吴晟 Wu Sheng
faf6e2eb9e
Add `Error Prone Annotations` dependency to suppress warnings ( #8774 )
2022-04-01 00:57:34 +08:00
刘威
1554c087f4
Refactor IoTDB storage plugin and bump up iotdb-session to 0.12.5 ( #8755 )
2022-03-30 19:19:49 +08:00
kezhenxu94
289427990a
Migrate the HTTP server from Jetty to Armeria ( #8673 )
2022-03-15 13:38:42 +08:00
kezhenxu94
b1d3f3b637
Expose more ElasticSearch health check related logs ( #8652 )
2022-03-10 19:19:44 +08:00
kezhenxu94
22e1a89b4a
Bump up PostgreSQL driver to fix CVE ( #8497 )
2022-02-02 11:18:32 +08:00
刘威
b0a875fe3f
Bump up iotdb-session to 0.12.4 and fix IoTDB storage option bug ( #8484 )
...
* Fix IoTDB Storage Option insert null index value.
* Set the default value of SW_STORAGE_IOTDB_SESSIONPOOL_SIZE to 8
* Bump up iotdb-session to 0.12.4
* Update doc
2022-01-30 09:02:39 +08:00
Gao Hongtao
4d803e387f
Fix CVE-2022-23221 ( #8464 )
...
* Fix CVE-2022-23221
H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
2022-01-22 21:03:08 +08:00
kezhenxu94
2c8504a3ed
Bump up GraphQL related dependencies to latest versions ( #8446 )
2022-01-19 20:33:25 +08:00
吴晟 Wu Sheng
0d5a289c20
Bump up gRPC/protobuf to fix CVE-2021-22569 ( #8405 )
...
* Bump up gRPC/protobuf to fix CVE-2021-2256
2022-01-12 16:39:38 +08:00
吴晟 Wu Sheng
67f6681ba3
Upgrade H2 version to fix GHSA-h376-j262-vhq6 ( #8396 )
2022-01-07 12:46:12 +08:00
kezhenxu94
62ef59466e
Bump up log4j to 2.17.1 ( #8349 )
2021-12-29 11:07:48 +08:00
kezhenxu94
8fa4eb7d75
Upgrade H2 version to 2.0.202 to fix CVE-2021-23463 ( #8332 )
2021-12-23 21:37:00 +08:00
kezhenxu94
5da205ba9b
Remove unused jars and bump up netty version in webapp ( #8317 )
2021-12-21 13:39:37 +08:00
kezhenxu94
a02dd9c2d1
Bump up log4j2 to 2.17 ( #8314 )
2021-12-18 22:40:38 +08:00
吴晟 Wu Sheng
d8fd3ee563
Remove log4j version properties in webapp ( #8285 )
...
* Fix license.
* Remove log4j version properties.
* Fix change log.
2021-12-12 11:45:06 +08:00
kezhenxu94
b3536445bc
Bump up Armeria version to fix CVE ( #8236 )
2021-12-03 13:09:47 +08:00
刘威
842b5d927e
Support Apache IoTDB as a storage option ( #7766 )
...
Support Apache IoTDB as a storage option, mostly refer to previous InfluxDB storage option.
* The Design of Apache IoTDB Storage Option, https://skywalking.apache.org/blog/2021-11-23-design-of-iotdb-storage-option/
2021-11-27 09:04:23 +08:00
Marc Navarro
a621a2608e
[Enhancement] Bump grpc and protobuff version to allow building on Mac M1 ( #8186 )
...
Upgrade to the latest grpc-java 1.42.1 which is only compatible and [tested against](https://github.com/grpc/grpc-java/pull/8551#discussion_r714182190 ) 3.17.2, but we can assume that 3.17.3 (which has osx-aarch_64 compatible maven artifacts) is save to use.
We could have also upgrade to the latest grpc-java 1.42.1 and latest protoc 3.19.1, but it can not be directly done, it needs to tweak the grpcs-java internal dependencies. So we choose the safest option and discarded this option because of the following reasons:
- Protoc 3.19.1 generates code that relies on methods not available in protobuf-java 3.17.2 ([“issue”](https://github.com/protocolbuffers/protobuf/issues/9236#issue-1059594027 )) (which java-grpc relies on). So we need to tell grpc-java via dependency management to use 3.19.1 instead of 3.17.2.
Signed-off-by: Marc Navarro Sonnenfeld <marcnavarro@tetrate.io>
2021-11-26 22:06:58 +08:00
kezhenxu94
b63008c61e
Upgrade Kubernetes Java client to 14.0.0, supports GCP token refreshing and fixes some bugs ( #8122 )
2021-11-13 16:24:19 +08:00
kezhenxu94
508945f552
Upgrade Armeria to 1.12, upgrade OpenSearch test version to 1.1.0 ( #7866 )
2021-10-08 19:45:33 +08:00
kezhenxu94
1feca85f88
Upgrade netty version to 4.1.68.Final avoid cve-2021-37136 ( #7799 )
2021-09-25 15:57:26 +08:00
吴晟 Wu Sheng
2d52ad42e1
Fix license of netty-tcnative-boringssl-static ( #7784 )
2021-09-24 08:44:25 +08:00
kezhenxu94
ec03cca31b
Bump up commons-compress version and polish LAL debug error message ( #7668 )
2021-09-07 12:18:25 +08:00
Fine0830
96d3c1e5dd
Sync UI ( #7667 )
2021-09-07 09:19:23 +08:00
kezhenxu94
327d946978
Remove docker-maven-plugin in favor of testcontainers ( #7664 )
2021-09-06 21:04:14 +08:00
kezhenxu94
559b88a17b
Clean up checkstyle import control and unused licenses ( #7660 )
2021-09-06 17:44:18 +08:00
kezhenxu94
26b81a2e59
Rebuilt ElasticSearch client on top of their REST API ( #7634 )
2021-09-06 15:21:35 +08:00
吴晟 Wu Sheng
651f7f16ca
Fix CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090 ( #7400 )
2021-08-03 12:38:08 +08:00
kezhenxu94
fd92f4678a
perf: optimize Groovy-based LAL DSL with static compilation ( #7263 )
...
