Search merge requestshttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests2023-08-18T22:05:35Zhttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/197Disables unsafe subst for log4j2023-08-18T22:05:35ZOleksii Tsyganov (EPAM)Disables unsafe subst for log4jM10 - Release 0.13Oleksii Tsyganov (EPAM)Oleksii Tsyganov (EPAM)https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/196Patching log4j vulnerability2023-08-18T22:05:37ZSpencer Suttonsuttonsp@amazon.comPatching log4j vulnerabilityPart of the #74 seriesPart of the #74 seriesM10 - Release 0.13Spencer Suttonsuttonsp@amazon.comSpencer Suttonsuttonsp@amazon.comhttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/195log4j-vuln-fix by upgrading to log4j 2.16.0 version2023-08-18T22:05:38ZAshwani Pandeylog4j-vuln-fix by upgrading to log4j 2.16.0 version| module pom changes | Ref Issue
| ------ | ------
| IBM | osdu/platform/system/lib/cloud/ibm/os-core-lib-ibm#2
| core | osdu/platform/system/lib/core/os-core-common#54
Part of the #74 series| module pom changes | Ref Issue
| ------ | ------
| IBM | osdu/platform/system/lib/cloud/ibm/os-core-lib-ibm#2
| core | osdu/platform/system/lib/core/os-core-common#54
Part of the #74 seriesM10 - Release 0.13David Diederichd.diederich@opengroup.orgShrikant GargDavid Diederichd.diederich@opengroup.orghttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/194Vuln fix lucene2023-08-18T22:05:40ZGokul NagareVuln fix luceneM10 - Release 0.13Anuj GuptaShrikant GargAnuj Guptahttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/189Updating dns2023-08-18T22:05:41ZVibhuti Sharma [Microsoft]Updating dnsM10 - Release 0.13Vibhuti Sharma [Microsoft]Vibhuti Sharma [Microsoft]https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/186Stabilize Search Service With Postman Collection (GONRG-3817)2023-08-18T22:05:45ZAnastasiia GelmutStabilize Search Service With Postman Collection (GONRG-3817)# Description:
Fixed SonarLint comments.
# How to test:
Search Service can be tested with the help of business cases.
# Changes include:
- [x] Refactor (a non-breaking change that improves code maintainability).
- [ ] Bugfix (a non-b...# Description:
Fixed SonarLint comments.
# How to test:
Search Service can be tested with the help of business cases.
# Changes include:
- [x] Refactor (a non-breaking change that improves code maintainability).
- [ ] Bugfix (a non-breaking change that solves an issue).
- [ ] New feature (a non-breaking change that adds functionality).
- [ ] Breaking change (a change that is not backward-compatible and/or changes current functionality).
# Changes in:
- [x] GCP
- [ ] Azure
- [ ] AWS
- [ ] IBM
# Dev Checklist:
- [ ] Added Unit Tests, wherever applicable.
- [ ] Updated the Readme, if applicable.
