Commit Graph

21044 Commits

Author SHA1 Message Date
Stefan Miklosovic faaffe867c
Upgrade OWASP dependency check to 10.0.4
patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-19895
2024-09-04 15:33:31 +02:00
Mick Semb Wever c485440de3
Merge branch 'cassandra-2.2' into cassandra-3.0
* cassandra-2.2:
  Add termin-8-jdk as a valid jdk8 candidate in the debian package
2024-07-05 16:42:45 +02:00
Mick Semb Wever 8a42556359
Add termin-8-jdk as a valid jdk8 candidate in the debian package
patch by Mick Semb Wever; reviewed by Maxim Muzafarov for CASSANDRA-19752
2024-07-05 16:37:55 +02:00
Stefan Miklosovic 64b1ccf881
Update ant dependency-check to version 10.0.0
patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-19738
2024-07-02 00:07:10 +02:00
Brandon Williams 44f472d742 Increment version 2024-04-15 11:24:55 -05:00
Brandon Williams 657e595b78 Prepare debian changelog for 3.0.30 2024-04-11 11:30:02 -05:00
Brandon Williams 296b9cb889 Prepare debian changelog for 3.0.30 2024-04-11 11:24:51 -05:00
Brandon Williams 00c45611c9 Prepare debian changelog for 3.0.30 2024-04-11 11:23:07 -05:00
Brandon Williams ccb83d0b6b Prepare debian changelog for 3.0.30 2024-04-11 11:13:02 -05:00
Ariel Weisberg 46bf9bcace Add properties for redirecting build-resolve to mirrors
patch by Ariel Weisberg; reviewed by Brandon Williams for CASSANDRA-19496
2024-03-27 12:48:57 -04:00
Ariel Weisberg 38eb339557 Add support for providing nvdDatafeedUrl to OWASP
patch by Ariel Weisberg; reviewed by Berenguer Blasi for CASSANDRA-19484
2024-03-22 16:41:57 -04:00
Jack Green 98eea87aa5
Fix SCM URL links
patch by Jack Green; reviewed by Stefan Miklosovic and Brandon Williams for CASSANDRA-19422
2024-02-23 14:43:41 +01:00
Szymon Miężał 5be57829b0 Backport CASSANDRA-16418 to 3.x
When a node is decommissioned, it triggers data transfer to other nodes.
During this transfer process, receiving nodes temporarily hold token ranges in a pending state.
However, the current cleanup process doesn't account for these pending ranges when calculating token ownership,
leading to inadvertent cleanup of data already stored in SSTables.
To address this issue, this patch introduces two changes.
Firstly, it backports CASSANDRA-16418, introducing a preventive check in `StorageService#forceKeyspaceCleanup`.
This check disallows the initiation of cleanup when a node contains any pending ranges for the requested keyspace.
Secondly, it reintroduces a similar condition to test for the existence of pending ranges in `CompactionManager#performCleanup`.
This ensures the safety of this API as well.

Patch by Szymon Miezal; reviewed by Brandon Williams, Jacek Lewandowski for CASSANDRA-18824

Co-authored-by: Szymon Miezal <szymon.miezal@datastax.com>
Co-authored-by: Jacek Lewandowski <lewandowski.jacek@gmail.com>
2024-02-07 15:11:59 +01:00
Brandon Williams 0bc95bbebd Set log-cli-level to DEBUG in circle config
Patch by brandonwilliams; reviewed by edimitrova for CASSANDRA-19350
2024-02-02 07:21:53 -06:00
Ekaterina Dimitrova 22e12adaec Fix Compact Storage section in NEWS.txt
patch by Ekaterina Dimitrova; reviewed by Paulo Motta for CASSANDRA-19291
2024-01-29 17:58:20 -05:00
Jacek Lewandowski 4c3b96e4cd Updated the OWASP plugin to 9.0.5 and refactored dependency checks
Configured OWASP database to use caching and NVD key. Properties can be
configured in ~/.ant/build.properties and define both the key and
the storage location

Patch by Jacek Lewandowski; reviewed by Maxim Muzafarov, Stefan Miklosovic for CASSANDRA-19146
2023-12-20 12:59:51 +01:00
Brandon Williams a1421ec324 Suppress CVE-2023-6378
Patch by brandonwilliams, reviewed by smiklosovic for CASSANDRA-19142
2023-12-06 06:31:27 -06:00
Stefan Miklosovic c1b12058e7
Do not set RPC_READY to false on transports shutdown in order to not fail counter updates for deployments with coordinator and storage nodes with transports turned off
This is the follow-up commit of CASSANDRA-18935 where we set RPC_READY to false
when transports were shut down in runtime. The problem is that the current logic in StorageProxy.findSuitableEndpoint method,
used for the selection of a leader for counter mutations, is filtering out all endpoints which do not have RPC_READY
set to true. Hence, if there is a deployment of a coordinator node (not joining a ring) and storage nodes which
have transports turned off (e.g. for security reasons), then a coordinator node will select no endpoint as a
counter mutation leader which renders counter mutations impossible.

