Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RELEASE] Release version 2.19.1 #5323

Open
30 of 64 tasks
github-actions bot opened this issue Feb 15, 2025 · 11 comments
Open
30 of 64 tasks

[RELEASE] Release version 2.19.1 #5323

github-actions bot opened this issue Feb 15, 2025 · 11 comments
Assignees

Comments

@github-actions
Copy link
Contributor

github-actions bot commented Feb 15, 2025

Release OpenSearch and OpenSearch Dashboards 2.19.1

I noticed that a manifest was automatically created in manifests/2.19.1. Please follow the following checklist to make a release.

How to use this issue

This Release Issue

This issue captures the state of the OpenSearch release, its assignee (Release Manager) is responsible for driving the release. Please contact them or @mention them on this issue for help. There are linked issues on components of the release where individual components can be tracked. For more information check the the Release Process OpenSearch Guide.

Please refer to the following link for the release version dates: Release Schedule and Maintenance Policy.

Entrance Criteria

Criteria Status Description  Comments
Each component release issue has an assigned owner 🟢
Documentation draft PRs are up and in tech review for all component changes 🟢
Code coverage has not decreased (all new code has tests) 🟢
Release notes are ready and available for all components 🟢
Roadmap is up-to-date (information is available to create release highlights) 🟢
Release ticket is cut, and there's a forum post announcing the start of the window 🟢
Any necessary security reviews are complete 🟢

OpenSearch 2.19.1 exit criteria status:

Criteria Status Description  Comments
No unpatched vulnerabilities of medium or higher severity that have been publicly known for more than 60 days 🟢
Documentation has been fully reviewed and signed off by the documentation community. 🟢
All integration tests are passing 🟢
Release blog is ready 🟢

OpenSearch-Dashboards 2.19.1 exit criteria status:

Criteria Status Description  Comments
Documentation has been fully reviewed and signed off by the documentation community 🟢
No unpatched vulnerabilities of medium or higher severity that have been publicly known for more than 60 days 🟢
All integration tests are passing 🟢
Release blog is ready 🟢

Preparation

Campaigns

Version Increment - _Ends 02/19/2025

Code Complete - _Ends 02/19/2025

Release Branch, Release Candidate Creation and Testing - _Ends 02/21/2025

Performance testing validation - _Ends 02/21/2025

  • Post the benchmark-tests
  • Longevity tests do not show any issues.

Pre Release - _Ends 02/26/2025

Release - 02/27/2025

Release Checklist.


Release Checklist

Pre-Release activities

  • Promote Repos.
      • OS
      • OSD
  • Promote Artifacts.
      • Windows
      • Linux Debian
      • Linux RPM
      • Linux TAR
  • Consolidated Release Notes.

Release activities

  • Docker Promotion.
  • Release Validation part 1.
      • OpenSearch and OpenSearch Dashboard Validation.
      • Validate the native plugin installation.
  • Merge consolidated release notes PR.
  • Website and Documentation Changes.
      • Merge staging website PR.
      • Promote the website changes to prod.
      • Add website alert.
  • Release Validation part 2.
      • Validate the artifact download URL's and signatures.
  • Release Validation part 3.
      • Trigger the validation build (Search for Completed validation for <> in the logs).
  • Maven Promotion.
  • Publish blog posts.
  • Advertise on Social Media.
  • Post on public slack and Github Release issue.


Post Release

Components

Replace with links to all component tracking issues.

Component On track Release Notes
{COMPONENT_ISSUE_LINK} {INDICATOR} {STATUS}
Legend

Symbol Meaning
🟢 On track with overall release
🟡 Missed last milestone
🔴 Missed multiple milestones

@gaiksaya gaiksaya pinned this issue Feb 18, 2025
@cwperks
Copy link
Member

cwperks commented Feb 19, 2025

@peterzhuamazon @getsaurabh02 Can this PR be included in the 2.19.1 release? There was a feature added in 2.19.0 without the corresponding setting being added in getSettings() rendering the new feature unusable.