- [x] Existing Tests pass
- [x] Verified functionality locally
- [x] Self Reviewed my code for formatting and complex business logic.M10 - Release 0.13Riabokon Stanislav(EPAM)[GCP]Rostislav Dublin (EPAM)Riabokon Stanislav(EPAM)[GCP]https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/185disabled spring web security2023-08-18T22:05:46ZBhushan Radedisabled spring web securityM10 - Release 0.13Anuj GuptaBhushan RadeAnuj Guptahttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/183Gonrg 3692 update search variable2023-08-18T22:05:49ZIgor Zimovets (EPAM)Gonrg 3692 update search variableM10 - Release 0.13https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/181pointing to cicd ibm-java-git.yml2023-08-18T22:05:51ZAshwani Pandeypointing to cicd ibm-java-git.ymlpointing to cicd ibm-java-git.ymlpointing to cicd ibm-java-git.ymlM10 - Release 0.13Ashwani PandeyAshwani Pandeyhttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/177Fix nested query building for queries with similar properties in it2022-09-16T08:14:35ZRustam Lotsmanenko (EPAM)rustam_lotsmanenko@epam.comFix nested query building for queries with similar properties in it# Description:
Bugfix for nested queries with similar properties in it, example:
~~~
"nested(data.VerticalMeasurements, (VerticalMeasurementID:\"Rotary Table\" AND VerticalMeasurement:(>30)))"
~~~
Such queries were transformed into malfo...# Description:
Bugfix for nested queries with similar properties in it, example:
~~~
"nested(data.VerticalMeasurements, (VerticalMeasurementID:\"Rotary Table\" AND VerticalMeasurement:(>30)))"
~~~
Such queries were transformed into malformed queries like:
~~~
"query_string": {
"query": "(data.data.VerticalMeasurements.VerticalMeasurements.VerticalMeasurementID:\"Rotary Table\" AND VerticalMeasurement:(>30))"
~~~
Which cause 400(Bad request) responses from elastic.<br/>
After fixing queries with similar properties works as expected:
~~~
"query_string": {
"query": "(data.VerticalMeasurements.VerticalMeasurementID:\"Rotary Table\" AND data.VerticalMeasurements.VerticalMeasurement:(>30))",
~~~
Partially solves the issue: https://community.opengroup.org/osdu/platform/system/search-service/-/issues/57
# Changes include:
- [ ] Refactor (a non-breaking change that improves code maintainability).
- [x] Bugfix (a non-breaking change that solves an issue).
- [ ] New feature (a non-breaking change that adds functionality).
- [ ] Breaking change (a change that is not backward-compatible and/or changes current functionality).
# Changes in:
- [x] Common code
# Dev Checklist:
- [x] Added Unit Tests, wherever applicable.
- [ ] Updated the Readme, if applicable.
- [x] Existing Tests pass
- [x] Verified functionality locally
- [x] Self Reviewed my code for formatting and complex business logic.M10 - Release 0.13Rostislav Dublin (EPAM)Rostislav Dublin (EPAM)https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/252Upgrade First Party Library Dependencies for Release 0.142022-03-30T12:41:28ZDavid Diederichd.diederich@opengroup.orgUpgrade First Party Library Dependencies for Release 0.14This automated MR upgrades the first party libraries (other OSDU libraries) to utilize the latest release.
The intent is to keep the OSDU projects utilizing the latest available code to ensure widespread usage and stability.
However, any...This automated MR upgrades the first party libraries (other OSDU libraries) to utilize the latest release.
The intent is to keep the OSDU projects utilizing the latest available code to ensure widespread usage and stability.
However, any library that is older than the previous release will be left as-is, since the upgrade is likely to be more complicated.
Furthermore, the upgrade should only be merged in the CI pipeline reports success.
If this MR has failed, we can spend a little time investigating to see if a trivial upgrade could achieve compatiblity to the new library.
But significant upgrade efforts should not occur on this MR, as part of the release tagging process.
Instead, significant work should be scheduled for a subsequent milestone.
