Partition merge requestshttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests2023-04-07T14:54:19Zhttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/374ReadOnlyRootFileSystem changes for AWS2023-04-07T14:54:19ZAbhay JoshiReadOnlyRootFileSystem changes for AWScommit 0687fc72
Author: Abhay <bios@amazon.com>
Date: Tue Mar 21 2023 08:40:49 GMT-0700 (Pacific Daylight Time)
removing old ssl stuff
commit c92018eb
Author: Abhay <bios@amazon.com>
Date: Tue Mar 21 2023 07:29:45 GMT-0700 (Pacific...commit 0687fc72
Author: Abhay <bios@amazon.com>
Date: Tue Mar 21 2023 08:40:49 GMT-0700 (Pacific Daylight Time)
removing old ssl stuff
commit c92018eb
Author: Abhay <bios@amazon.com>
Date: Tue Mar 21 2023 07:29:45 GMT-0700 (Pacific Daylight Time)
Renaming variable
commit 7c541c46
Author: Abhay <bios@amazon.com>
Date: Mon Mar 20 2023 10:47:16 GMT-0700 (Pacific Daylight Time)
adding changes for rootFilesystem
(cherry picked from commit 9939104c3c07626153fd2d84f95f011d9d85a9c3)M18 - Release 0.21Okoun-Ola Fabien HouetoAbhay JoshiOkoun-Ola Fabien Houetohttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/373update AzureIstioSecurityFilter to exclude roles when setting authentication2023-11-08T13:25:17ZMina Otgonboldupdate AzureIstioSecurityFilter to exclude roles when setting authentication## Type of change
- [x] Bug Fix
- [ ] Feature
## Does this introduce a change in the core logic?
- [NO]
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS
- [x] Azure
- [ ] GCP
- [ ] IB...## Type of change
- [x] Bug Fix
- [ ] Feature
## Does this introduce a change in the core logic?
- [NO]
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS
- [x] Azure
- [ ] GCP
- [ ] IBM
## Does this introduce a breaking change?
- [NO]
## What is the current behavior?
AzureIstioSecurityFilter sets roles when setting authentication. Passing roles are redundant as the Partition service does not perform role checks on the SA token. If a user accidentally assigns the roles then AzureIstioSecurityFilter throws the following error. The issue itself is caused due to spring-boot upgrade as mentioned in this [post](https://github.com/Azure/azure-sdk-for-java/issues/26912):
```
final JSONArray roles = Optional.ofNullable((JSONArray) claimsSet.getClaims().get("roles"))
.filter(r -> !r.isEmpty())
.orElse(DEFAULT_ROLE_CLAIM);
```
```
java.lang.ClassCastException
com.nimbusds.jose.shaded.json.JSONArray cannot be cast to net.minidev.json.JSONArray
```
## What is the new/expected behavior?
AzureIstioSecurityFilter doesn't set roles when setting authentication. This will not impact as the partition service does not perform role checks on the SA token. Partition service only authorizes token of a type service principal and issuer with v1 or v2 aad url.M18 - Release 0.21Chad LeongMina OtgonboldChad Leonghttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/372Merge branch 'GONRG-6771_Update_bootstrap_for_minio_external_endpoint' into '...2023-04-06T11:58:05ZVolodymyr Pienskoi [EPAM / GCP]Merge branch 'GONRG-6771_Update_bootstrap_for_minio_external_endpoint' into 'master'GONRG-6771: Update bootstrap for minio external endpoint
See merge request osdu/platform/system/partition!367
(cherry picked from commit ee05894934b5c54b523bad7fdad50b245ae3811e)
74a020b5 GONRG-6771: Replace file.minio.endpoint with o...GONRG-6771: Update bootstrap for minio external endpoint
See merge request osdu/platform/system/partition!367
(cherry picked from commit ee05894934b5c54b523bad7fdad50b245ae3811e)
74a020b5 GONRG-6771: Replace file.minio.endpoint with obm.minio.external.endpoint
8d02a2e8 GONRG-6771: Add obm.minio.ignoreCertCheck
41449b0e GONRG-6771: Remove file.minio properties
b2720879 GONRG-6771: Update NOTICE
cfc14e22 GONRG-6771: Fix typo
7f24eb44 GONRG-6771: Fix typo