This change just reverts the original fix which was setting RPC_READY to false when transports were shut down in runtime
(e.g. by nodetool disablebinary).

For trunk (to be 5.1 at time of writing this), there is already TCM in place and the correct fix yet to be implemented
is to decouple from checking RCP_READY state and base it e.g. on JOINED state from TCM perspective. Please follow
CASSANDRA-19103 where this will be addressed.

patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-18935
2023-11-29 12:09:59 +01:00
Stefan Miklosovic 8c69f85502
ninja fix CASSANDRA-19002: Set gcgs in HintsMaker to Integer.MAX_VALUE
HintsMaker was creating hint files which ttl'ed after 10 days which started to fail the tests.
By setting it explicitly to Integer.MAX_VALUE, newly generated hint files will expire in cca 68 years.

Branches 3.0 to trunk introduce the fix to HintsMaker. Branches 5.0 and trunk contain regenerated hint files as well.
2023-11-20 10:26:59 +01:00
Brandon Williams d41afac8bf Set cqlshlib.serverversion to UNKNOWN if not found
Patch by brandonwilliams; reviewed by mck and paulo for CASSANDRA-19020
2023-11-13 14:12:21 -06:00
Stefan Miklosovic 359700dde2
Create / update tests to ensure commit logs and hints for all versions in MessagingService are ingestible by 5.0
Patches for 3.0, 3.11, 4.0 and 4.1 are just adding HintsMaker class to generate hint files.
Patches for 5.0 and trunk are adding tests for commit log upgrading and hints which were generated by HintsMaker.

Patches for 5.0 and trunk are also adding version 1 in HintsDescriptor back as it was removed in CASSANDRA-18314 by mistake.

patch by Stefan Miklosovic; reviewed by Michael Semb Wever for CASSANDRA-19002
2023-11-08 14:07:26 +01:00
Brandon Williams 5bf1d2f8d5 Suppress CVE-2023-44487
Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18943
2023-10-26 05:54:19 -05:00
Stefan Miklosovic b51ee83a29
Fix nodetool enable/disablebinary to correctly set rpc readiness in gossip
patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-18935
2023-10-24 16:12:37 +02:00
maoling f27c6c8e6e
Implement the logic in bin/stop-server
patch by Ling Mao; reviewed by Stefan Miklosovic and Brandon Williams for CASSANDRA-18838

Co-authored-by: Stefan Miklosovic <smiklosovic@apache.org>
2023-10-18 12:49:58 +02:00
Maxim Muzafarov dc7234134c
Upgrade snappy-java to 1.1.10.4
patch by Maxim Muzafarov; reviewed by Stefan Miklosovic and Brandon Williams for CASSANDRA-18878
2023-09-27 20:49:09 +02:00
Stefan Miklosovic 65ee0d082c
Ninja fix for CASSANDRA-18745 2023-09-05 16:47:23 +02:00
Stefan Miklosovic 6c7ed52bb2
Add cqlshrc.sample and credentials.sample into Debian package
The underlying functionality for credentials.sample was firstly introduced in Cassandra 4.1

patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-18818
2023-09-05 15:36:31 +02:00
Mick Semb Wever ce49e775f7
Missing license info and headers
patch by Mick Semb Wever; reviewed by Brandon Williams for CASSANDRA-18807
2023-08-31 22:30:42 +02:00
Stefan Miklosovic 8bbf92a670
Refactor validation logic in StorageService.rebuild
patch by Stefan Miklosovic; reviewed by Ariel Weisberg for CASSANDRA-18803
2023-08-31 09:54:57 +02:00
Roman Mushchinski 4ab31d34c8
Make alternation of a user type validate the same way as creation of a user type does
patch by Roman Mushchinski; reviewed by Stefan Miklosovic and Andres de la Peña for CASSANDRA-18585
2023-08-23 15:07:12 +02:00
Brandon Williams 0b34ff6a0b ninja: fix format arg order 2023-08-18 13:57:01 -05:00
Stefan Miklosovic 65a3d36eb9
Add more tests for CASSANDRA-16905
patch by Stefan Miklosovic; reviewed by Andres de la Peña for CASSANDRA-18760
2023-08-18 18:48:14 +02:00
Aleksey Yeschenko f0280fb6f8
Backport of CASSANDRA-16905 Further restrict schema column drop/recreate conversions
patch by Aleksey Yeschenko; reviewed by Blake Eggleston, Sam Tunnicliffe, and Caleb Rackliffe for CASSANDRA-16905