### Dependency Information Before the Upgrade
```
Branch: master
SHA: a69974f655ed37b674bbac7260bd77f1c8b8e131
Maven: 0.14.0-SNAPSHOT
```
| Maven Dependencies | _Root_ | testing/integration-tests/ |
| ----------------------------------------------------- | ------------------ | -------------------------- |
| core-lib-azure | 0.14.0-rc2 | 0.13.0-rc6 |
| core-lib-gcp | 0.14.0-rc2, 0.13.0 | |
| os-core-lib-aws | 0.13.0 | 0.3.16 |
| obm | 0.13.1-SNAPSHOT | |
| oqm | 0.13.0-SNAPSHOT | |
| os-core-common | 0.14.0-rc7 | 0.14.0-rc7 |
| os-core-lib-ibm | 0.13.0 | 0.0.18 |
| osm | 0.13.0-SNAPSHOT | |
| (3rd Party) net.minidev.json-smart | 2.4.7 | 2.4.7, 2.3 |
| (3rd Party) org.apache.logging.log4j.log4j-api | 2.17.1 | 2.11.1, 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-core | 2.17.1 | 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-jul | 2.17.1 | 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-slf4j-impl | 2.17.1 | 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-to-slf4j | 2.17.1 | 2.11.2 |
### Dependency Information After the Upgrade
```
Branch: dependency-upgrade
SHA: 11a6d5c8bb48798a5943181b0ea791bba953b702
Maven: 0.14.0-SNAPSHOT
```
| Maven Dependencies | _Root_ | testing/integration-tests/ |
| ----------------------------------------------------- | ------ | -------------------------- |
| core-lib-azure | 0.14.0 | 0.13.0-rc6 |
| core-lib-gcp | 0.14.0 | |
| os-core-lib-aws | 0.14.0 | 0.3.16 |
| obm | 0.14.0 | |
| oqm | 0.14.0 | |
| os-core-common | 0.14.0 | 0.14.0 |
| os-core-lib-ibm | 0.14.0 | 0.0.18 |
| osm | 0.14.0 | |
| (3rd Party) net.minidev.json-smart | 2.4.7 | 2.4.7, 2.3 |
| (3rd Party) org.apache.logging.log4j.log4j-api | 2.17.1 | 2.11.1, 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-core | 2.17.1 | 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-jul | 2.17.1 | 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-slf4j-impl | 2.17.1 | 2.13.3 |
| (3rd Party) org.apache.logging.log4j.log4j-to-slf4j | 2.17.1 | 2.11.2 |M11 - Release 0.14https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/251Updated search service to use RedisAzureCache2023-08-18T22:04:59ZShiv SinghUpdated search service to use RedisAzureCacheM11 - Release 0.14Shiv SinghShiv Singhhttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/250Merge branch 'fix-dataformat-vulnerability' into 'master'2022-03-24T11:20:06ZShrikant GargMerge branch 'fix-dataformat-vulnerability' into 'master'fix for dataformat vulnerability
See merge request osdu/platform/system/search-service!248
(cherry picked from commit c9b86d57a02f0623108ef6cca3df874ed9d2fd97)
d8cde341 fix for dataformat vulnerabilityfix for dataformat vulnerability
See merge request osdu/platform/system/search-service!248
(cherry picked from commit c9b86d57a02f0623108ef6cca3df874ed9d2fd97)
d8cde341 fix for dataformat vulnerabilityM11 - Release 0.14Shrikant GargShrikant Garghttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/248fix for dataformat vulnerability2022-03-24T08:00:39ZShrikant Gargfix for dataformat vulnerabilityThis is fix for jackson dataformat vulnerabilityThis is fix for jackson dataformat vulnerabilityM11 - Release 0.14Anuj GuptaShrikant GargAnuj Guptahttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/247Nested query issue832023-08-18T22:05:00ZZhibin MaiNested query issue83Issue [83](https://community.opengroup.org/osdu/platform/system/search-service/-/issues/83)
## Type of change
- [x] Bug Fix
- [ ] Feature
**Please provide link to gitlab issue or ADR(Architecture Decision Record)**
## Does this intr...Issue [83](https://community.opengroup.org/osdu/platform/system/search-service/-/issues/83)
## Type of change
- [x] Bug Fix
- [ ] Feature
**Please provide link to gitlab issue or ADR(Architecture Decision Record)**
## Does this introduce a change in the core logic?
- [YES]
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS
- [ ] Azure
- [ ] GCP
- [ ] IBM
## Does this introduce a breaking change?
- [NO]
## What is the current behavior?
Please check the detail on the issue [83](https://community.opengroup.org/osdu/platform/system/search-service/-/issues/83)
