Commit Graph

63 Commits

Author SHA1 Message Date
吴晟 Wu Sheng faf6e2eb9e
Add `Error Prone Annotations` dependency to suppress warnings (#8774) 2022-04-01 00:57:34 +08:00
刘威 1554c087f4
Refactor IoTDB storage plugin and bump up iotdb-session to 0.12.5 (#8755) 2022-03-30 19:19:49 +08:00
kezhenxu94 289427990a
Migrate the HTTP server from Jetty to Armeria (#8673) 2022-03-15 13:38:42 +08:00
kezhenxu94 b1d3f3b637
Expose more ElasticSearch health check related logs (#8652) 2022-03-10 19:19:44 +08:00
kezhenxu94 22e1a89b4a
Bump up PostgreSQL driver to fix CVE (#8497) 2022-02-02 11:18:32 +08:00
刘威 b0a875fe3f
Bump up iotdb-session to 0.12.4 and fix IoTDB storage option bug (#8484)
* Fix IoTDB Storage Option insert null index value.

* Set the default value of SW_STORAGE_IOTDB_SESSIONPOOL_SIZE to 8

* Bump up iotdb-session to 0.12.4

* Update doc
2022-01-30 09:02:39 +08:00
Gao Hongtao 4d803e387f
Fix CVE-2022-23221 (#8464)
* Fix CVE-2022-23221

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
2022-01-22 21:03:08 +08:00
kezhenxu94 2c8504a3ed
Bump up GraphQL related dependencies to latest versions (#8446) 2022-01-19 20:33:25 +08:00
吴晟 Wu Sheng 0d5a289c20
Bump up gRPC/protobuf to fix CVE-2021-22569 (#8405)
* Bump up gRPC/protobuf to fix CVE-2021-2256
2022-01-12 16:39:38 +08:00
吴晟 Wu Sheng 67f6681ba3
Upgrade H2 version to fix GHSA-h376-j262-vhq6 (#8396) 2022-01-07 12:46:12 +08:00
kezhenxu94 62ef59466e
Bump up log4j to 2.17.1 (#8349) 2021-12-29 11:07:48 +08:00
kezhenxu94 8fa4eb7d75
Upgrade H2 version to 2.0.202 to fix CVE-2021-23463 (#8332) 2021-12-23 21:37:00 +08:00
kezhenxu94 5da205ba9b
Remove unused jars and bump up netty version in webapp (#8317) 2021-12-21 13:39:37 +08:00
kezhenxu94 a02dd9c2d1
Bump up log4j2 to 2.17 (#8314) 2021-12-18 22:40:38 +08:00
吴晟 Wu Sheng d8fd3ee563
Remove log4j version properties in webapp (#8285)
* Fix license.

* Remove log4j version properties.

* Fix change log.
2021-12-12 11:45:06 +08:00
kezhenxu94 b3536445bc
Bump up Armeria version to fix CVE (#8236) 2021-12-03 13:09:47 +08:00
刘威 842b5d927e
Support Apache IoTDB as a storage option (#7766)
Support Apache IoTDB as a storage option, mostly refer to previous InfluxDB storage option.
* The Design of Apache IoTDB Storage Option, https://skywalking.apache.org/blog/2021-11-23-design-of-iotdb-storage-option/
2021-11-27 09:04:23 +08:00
Marc Navarro a621a2608e
[Enhancement] Bump grpc and protobuff version to allow building on Mac M1 (#8186)
Upgrade to the latest grpc-java 1.42.1 which is only compatible and [tested against](https://github.com/grpc/grpc-java/pull/8551#discussion_r714182190) 3.17.2, but we can assume that 3.17.3 (which has osx-aarch_64 compatible maven artifacts) is save to use.

We could have also upgrade to the latest grpc-java 1.42.1 and latest protoc 3.19.1, but it can not be directly done, it needs to tweak the grpcs-java internal dependencies. So we choose the safest option and discarded this option because of the following reasons:
 - Protoc 3.19.1 generates code that relies on methods not available in protobuf-java 3.17.2 ([“issue”](https://github.com/protocolbuffers/protobuf/issues/9236#issue-1059594027)) (which java-grpc relies on). So we need to tell grpc-java via dependency management to use 3.19.1 instead of 3.17.2.