Co-authored by Aleksey Yeschenko (aleksey@apache.org)
Co-authored by Josh McKenzie (jmckenzie@apache.org)
2023-08-18 18:17:01 +02:00
Brandon Williams ade85693d5 gitignore serverversion.py 2023-08-18 10:40:33 -05:00
Brandon Williams 6bb585bf5d Warn when cqlsh does not match the server version it was built with
Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18745
2023-08-18 10:08:52 -05:00
Brandon Williams fd9f07dab8 Add speculative retries to tablestats
Patch by brandonwilliams; reviewed by bereng and Maxwell Guo for
CASSANDRA-18767
2023-08-18 05:07:08 -05:00
Stefan Miklosovic e08bf19432
Fix Requires for Java for RPM package
patch by Stefan Miklosovic; reviewed by Brandon Williams and Maxim Muzafarov for CASSANDRA-18751
2023-08-15 13:49:58 +02:00
Vineet Gali 28c04fbdde
Fix CQLSH online help topic link
patch by Vineet Gali; reviewed by Stefan Miklosovic and Brandon Williams for CASSANDRA-17534
2023-08-08 17:45:29 +02:00
Brandon Williams 5c4dd3b993 Remove unused suppressions
Patch by brandonwilliams; reviewed by adelapena and edimitrova for
CASSANDRA-18724
2023-08-08 10:00:54 -05:00
Ekaterina Dimitrova 39db44adff Fix dtest-jar
patch by Ekaterina Dimitrova; reviewed by Brandon Williams for CASSANDRA-15255
2023-07-28 14:31:17 -04:00
Brandon Williams 493d15fffa Upgrade to OWASP 8.3.1
Patch by brandonwilliams; reviewed by edimitrova for CASSANDRA-18650
2023-07-07 10:40:37 -05:00
Brandon Williams 7150cc5b99 Suppress CVE-2023-34462
Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18649
2023-07-06 09:58:19 -05:00
Stefan Miklosovic 4ea7bb25b4
Add support for AWS Ec2 IMDSv2
patch by Stefan Miklosovic; reviewed by Jacek Lewandowski and Brandon Williams for CASSANDRA-16555

Co-authored-by: Jacek Lewandowski <lewandowski.jacek@gmail.com>
Co-authored-by: Paul Rütter <paul@blueconic.com>
2023-06-28 16:08:39 +02:00
Brandon Williams de7b1584f8 Suppress CVE-2023-35116
Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18630
2023-06-28 06:03:20 -05:00
Stefan Miklosovic a00d1de441
Pass taskId from CompactionTask to system.compaction_history
patch by Stefan Miklosovic; reviewed by Brandon Williams for CASSANDRA-12183
2023-06-26 13:55:49 +02:00
Brandon Williams d99bccd649 Suppress CVE-2023-34455, CVE-2023-34454, CVE-2023-34453
Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18608
2023-06-26 06:03:13 -05:00
Stefan Podkowinski e67fa69114 Remove hard-coded SSL cipher suites and protocols
patch by Stefan Podkowinski; reviewed by Robert Stupp for CASSANDRA-10508

backported in CASSANDRA-18575 by German Eichberger; reviewed by
brandonwilliams
2023-06-21 06:25:18 -05:00
Bereng c91e2714b9 Generate.sh -s param to skip autodetection of tests
patch by Berenguer Blasi; reviewed by Andres de la Peña for CASSANDRA-18553
2023-06-12 09:58:58 +02:00
Derek Chen-Becker 8d3c30dde4 Validate the comparison git branch when generating CircleCI configs
Allow the user to use a flag to specify a non-default comparison git
branch when detecting changed unit tests to repeat.

Patch by Derek Chen-Becker; reviewed by Andrés de la Peña and Berenguer Blasi for CASSANDRA-17997
2023-06-07 11:03:00 +01:00
Brandon Williams e28ef4089e Suppress CVE-2023-2976
Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18562
2023-06-05 05:56:51 -05:00