CC: @shikharj05 @willyborankin

@peterzhuamazon
Copy link
Member

peterzhuamazon commented Feb 19, 2025

aws-sdk-java-v2 seems updating the netty version here:

Seems like it is bound to this version based on commit history:

@jngz-es
Copy link
Contributor

jngz-es commented Feb 19, 2025

@opensearch-ci-bot
Copy link
Collaborator

See OpenSearch RC 1 and OpenSearch-Dashboards RC 1 details

OpenSearch 1 and OpenSearch-Dashboards 1 details

## OpenSearch 10855 and OpenSearch-Dashboards 8295 is ready for your test.

OpenSearch - Build 10855
OpenSearch Dashboards - Build 8295

  • Use the following Docker-Compose to setup a cluster

    docker-compose.yml

      
    version: '3'
    services:
      opensearch-node1:
        image: opensearchstaging/opensearch:2.19.1.10855
        container_name: opensearch-node1
        environment:
          - cluster.name=opensearch-cluster
          - node.name=opensearch-node1
          - discovery.seed_hosts=opensearch-node1,opensearch-node2
          - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2
          - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
          - OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!
        ulimits:
          memlock:
            soft: -1
            hard: -1
          nofile:
            soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
            hard: 65536
        volumes:
          - opensearch-data1:/usr/share/opensearch/data
        ports:
          - 9200:9200
          - 9600:9600 # required for Performance Analyzer
        networks:
          - opensearch-net
      opensearch-node2:
        image: opensearchstaging/opensearch:2.19.1.10855
        container_name: opensearch-node2
        environment:
          - cluster.name=opensearch-cluster
          - node.name=opensearch-node2
          - discovery.seed_hosts=opensearch-node1,opensearch-node2
          - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2
          - bootstrap.memory_lock=true
          - OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!
        ulimits:
          memlock:
            soft: -1
            hard: -1
          nofile:
            soft: 65536
            hard: 65536
        volumes:
          - opensearch-data2:/usr/share/opensearch/data
        networks:
          - opensearch-net
      opensearch-dashboards:
        image: opensearchstaging/opensearch-dashboards:2.19.1.8295
        container_name: opensearch-dashboards
        ports:
          - 5601:5601
        expose:
          - "5601"
        environment:
          OPENSEARCH_HOSTS: '["https://opensearch-node1:9200","https://opensearch-node2:9200"]'
        networks:
          - opensearch-net
    volumes:
      opensearch-data1:
      opensearch-data2:
    

    networks:
    opensearch-net:

    • Download the above docker-compose.yml on your machine.
    • Get latest image versions docker-compose pull.
    • Start the cluster docker-compose up.
  • OpenSearch docker 2.19.1.10855

    • Start without security
      • Docker command docker pull opensearchstaging/opensearch:2.19.1.10855 && docker run -it -p 9200:9200 -e "discovery.type=single-node" -e "DISABLE_SECURITY_PLUGIN=true" opensearchstaging/opensearch:2.19.1.10855
      • Connect command curl http://localhost:9200/
    • Start with security
      • Docker command
      docker pull opensearchstaging/opensearch:2.19.1.10855 && docker run -it -p 9200:9200 -e "discovery.type=single-node" -e "OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!" opensearchstaging/opensearch:2.19.1.10855
      
      • Connect command curl --insecure 'https://admin:myStrongPassword123!@localhost:9200/'
  • OpenSearch-Dashboards docker 2.19.1.8295

    • Start without security
      • Docker command docker pull opensearchstaging/opensearch-dashboards:2.19.1.8295 && docker run -it --network="host" -e "DISABLE_SECURITY_DASHBOARDS_PLUGIN=true" opensearchstaging/opensearch-dashboards:2.19.1.8295
      • URL http://localhost:5601/
    • Start with security
      • Docker command docker pull opensearchstaging/opensearch-dashboards:2.19.1.8295 && docker run -it --network="host" opensearchstaging/opensearch-dashboards:2.19.1.8295
      • URL http://localhost:5601/
  • Use TARs to deploy OpenSearch Manually

Check how to install opensearch and dashboards on different platforms

Integration Test Results

Thank you

OpenSearch Docker-Scan Results

Workflow run




opensearchstaging/opensearch:2.19.1 (amazon 2023.6.20250218 (Amazon Linux))
===========================================================================
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)




OpenSearch-Dashboards Docker-Scan Results

Workflow run




opensearchstaging/opensearch-dashboards:2.19.1 (amazon 2023.6.20250218 (Amazon Linux))
======================================================================================
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)


Node.js (node-pkg)
==================
Total: 2 (UNKNOWN: 0, LOW: 1, MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌──────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│         Library          │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                           │
├──────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ cookie (package.json)    │ CVE-2024-47764 │ LOW      │ fixed  │ 0.5.0             │ 0.7.0         │ cookie: cookie accepts cookie name, path, and domain with │
│                          │                │          │        │                   │               │ out of bounds...                                          │
│                          │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-47764                │
├──────────────────────────┼────────────────┼──────────┤        ├───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ dompurify (package.json) │ CVE-2025-26791 │ MEDIUM   │        │ 3.2.3             │ 3.2.4         │ dompurify: Mutation XSS in DOMPurify Due to Improper      │
│                          │                │          │        │                   │               │ Template Literal Handling                                 │
│                          │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2025-26791                │
└──────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘



@opensearch-ci-bot
Copy link
Collaborator

Core Components CommitID(after 2023-02-25) & Release Notes info

Repo Branch CommitID Commit Date Release Notes Exists
OpenSearch [2.19] fea01ee8 2025-02-24 False
OpenSearch-Dashboards [2.19] 0396172 2025-02-18 False
alerting [2.19] 40896c3 2025-02-18 False
alertingDashboards [2.19] 72d71e6 2025-02-18 False
anomaly-detection [2.19] 6c5408f 2025-02-19 False
anomalyDetectionDashboards [2.19] 4bca111 2025-02-19 False
assistantDashboards [2.19] 73ad6e9 2025-02-19 False
asynchronous-search [2.19] 4b86ac4 2025-02-21 False
common-utils [2.19] 764945c 2025-02-18 False
cross-cluster-replication [2.19] 2c41857 2025-02-19 False
custom-codecs [2.19] e5f1156 2025-02-19 False
customImportMapDashboards [2.19] 0c530b1 2025-02-19 False
flow-framework [2.19] ce468f7 2025-02-19 False
flowFrameworkDashboards [2.19] 87e9e74 2025-02-18 False
functionalTestDashboards [2.19] 11ee952 2025-02-18 False
ganttChartDashboards [2.19] 1c9f4dc 2025-02-19 False
geospatial [2.19] e029144 2025-02-19 False
index-management [2.19] c040f26 2025-02-19 False
indexManagementDashboards [2.19] 36fd951 2025-02-24 False
job-scheduler [2.19] b107758 2025-02-25 False
k-NN [2.19] 05ed457 2025-02-19 False
ml-commons [2.19] 430241e 2025-02-21 True
mlCommonsDashboards [2.19] af93810 2025-02-19 False
neural-search [2.19] 5ea6d30 2025-02-19 False
notifications [2.19] ae08d1f 2025-02-18 False
notifications-core [2.19] ae08d1f 2025-02-18 False
notificationsDashboards [2.19] f83877c 2025-02-19 False
observabilityDashboards [2.19] 489ddbe 2025-02-19 False
opensearch-learning-to-rank-base [2.19] e23b93d 2025-02-07 False
opensearch-observability [2.19] 1afe8ea 2025-02-24 False
opensearch-remote-metadata-sdk [2.19] 17a3ab8 2025-02-21 True
opensearch-reports [2.19] 4f52ad4 2025-02-24 False
opensearch-system-templates [2.19] 62aa9f6 2025-02-14 False
performance-analyzer [2.19] e3e10bb 2025-02-19 False
query-insights [2.19] 939edc2 2025-02-19 False
queryInsightsDashboards [2.19] 4b371f8 2025-02-20 True
queryWorkbenchDashboards [2.19] 28889eb 2025-02-18 False
reportsDashboards [2.19] 3ad1043 2025-02-24 False
searchRelevanceDashboards [2.19] e591b71 2025-02-19 False
security [2.19] d3d7f74 2025-02-19 False
security-analytics [2.19] aef483e 2025-02-24 False
securityAnalyticsDashboards [2.19] e0c75d3 2025-02-19 False
securityDashboards [2.19] 8cbe159 2025-02-18 False
skills [2.19] 6c36c61 2025-02-19 False
sql [2.19] dae1a9a 2025-02-19 False

