* Initial reworked, simplified abstract node startup
* use Graylog CmdLineTool in data node
* remove unused pid file declaration
* remove freshInstallation check as it doesn't make sense since it checks for fresh installation of the Graylog cluster
* move mongo preflight check into regular preflight checks since it doesn't do the fresh installation detection any more
* remove migration feature for data node
* code cleanup
* remove unused local flag, code cleaup
* rename server to datanode for better clarification
* fix feature flag test to use config for env/sys props
* remove Graylog path configuration from data node configuration
* temporary fix for excluding zstd library fix from data node
* add requireexplicitbindings for new node types
* remove unneeded settings bean
* do not use `pluginLoaderConfig` for fixing zstd temp directory
* do tls protocols configuration and setting of netty defaults only in Graylog node
* remove ExampleCommand, replace with MinimalNode test
* change forbidden method invocation
* adjust log
Co-authored-by: Bernd Ahlers <bernd@users.noreply.github.com>
* Change cmdline option description
Co-authored-by: Bernd Ahlers <bernd@users.noreply.github.com>
* Change cmdline option description
Co-authored-by: Bernd Ahlers <bernd@users.noreply.github.com>
* Change cmdline option description
Co-authored-by: Bernd Ahlers <bernd@users.noreply.github.com>
* make usage of NodeIdFile configurable
* adjust ServerStatus and provide common node command test
* code cleanup
* make configuration a field, remove unused constructor
* code cleanup
* use parent field
* make Datanode and Server extend AbstractNodeCommand
* change field names to camel case
* remove redundant bindings, make journal commands extends AbstractNodeCommand
* remove static field
* remove redundant bindings
* always applySecuritySettings
* add javadocs to GraylogNodeModule
---------
Co-authored-by: Tomas Dvorak <tomas.dvorak@graylog.com>
Co-authored-by: Bernd Ahlers <bernd@users.noreply.github.com>
* Automatic cert renewal policy and self-signed CA creation
* Datanode CSR rate limited, added IT
* selfsigned_startup property name for automatic cert renewal and selfsigned CA configuration
* Add warning to the insecure configuration
* default for relaxedHTTPSValidation in RestOperationParameters
* add changelog
* code cleanup
* Simplify rate limiting in DataNodeCertRenewalPeriodical
---------
Co-authored-by: Matthias Oesterheld <33032967+moesterheld@users.noreply.github.com>
* Empty dir error in datanode inplace migration
* better place for empty data dir compatibility check
* added changelog
* compatibility warning for inplace migration in case of empty data dir
* display warning
* rephrased empty datadir warning
* only show green alert when there are no warnings
---------
Co-authored-by: Mohamed Ould Hocine <mohamed.ould.hocine@graylog.com>
Co-authored-by: Matthias Oesterheld <33032967+moesterheld@users.noreply.github.com>
* Bump severity of ArrayRecordComponent EP check to ERROR
* Make `FileystemKeystoreInformation` a POJO
Also, discourages String conversions of passwords by removing the convenience method.
String conversion still happens all over the place and resolving that would be beyond the scope of this PR, but at least we shouldn't offer a convenience method right at the interface level.
* Convert records with mutable components to POJOs
* Add #equals and #hashCode
* Explicit type for JwtSecret data, automatically extend password if too short.
* repeat given password instead of appending known character
* fixed DatanodeContainerizedBackend
* Configure JwtSecretProvider as singleton
* Fix bindings
* Fix integration test
* code cleanup
* fix jwt secret in JerseyService
* Handle closed indices in remote reindex migration
* selectAll shouldn't select the closed indices
* added changelog
* Remove support for empty indices list in remote reindex migration (not used anywhere)
* Reopen closed indices for remote reindex migration
* updated changelog
* fix setting authorization header only for non-null parameters
* remove check for message from closed index
---------
Co-authored-by: Mohamed OULD HOCINE <106236152+gally47@users.noreply.github.com>
Co-authored-by: Mohamed Ould Hocine <mohamed.ould.hocine@graylog.com>
Co-authored-by: Matthias Oesterheld <33032967+moesterheld@users.noreply.github.com>
Co-authored-by: Matthias Oesterheld <matthias.oesterheld@graylog.com>
* fix certificate renewal periodicals to use PeriodDuration
* move threshold calculation to `RenewalPolicy`
create & use typed method for parsed lifetime
* remove threeten-extra dependency
* fix test for dates using 10% threshold