a93a8ed4 Merge branch 'master' into GONRG-6771_Update_bootstrap_for_minio_external_endpointM17 - Release 0.20Volodymyr Pienskoi [EPAM / GCP]Volodymyr Pienskoi [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/371Draft: Halka2023-04-05T11:55:02ZAndriy Halka [EPAM / GCP]Draft: Halkahttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/370Draft: Trusted gongr68392023-04-05T11:46:22ZAndriy Halka [EPAM / GCP]Draft: Trusted gongr6839https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/369Merge branch 'fix-partition-dev2' into 'master'2023-04-04T20:57:51ZDanylo Vanin (EPAM)Merge branch 'fix-partition-dev2' into 'master'GONRG-6850: fix tests
See merge request osdu/platform/system/partition!368
(cherry picked from commit 5b8fe748b3d012ebd580729b8fdba1c8930be660)
b969118e GONRG-6850: fix tests
52b97eb3 GONRG-6850: fix tests
4a509363 GONRG-6851: fix testsGONRG-6850: fix tests
See merge request osdu/platform/system/partition!368
(cherry picked from commit 5b8fe748b3d012ebd580729b8fdba1c8930be660)
b969118e GONRG-6850: fix tests
52b97eb3 GONRG-6850: fix tests
4a509363 GONRG-6851: fix testsM17 - Release 0.20Danylo Vanin (EPAM)Danylo Vanin (EPAM)https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/368GONRG-6850: fix tests2023-08-18T15:29:17ZYauheni Rykhter (EPAM)GONRG-6850: fix testsM18 - Release 0.21Yauheni Rykhter (EPAM)Yauheni Rykhter (EPAM)https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/367GONRG-6771: Update bootstrap for minio external endpoint2023-08-18T15:29:19ZVolodymyr Pienskoi [EPAM / GCP]GONRG-6771: Update bootstrap for minio external endpointM18 - Release 0.21Volodymyr Pienskoi [EPAM / GCP]Volodymyr Pienskoi [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/366Draft: Temp internal endpoint for minio [GONRG-6751]2023-07-10T12:24:18ZMikhail Piatliou (EPAM)Draft: Temp internal endpoint for minio [GONRG-6751]Mikhail Piatliou (EPAM)Mikhail Piatliou (EPAM)https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/365Vulnerability fix for IBM2023-03-31T07:41:20ZDevdatta SantraVulnerability fix for IBMVulnerability fix for IBM for netty, tomcat and jackson libs
| CVE-2022-42003 | https://nvd.nist.gov/vuln/detail/CVE-2022-42003 |
|----------------|-------------------------------------------------|
| CVE-2022-45143 | https://nvd.nist.g...Vulnerability fix for IBM for netty, tomcat and jackson libs
| CVE-2022-42003 | https://nvd.nist.gov/vuln/detail/CVE-2022-42003 |
|----------------|-------------------------------------------------|
| CVE-2022-45143 | https://nvd.nist.gov/vuln/detail/CVE-2022-45143 |
| CVE-2022-41881 | https://nvd.nist.gov/vuln/detail/CVE-2022-41881 |M17 - Release 0.20Devdatta SantraDevdatta Santrahttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/364adding some additional infor to README2023-03-24T13:25:16ZMarc Burnie [AWS]adding some additional infor to READMEMarc Burnie [AWS]Marc Burnie [AWS]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/363Renaming dependency helm chart repo to osdu-aws and removing versioning const...2023-03-17T19:46:39ZMarc Burnie [AWS]Renaming dependency helm chart repo to osdu-aws and removing versioning constraintsM17 - Release 0.20Marc Burnie [AWS]Marc Burnie [AWS]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/362[GONRG-6649] Move domainTls var to global2023-08-18T15:29:20ZOleksandr Kosse (EPAM)[GONRG-6649] Move domainTls var to globalM17 - Release 0.20https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/361Fixed vulnerabilities for partition service2023-03-23T13:30:15ZRahul KhapreFixed vulnerabilities for partition serviceRahul KhapreRahul Khaprehttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/360[GONRG-6649] Use global vars in partition2023-08-18T15:29:22ZOleksandr Kosse (EPAM)[GONRG-6649] Use global vars in partitionM17 - Release 0.20https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/359Generate Swagger using springdoc-openapi OAS 3.02023-03-21T05:12:41ZThulasi Dass SubramanianGenerate Swagger using springdoc-openapi OAS 3.0**Link to ADR(Architecture Decision Record)** : [Swagger using springdoc-openapi](https://community.opengroup.org/osdu/platform/system/home/-/issues/97)
