulasi Dass Subramanianhttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/358Cherry-pick 'GONRG-6682: Update partition bootstrap' into release/0.192023-03-06T15:32:57ZVolodymyr Pienskoi [EPAM / GCP]Cherry-pick 'GONRG-6682: Update partition bootstrap' into release/0.19GONRG-6682: Update partition bootstrap
See merge request !357
(cherry picked from commit 5306f0cf)GONRG-6682: Update partition bootstrap
See merge request !357
(cherry picked from commit 5306f0cf)M16 - Release 0.19Volodymyr Pienskoi [EPAM / GCP]Volodymyr Pienskoi [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/357GONRG-6682: Update partition bootstrap2023-08-18T15:29:24ZVolodymyr Pienskoi [EPAM / GCP]GONRG-6682: Update partition bootstrapM17 - Release 0.20Volodymyr Pienskoi [EPAM / GCP]Volodymyr Pienskoi [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/356GONRG-6204: property for Secret service2023-08-18T15:29:25ZYauheni Rykhter (EPAM)GONRG-6204: property for Secret serviceM17 - Release 0.20Yauheni Rykhter (EPAM)Yauheni Rykhter (EPAM)https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/355GONRG-6573: File service always use https s3 endpoint2023-08-18T15:29:27ZYurii Pelykh [EPAM / GCP]GONRG-6573: File service always use https s3 endpoint- Variable `domainTlsEnabled` added;
- Condition added when to use http and when https while connecting to s3 endpoint.- Variable `domainTlsEnabled` added;
- Condition added when to use http and when https while connecting to s3 endpoint.M17 - Release 0.20Yurii Pelykh [EPAM / GCP]Yurii Pelykh [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/353GONRG-6532: Rename job2023-08-18T15:29:28ZOleh Miniailov [EPAM / GCP]GONRG-6532: Rename jobM17 - Release 0.20https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/352Cherry-pick 'Removed test validations on cors response headers' into release/...2023-02-16T08:56:11ZDavid Diederichd.diederich@opengroup.orgCherry-pick 'Removed test validations on cors response headers' into release/0.19**Original MR**: !351
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporati...**Original MR**: !351
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporating all changes in the default branch.
These MRs must be approved by the PMC before they are merged, since they alter the scope of the release.
To see more details about the change itself, look at the Original MR listed above.
#### Skipped Pipeline
Normally, pipelines are not executed on the cherry pick branch/MR prior to merging.
This optimization is accepted because the code was tested when it merged into the default branch, and will be tested again in the release branch prior to tagging.
However, if anybody feels that the MR requires further scrutiny -- whether because it had conflicts in the cherry-picking, it interfaces with some drastically altered logic between the branches, or any other reason -- we can run the pipeline here prior to merging.
#### If There's Reason to Run a Pipeline
If you want to see a pipeline result before this merges, first add a comment explaining why you'd like to see the pipeline results so the PMC and others know your thinking.
Then, mark the MR as a Draft MR (using the vertical ellipsis above, choose 'Mark as Draft').
This prevents the MR from being approved & merged accidentally by a busy release coordinator who didn't see your comment.
Finally, if you are a maintainer on the project, launch a pipeline on this branch.
Since this branch is a protected branch and the MR has ~no-detached-pipeline set, all integration tests will run and there's no need for any `trusted-*` branches.
[Launch a Pipeline for this Branch](https://community.opengroup.org/osdu/platform/system/partition/-/pipelines/new?ref=cherry-pick-for-351)M16 - Release 0.19David Diederichd.diederich@opengroup.orgChad LeongSrinivasan NarayananDavid Diederichd.diederich@opengroup.orghttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/351Removed test validations on cors response headers2023-02-16T04:56:45ZManish JangidRemoved test validations on cors response headersRemoved validations on cors response headers in AWS integration testsRemoved validations on cors response headers in AWS integration testsM16 - Release 0.19Manish JangidManish Jangidhttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/350GONRG-6470: Update requests according to vpa2023-02-20T11:54:45ZYurii Pelykh [EPAM / GCP]GONRG-6470: Update requests according to vpa- Resources requests updated according to VPA recommendations.- Resources requests updated according to VPA recommendations.M17 - Release 0.20Yurii Pelykh [EPAM / GCP]Yurii Pelykh [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/349Cherry-pick 'Vul fix ibm partition service' into release/0.192023-02-14T07:43:10ZDavid Diederichd.diederich@opengroup.orgCherry-pick 'Vul fix ibm partition service' into release/0.19**Original MR**: !345
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporati...**Original MR**: !345
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporating all changes in the default branch.