Signed-off-by: Marc Navarro Sonnenfeld <marcnavarro@tetrate.io>
2021-11-26 22:06:58 +08:00
kezhenxu94 b63008c61e
Upgrade Kubernetes Java client to 14.0.0, supports GCP token refreshing and fixes some bugs (#8122) 2021-11-13 16:24:19 +08:00
kezhenxu94 508945f552
Upgrade Armeria to 1.12, upgrade OpenSearch test version to 1.1.0 (#7866) 2021-10-08 19:45:33 +08:00
kezhenxu94 1feca85f88
Upgrade netty version to 4.1.68.Final avoid cve-2021-37136 (#7799) 2021-09-25 15:57:26 +08:00
吴晟 Wu Sheng 2d52ad42e1
Fix license of netty-tcnative-boringssl-static (#7784) 2021-09-24 08:44:25 +08:00
kezhenxu94 ec03cca31b
Bump up commons-compress version and polish LAL debug error message (#7668) 2021-09-07 12:18:25 +08:00
Fine0830 96d3c1e5dd
Sync UI (#7667) 2021-09-07 09:19:23 +08:00
kezhenxu94 327d946978
Remove docker-maven-plugin in favor of testcontainers (#7664) 2021-09-06 21:04:14 +08:00
kezhenxu94 559b88a17b
Clean up checkstyle import control and unused licenses (#7660) 2021-09-06 17:44:18 +08:00
kezhenxu94 26b81a2e59
Rebuilt ElasticSearch client on top of their REST API (#7634) 2021-09-06 15:21:35 +08:00
吴晟 Wu Sheng 651f7f16ca
Fix CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090 (#7400) 2021-08-03 12:38:08 +08:00
kezhenxu94 fd92f4678a
perf: optimize Groovy-based LAL DSL with static compilation (#7263)
Groovy naturally supports many dynamic features that we don't benefit for now but cost performance loss, in this patch we compile our Groovy-based DSL scripts statically to optimize performance.
2021-07-09 18:00:25 +08:00
Daming 5dd56a5ca4
Upgrade etcd cluster coordinator and dynamic configuration to v3.x (#7215) 2021-07-05 11:23:11 +08:00
Jared Tan 0efc733901
Replace zuul proxy with spring cloud gateway 2.x. in webapp module. (#7220) 2021-07-04 10:24:56 +08:00
Gao Hongtao 669fe1593c
Upgrade OAP dependencies (#7119)
* Introduce trivy to scan images

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>

* Fix CVE

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>

* Update licenses

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>

* Remove log4j 1.x

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>

* Update CHANGES.md

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>

* Update LICENSE refer to webapp

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>

Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
2021-06-16 12:14:39 +08:00
Gao Hongtao ca155dee05
Upgrade several old dependencies (#7090) 2021-06-10 08:35:31 +08:00
Zhenxu 56f2e86a07
CVE: upgrade snakeyaml to prevent billion laughs attack in dynamic configuration. (#7071) 2021-06-05 14:41:46 +08:00
Zhenxu Ke 94adbf1c1f
Bump Kubernetes client-java version (#6920) 2021-05-10 05:07:09 +08:00
YczYanchengzhe 26de83883a
etcd client problem : fix the byte buff leak reported by io.netty.util.ResourceLeakDetector (#6912) 2021-05-08 07:19:16 +08:00
Zhenxu Ke b850e5c6e1
Bump up Jetty version to fix cve (#6861) 2021-04-28 12:03:25 +08:00
Qiuxia Fan 9946ec49f6
Sync uI and update license (#6478)
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
Co-authored-by: Zhenxu Ke <kezhenxu94@apache.org>
2021-03-04 08:14:12 +08:00
haoyann c45bb361ee
Storage plugin supports PostgreSQL (#6345) 2021-02-20 20:59:51 +08:00
Zhenxu Ke 547f5f1e77
Add some defensive codes for NPE and bump up Kubernetes client version to expose exception stack trace (#6327) 2021-02-05 16:30:54 +08:00
Lu Jiajing 9b7e663cc1
Update byte-buddy to 1.10.19 (#6037) 2020-12-21 14:07:39 +08:00
Zhenxu Ke 7b9cff4b73
chore: fix typo gprc -> grpc (#6035) 2020-12-20 00:17:46 +08:00
kezhenxu94 8da9bf94ab
ALS analyzer based on Envoy metadata exchange (#5800) 2020-11-09 00:01:12 +08:00
zifeihan a9d756cd53
Fix deadlock problem when using elasticsearch-client-7.0.0 (#5775)
* Update elasticsearch client 7.0.0 to elasticsearch client 7.5.0.
* Update CHANGES.md and LICENSE.
2020-11-03 22:01:54 +08:00
kezhenxu94 92bb474c2d
Improve Kubernetes service registry for ALS analysis (#5722)
The current implementation of envoy ALS K8S analysis is based on the hierarchy, pod -> StatefulSet -> deployment, StatefulSet, or others. It's freaky and different from the Istio Kubernetes registry.

The new path is pod -> endpoint -> service, and we should leverage Informer API instead of raw Kubernetes API.
2020-10-29 18:22:38 +08:00
xbkaishui 2c729b5d69
Support group concept in the alarm core (#5615) 2020-10-03 23:26:29 +08:00
吴晟 Wu Sheng 103cf00672
Support JDK 11 compiling and upgrade dependencies (#5579)
* Upgrade dependencies and make the JDK11 compiling passed.

* Update license and fix license check file.

* Add CI for JDK11 compiling.

* Update doc.
2020-09-29 10:34:21 +08:00
Gao Hongtao 35264e6171
Support SSL for prometheus telemetry and prometheus fetcher (#5431)
* Support SSL for prometheus telemetry and prometheus fetcher
* Documents
* Clear up abandunt dependencies
* Update license

Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
2020-09-05 17:01:09 +08:00
吴晟 Wu Sheng b173cde5db
Upgrade the byte-buddy to 1.10.14 with asm (#5338) 2020-08-17 21:27:57 +08:00
Daming f9257f5274
Provide kafka as collector/reporter (#4847) 2020-07-30 11:55:49 +08:00