## OpenAPI 3.0 related changes
* upgraded to latest **springdoc openapi** latest v...**Link to ADR(Architecture Decision Record)** : [Swagger using springdoc-openapi](https://community.opengroup.org/osdu/platform/system/home/-/issues/97)
## OpenAPI 3.0 related changes
* upgraded to latest **springdoc openapi** latest version [1.6.14](https://mvnrepository.com/artifact/org.springdoc/springdoc-openapi-ui/1.6.14)
* Populate OpenAPI Object fields *\[info, tags, servers, security\]*
* Documented **PartitionApi & Info** API with OpenAPI 3.0 **Annotations**
* Added the standard HTTP Response(4xx, 5x\*\*\*\*x) for API Responses
* Custom Path for
* **Swagger UI**: https://host/context-path/swagger (will redirect to https://host/context-path/swagger-ui/index.html)
* **api-docs (JSON)** : https://host/context-path/api-docs
* **api-docs (YAML)** : https://host/context-path/api-docs.yaml
* Azure Swagger - GLAB Environment (_for Reference_)
* **Swagger UI**: https://osdu-glab.msft-osdu-test.org/api/partition/v1/swagger (will redirect to https://osdu-glab.msft-osdu-test.org/api/partition/v1/swagger-ui/index.html)
* **api-docs (JSON)** : https://osdu-glab.msft-osdu-test.org/api/partition/v1/api-docs
* **api-docs (YAML)** : https://osdu-glab.msft-osdu-test.org/api/partition/v1/api-docs.yaml
## Other Changes
- **Configurable** descriptions managed in [swagger.properties](https://community.opengroup.org/osdu/platform/system/partition/-/blob/az/td-oas/partition-core/src/main/resources/swagger.properties)
- added **Integration Test** cases for _**Swagger-UI, api-docs**_ endpoints
- Deleted HomeController
- Updated Readme for swagger related information
## References
- https://springdoc.org/faq.html#_can_i_use_spring_property_with_swagger_annotations
- https://springdoc.org/migrating-from-springfox.htmlM17 - Release 0.20Thulasi Dass SubramanianThulasi Dass Subramanianhttps://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/358Cherry-pick 'GONRG-6682: Update partition bootstrap' into release/0.192023-03-06T15:32:57ZVolodymyr Pienskoi [EPAM / GCP]Cherry-pick 'GONRG-6682: Update partition bootstrap' into release/0.19GONRG-6682: Update partition bootstrap
See merge request !357
(cherry picked from commit 5306f0cf)GONRG-6682: Update partition bootstrap
See merge request !357
(cherry picked from commit 5306f0cf)M16 - Release 0.19Volodymyr Pienskoi [EPAM / GCP]Volodymyr Pienskoi [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/357GONRG-6682: Update partition bootstrap2023-08-18T15:29:24ZVolodymyr Pienskoi [EPAM / GCP]GONRG-6682: Update partition bootstrapM17 - Release 0.20Volodymyr Pienskoi [EPAM / GCP]Volodymyr Pienskoi [EPAM / GCP]https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/356GONRG-6204: property for Secret service2023-08-18T15:29:25ZYauheni Rykhter (EPAM)GONRG-6204: property for Secret serviceM17 - Release 0.20Yauheni Rykhter (EPAM)Yauheni Rykhter (EPAM)https://community.opengroup.org/osdu/platform/system/partition/-/merge_requests/355GONRG-6573: File service always use https s3 endpoint2023-08-18T15:29:27ZYurii Pelykh [EPAM / GCP]GONRG-6573: File service always use https s3 endpoint- Variable `domainTlsEnabled` added;
- Condition added when to use http and when https while connecting to s3 endpoint.- Variable `domainTlsEnabled` added;
- Condition added when to use http and when https while connecting to s3 endpoint.M17 - Release 0.20Yurii Pelykh [EPAM / GCP]Yurii Pelykh [EPAM / GCP]