These MRs must be approved by the PMC before they are merged, since they alter the scope of the release.
To see more details about the change itself, look at the Original MR listed above.
#### Skipped Pipeline
Normally, pipelines are not executed on the cherry pick branch/MR prior to merging.
This optimization is accepted because the code was tested when it merged into the default branch, and will be tested again in the release branch prior to tagging.
However, if anybody feels that the MR requires further scrutiny -- whether because it had conflicts in the cherry-picking, it interfaces with some drastically altered logic between the branches, or any other reason -- we can run the pipeline here prior to merging.
#### If There's Reason to Run a Pipeline
If you want to see a pipeline result before this merges, first add a comment explaining why you'd like to see the pipeline results so the PMC and others know your thinking.
Then, mark the MR as a Draft MR (using the vertical ellipsis above, choose 'Mark as Draft').
This prevents the MR from being approved & merged accidentally by a busy release coordinator who didn't see your comment.
Finally, if you are a maintainer on the project, launch a pipeline on this branch.
Since this branch is a protected branch and the MR has ~no-detached-pipeline set, all integration tests will run and there's no need for any `trusted-*` branches.
[Launch a Pipeline for this Branch](https://community.opengroup.org/osdu/platform/system/partition/-/pipelines/new?ref=cherry-pick-for-345)M16 - Release 0.19David Diederichd.diederich@opengroup.orgChad LeongSrinivasan NarayananDavid Diederichd.diederich@opengroup.orghttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/348Cherry-pick 'adding support for EKS 1.23' into release/0.192023-02-11T01:56:38ZMarc Burnie [AWS]Cherry-pick 'adding support for EKS 1.23' into release/0.19Adding support for EKS 1.23
Original MR: osdu/platform/system/partition!346
(cherry picked from commit 6c78dee5744a2b036006b5f87a6d140661a4e0a6)
7ab27469 Upgrade core-common to 0.19.0-rc6
1f873c4f adding support for EKS 1.23Adding support for EKS 1.23
Original MR: osdu/platform/system/partition!346
(cherry picked from commit 6c78dee5744a2b036006b5f87a6d140661a4e0a6)
7ab27469 Upgrade core-common to 0.19.0-rc6
1f873c4f adding support for EKS 1.23M16 - Release 0.19David Diederichd.diederich@opengroup.orgMarc Burnie [AWS]David Diederichd.diederich@opengroup.orghttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/347GONRG-6443: Remove configmap jobs and variables2023-02-20T11:55:43ZYurii Pelykh [EPAM / GCP]GONRG-6443: Remove configmap jobs and variables- Configmap variable `GC_ENABLE_HELM_CONFIG` removed as unused anymore.- Configmap variable `GC_ENABLE_HELM_CONFIG` removed as unused anymore.M17 - Release 0.20Yurii Pelykh [EPAM / GCP]Yurii Pelykh [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/346Adding support for EKS 1.232023-08-15T22:55:47ZMarc Burnie [AWS]Adding support for EKS 1.23M16 - Release 0.19Marc Burnie [AWS]Marc Burnie [AWS]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/345Vul fix ibm partition service2023-03-30T08:07:18ZPintu GuptaVul fix ibm partition servicecve
link
CVE-2022-25857
https://nvd.nist.gov/vuln/detail/CVE-2022-25857
CVE-2022-23181
https://nvd.nist.gov/vuln/detail/CVE-2022-23181
CVE-2022-42252
https://nvd.nist.gov/vuln/detail/CVE-2022-42252
PRISMA-2022-0239
https://gith...cve
link
CVE-2022-25857
https://nvd.nist.gov/vuln/detail/CVE-2022-25857
CVE-2022-23181
https://nvd.nist.gov/vuln/detail/CVE-2022-23181
CVE-2022-42252
https://nvd.nist.gov/vuln/detail/CVE-2022-42252
PRISMA-2022-0239
https://github.com/square/okhttp/issues/6738
CVE-2022-22965
https://nvd.nist.gov/vuln/detail/CVE-2022-22965
CVE-2022-42003
https://nvd.nist.gov/vuln/detail/CVE-2022-42003
CVE-2022-42004
https://nvd.nist.gov/vuln/detail/CVE-2022-42004M16 - Release 0.19Pintu GuptaPintu Guptahttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/342GONRG-6370: Readme update2023-02-20T11:55:43ZYurii Pelykh [EPAM / GCP]GONRG-6370: Readme update- Readme updated with notice about Istio sidecar injection disabling risk.- Readme updated with notice about Istio sidecar injection disabling risk.M17 - Release 0.20Yurii Pelykh [EPAM / GCP]Yurii Pelykh [EPAM / GCP]