@opensearch-ci-bot
Copy link
Collaborator

opensearch-ci-bot commented Feb 27, 2025

See OpenSearch RC 3 and OpenSearch-Dashboards RC 2 details

OpenSearch 3 and OpenSearch-Dashboards 2 details

## OpenSearch 10872 and OpenSearch-Dashboards 8312 is ready for your test.

OpenSearch - Build 10872
OpenSearch Dashboards - Build 8312

  • Use the following Docker-Compose to setup a cluster

    docker-compose.yml

      
    version: '3'
    services:
      opensearch-node1:
        image: opensearchstaging/opensearch:2.19.1.10872
        container_name: opensearch-node1
        environment:
          - cluster.name=opensearch-cluster
          - node.name=opensearch-node1
          - discovery.seed_hosts=opensearch-node1,opensearch-node2
          - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2
          - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
          - OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!
        ulimits:
          memlock:
            soft: -1
            hard: -1
          nofile:
            soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
            hard: 65536
        volumes:
          - opensearch-data1:/usr/share/opensearch/data
        ports:
          - 9200:9200
          - 9600:9600 # required for Performance Analyzer
        networks:
          - opensearch-net
      opensearch-node2:
        image: opensearchstaging/opensearch:2.19.1.10872
        container_name: opensearch-node2
        environment:
          - cluster.name=opensearch-cluster
          - node.name=opensearch-node2
          - discovery.seed_hosts=opensearch-node1,opensearch-node2
          - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2
          - bootstrap.memory_lock=true
          - OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!
        ulimits:
          memlock:
            soft: -1
            hard: -1
          nofile:
            soft: 65536
            hard: 65536
        volumes:
          - opensearch-data2:/usr/share/opensearch/data
        networks:
          - opensearch-net
      opensearch-dashboards:
        image: opensearchstaging/opensearch-dashboards:2.19.1.8312
        container_name: opensearch-dashboards
        ports:
          - 5601:5601
        expose:
          - "5601"
        environment:
          OPENSEARCH_HOSTS: '["https://opensearch-node1:9200","https://opensearch-node2:9200"]'
        networks:
          - opensearch-net
    volumes:
      opensearch-data1:
      opensearch-data2:
    

    networks:
    opensearch-net:

    • Download the above docker-compose.yml on your machine.
    • Get latest image versions docker-compose pull.
    • Start the cluster docker-compose up.
  • OpenSearch docker 2.19.1.10872

    • Start without security
      • Docker command docker pull opensearchstaging/opensearch:2.19.1.10872 && docker run -it -p 9200:9200 -e "discovery.type=single-node" -e "DISABLE_SECURITY_PLUGIN=true" opensearchstaging/opensearch:2.19.1.10872
      • Connect command curl http://localhost:9200/
    • Start with security
      • Docker command
      docker pull opensearchstaging/opensearch:2.19.1.10872 && docker run -it -p 9200:9200 -e "discovery.type=single-node" -e "OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!" opensearchstaging/opensearch:2.19.1.10872
      
      • Connect command curl --insecure 'https://admin:myStrongPassword123!@localhost:9200/'
  • OpenSearch-Dashboards docker 2.19.1.8312

    • Start without security
      • Docker command docker pull opensearchstaging/opensearch-dashboards:2.19.1.8312 && docker run -it --network="host" -e "DISABLE_SECURITY_DASHBOARDS_PLUGIN=true" opensearchstaging/opensearch-dashboards:2.19.1.8312
      • URL http://localhost:5601/
    • Start with security
      • Docker command docker pull opensearchstaging/opensearch-dashboards:2.19.1.8312 && docker run -it --network="host" opensearchstaging/opensearch-dashboards:2.19.1.8312
      • URL http://localhost:5601/
  • Use TARs to deploy OpenSearch Manually

Check how to install opensearch and dashboards on different platforms

Integration Test Results

Thank you

OpenSearch Docker-Scan Results

Workflow run




opensearchstaging/opensearch:2.19.1 (amazon 2023.6.20250218 (Amazon Linux))
===========================================================================
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)




OpenSearch-Dashboards Docker-Scan Results

Workflow run




opensearchstaging/opensearch-dashboards:2.19.1 (amazon 2023.6.20250218 (Amazon Linux))
======================================================================================
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)


Node.js (node-pkg)
==================
Total: 1 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌───────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│        Library        │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                           │
├───────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ cookie (package.json) │ CVE-2024-47764 │ LOW      │ fixed  │ 0.5.0             │ 0.7.0         │ cookie: cookie accepts cookie name, path, and domain with │
│                       │                │          │        │                   │               │ out of bounds...                                          │
│                       │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-47764                │
└───────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘



@Divyaasm
Copy link
Collaborator

Signature Verification:

gpg --verify opensearch-2.19.1-linux-arm64.tar.gz.sig opensearch-2.19.1-linux-arm64.tar.gz
gpg: Signature made Thu Feb 27 13:16:41 2025 PST
gpg:                using RSA key C2EE2AF6542C03B4
gpg: Good signature from "OpenSearch project <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: C5B7 4989 65EF D1C2 924B  A9D5 39D3 1987 9310 D3FC
     Subkey fingerprint: 2187 3199 B103 0FCD 49DA  83F8 C2EE 2AF6 542C 03B4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: 🆕 New
Development

No branches or pull requests

6 participants