Groovy naturally supports many dynamic features that we don't benefit for now but cost performance loss, in this patch we compile our Groovy-based DSL scripts statically to optimize performance.
2021-07-09 18:00:25 +08:00
Daming
5dd56a5ca4
Upgrade etcd cluster coordinator and dynamic configuration to v3.x ( #7215 )
2021-07-05 11:23:11 +08:00
Jared Tan
0efc733901
Replace zuul proxy with spring cloud gateway 2.x. in webapp module. ( #7220 )
2021-07-04 10:24:56 +08:00
Gao Hongtao
669fe1593c
Upgrade OAP dependencies ( #7119 )
...
* Introduce trivy to scan images
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
* Fix CVE
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
* Update licenses
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
* Remove log4j 1.x
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
* Update CHANGES.md
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
* Update LICENSE refer to webapp
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
2021-06-16 12:14:39 +08:00
Gao Hongtao
ca155dee05
Upgrade several old dependencies ( #7090 )
2021-06-10 08:35:31 +08:00
Zhenxu
56f2e86a07
CVE: upgrade snakeyaml to prevent billion laughs attack in dynamic configuration. ( #7071 )
2021-06-05 14:41:46 +08:00
Zhenxu Ke
94adbf1c1f
Bump Kubernetes client-java version ( #6920 )
2021-05-10 05:07:09 +08:00
YczYanchengzhe
26de83883a
etcd client problem : fix the byte buff leak reported by io.netty.util.ResourceLeakDetector ( #6912 )
2021-05-08 07:19:16 +08:00
Zhenxu Ke
b850e5c6e1
Bump up Jetty version to fix cve ( #6861 )
2021-04-28 12:03:25 +08:00
Qiuxia Fan
9946ec49f6
Sync uI and update license ( #6478 )
...
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
Co-authored-by: Zhenxu Ke <kezhenxu94@apache.org>
2021-03-04 08:14:12 +08:00
haoyann
c45bb361ee
Storage plugin supports PostgreSQL ( #6345 )
2021-02-20 20:59:51 +08:00
Zhenxu Ke
547f5f1e77
Add some defensive codes for NPE and bump up Kubernetes client version to expose exception stack trace ( #6327 )
2021-02-05 16:30:54 +08:00
Lu Jiajing
9b7e663cc1
Update byte-buddy to 1.10.19 ( #6037 )
2020-12-21 14:07:39 +08:00
Zhenxu Ke
7b9cff4b73
chore: fix typo gprc -> grpc ( #6035 )
2020-12-20 00:17:46 +08:00
kezhenxu94
8da9bf94ab
ALS analyzer based on Envoy metadata exchange ( #5800 )
2020-11-09 00:01:12 +08:00
zifeihan
a9d756cd53
Fix deadlock problem when using elasticsearch-client-7.0.0 ( #5775 )
...
* Update elasticsearch client 7.0.0 to elasticsearch client 7.5.0.
* Update CHANGES.md and LICENSE.
2020-11-03 22:01:54 +08:00
kezhenxu94
92bb474c2d
Improve Kubernetes service registry for ALS analysis ( #5722 )
...
The current implementation of envoy ALS K8S analysis is based on the hierarchy, pod -> StatefulSet -> deployment, StatefulSet, or others. It's freaky and different from the Istio Kubernetes registry.
The new path is pod -> endpoint -> service, and we should leverage Informer API instead of raw Kubernetes API.
2020-10-29 18:22:38 +08:00
xbkaishui
2c729b5d69
Support group concept in the alarm core ( #5615 )
2020-10-03 23:26:29 +08:00
吴晟 Wu Sheng
103cf00672
Support JDK 11 compiling and upgrade dependencies ( #5579 )
...
* Upgrade dependencies and make the JDK11 compiling passed.
* Update license and fix license check file.
* Add CI for JDK11 compiling.
* Update doc.
2020-09-29 10:34:21 +08:00
Gao Hongtao
35264e6171
Support SSL for prometheus telemetry and prometheus fetcher ( #5431 )
...
* Support SSL for prometheus telemetry and prometheus fetcher
* Documents
* Clear up abandunt dependencies
* Update license
Signed-off-by: Gao Hongtao <hanahmily@gmail.com>
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
2020-09-05 17:01:09 +08:00
吴晟 Wu Sheng
b173cde5db
Upgrade the byte-buddy to 1.10.14 with asm ( #5338 )
2020-08-17 21:27:57 +08:00
Daming
f9257f5274
Provide kafka as collector/reporter ( #4847 )
2020-07-30 11:55:49 +08:00