## What is the new/expected behavior?
Please check the detail on the issue [83](https://community.opengroup.org/osdu/platform/system/search-service/-/issues/83)
## Have you added/updated Unit Tests and Integration Tests?
Yes
## Any other useful informationM11 - Release 0.14Zhibin MaiZhibin Maihttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/246Harsheet upgrade springboot2023-08-18T22:05:02ZHarsheet ShahHarsheet upgrade springboot## Type of change
- [ ] Bug Fix - NO
- [ ] Feature - No
**Please provide link to gitlab issue or ADR(Architecture Decision Record)**
## Does this introduce a change in the core logic?
- [YES/NO]- No
## Does this introduce a change i...## Type of change
- [ ] Bug Fix - NO
- [ ] Feature - No
**Please provide link to gitlab issue or ADR(Architecture Decision Record)**
## Does this introduce a change in the core logic?
- [YES/NO]- No
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS - NO
- [ ] Azure - NO
- [ ] GCP - NO
- [ ] IBM - NO
## Does this introduce a breaking change?
- [YES/NO] - NO
## What is the current behavior?
## What is the new/expected behavior?
## Have you added/updated Unit Tests and Integration Tests?
Updated 2 test cases, to be compatible with new dependency, not changing the behavior.
## Any other useful information
Updating the spring boot dependency to 2.4.x Removing explicit dependency of spring boot dependency and taking it from os-common-core.M11 - Release 0.14Harsheet ShahHarsheet Shahhttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/244Use latest core-common RC version2022-09-16T02:12:24ZAlok JoshiUse latest core-common RC versionThis change will consume the security fix made in this [MR](https://community.opengroup.org/osdu/platform/system/lib/core/os-core-common/-/merge_requests/151)This change will consume the security fix made in this [MR](https://community.opengroup.org/osdu/platform/system/lib/core/os-core-common/-/merge_requests/151)M11 - Release 0.14Alok JoshiAlok Joshihttps://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/242sensitive property look-up from env variables(GONRG-4404)2022-03-09T09:53:17ZRustam Lotsmanenko (EPAM)rustam_lotsmanenko@epam.comsensitive property look-up from env variables(GONRG-4404)## Type of change
- [ ] Bug Fix
- [x] Feature
## Does this introduce a change in the core logic?
- [NO]
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS
- [ ] Azure
- [x] GCP
- [ ] IB...## Type of change
- [ ] Bug Fix
- [x] Feature
## Does this introduce a change in the core logic?
- [NO]
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS
- [ ] Azure
- [x] GCP
- [ ] IBM
## Does this introduce a breaking change?
- [NO]M11 - Release 0.14Riabokon Stanislav(EPAM)[GCP]Riabokon Stanislav(EPAM)[GCP]https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/241GONRG-4471: add elastic secrets to search2023-08-18T22:05:04ZOleksandr Kosse (EPAM)GONRG-4471: add elastic secrets to search## Type of change
- [x] Bug Fix
- [ ] Feature
## Does this introduce a change in the core logic?
- [NO]
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS
- [ ] Azure
- [X] GCP
- [ ] IB...## Type of change
- [x] Bug Fix
- [ ] Feature
## Does this introduce a change in the core logic?
- [NO]
## Does this introduce a change in the cloud provider implementation, if so which cloud?
- [ ] AWS
- [ ] Azure
- [X] GCP
- [ ] IBM
## Does this introduce a breaking change?
- [NO]
## What is the current behavior?
Using elastic secrets from partition
## What is the new/expected behavior?
using elastic secrets from environment variables
## Have you added/updated Unit Tests and Integration Tests?
## Any other useful informationM11 - Release 0.14https://community.opengroup.org/osdu/platform/system/search-service/-/merge_requests/239upgrade core lib azure version2023-08-18T22:05:05Zharshit aggarwalupgrade core lib azure versionM11 - Release 0.14harshit aggarwalharshit aggarwal