Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Changes for ATC. 8.0.2 release #8080

Merged
merged 12 commits into from
Sep 27, 2024

Conversation

rimashah25
Copy link
Contributor

@rimashah25 rimashah25 commented Sep 27, 2024

PR: 8056, 8071, and 8081


Which Traffic Control components are affected by this PR?

  • Traffic Ops
  • GH Actions
  • CDN-In-a-Box

What is the best way to verify this PR?

If this is a bugfix, which Traffic Control versions contained the bug?

8.0.1

PR submission checklist

@rimashah25 rimashah25 changed the title Fixed bug in reset password and [CVE-2024-45387] Changes for ATC. 8.0.2 release Sep 27, 2024
@rimashah25 rimashah25 marked this pull request as ready for review September 27, 2024 18:16
@rimashah25 rimashah25 force-pushed the bugfix/reset-password_sql-injection branch from 7c4638a to 555413e Compare September 27, 2024 18:35
@rimashah25 rimashah25 force-pushed the bugfix/reset-password_sql-injection branch from 555413e to c2c8ad5 Compare September 27, 2024 18:44
@rimashah25 rimashah25 force-pushed the bugfix/reset-password_sql-injection branch from 3b77390 to 5d44c4b Compare September 27, 2024 18:52
* docker-compose -> docker compose

Excludes Dockerfile-tsb and the vendor directory.

    sed -i 's/docker-compose /docker compose /g' $(git grep -l 'docker-compose ')
    pattern="$(<<'PATTERN' cat
    docker-compose\($\|['`"*,)]\)
    PATTERN
    )"
    sed -i "s/${pattern}/docker compose\1/g" -- $(git grep -l "$pattern")
    sed -i 's/"docker compose"/"docker", "compose"/g' $(git grep -Fl '"docker compose"')

* Remove version from compose files.

sed -i '/^version:/d' $(git grep -il '^version:' '*docker-compose*.y*ml')

* Include `--all` in docker-compose ps command.

This is necessary for the plugin version of docker compose to query
exited containers.

* Changelog entry

* Support docker compose fallback for older docker versions that do not
have the compose plugin
…pache#8081)

Fixes message:
This request has been automatically failed because it uses a deprecated
version of `actions/upload-artifact: v2`. Learn more:
https://github.blog/changelog/2024-02-13-deprecation-notice-v1-and-v2-of-the-artifact-actions/
@rimashah25 rimashah25 force-pushed the bugfix/reset-password_sql-injection branch from 752a67c to 0726b45 Compare September 27, 2024 18:57
Copy link
Member

@zrhoffman zrhoffman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • The Traffic Ops and Traffic Vault Database Tests / tests (pull_request) GHA is failing. Update Postgres version to 13.16 #8079 fixes it

  • CDN-in-a-Box CI / traffic_portal_v2 (pull_request) fails:

    Error: This request has been automatically failed because it uses a deprecated version of `actions/upload-artifact: v2`. Learn more: https://github.blog/changelog/2024-02-13-deprecation-notice-v1-and-v2-of-the-artifact-actions/
    

@zrhoffman
Copy link
Member

Also, TPv2 e2e tests fail because the Chromedriver dependency is out of date

An error occurred while creating a new ChromeDriver session: [SessionNotCreatedError] session not created: This version of ChromeDriver only supports Chrome version 122
Current browser version is 129.0.6668.58 with binary path /opt/google/chrome/chrome

@zrhoffman zrhoffman added the backport an upstream change merged into an older release label Sep 27, 2024
zrhoffman and others added 3 commits September 27, 2024 13:09
* Use :atc-postgres-version: role in documentation

* Get postgres version from .env in Traffic Ops spec file

* Get POSTGRES_VERSION from .env in Dockerfiles and docker-compose files

* Update Postgres version to 13.16
* No substitution in the name

* Download ATS from the Apache archive

download.apache.org only contains currently-supported releases.

* Use Alpine main repo version 3.16 for adding package libexecinfo-dev

Alpine versions above 3.16 do not contain package libexecinfo-dev, which
ATS needs.

Alpine 3.19 still fails for unknown reasons, but Alpine 3.18 builds with
this fix.

* Set default for GITHUB_REPOSITORY

* Update Apache Traffic Server to 9.2.4

(cherry picked from commit 14007e3)
Co-authored-by: asf-ci-trafficcontrol <asf-ci-trafficcontrol@users.noreply.github.com>

(cherry picked from commit f647d58)
Copy link
Member

@zrhoffman zrhoffman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Close! Still need to update this reference to actions/cache@v2:

uses: actions/upload-artifact@v2

to get CDN-in-a-Box CI / traffic_portal_v2 (pull_request) to pass, and

update Chromedriver to get TPv2 e2e tests to pass.

Update chromedriver

(cherry picked from commit 289c2c3)
@zrhoffman
Copy link
Member

It seems you need c9ab679 from #8034 to get Traffic Ops and Traffic Vault Database Tests / tests to pass

Copy link

codecov bot commented Sep 27, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 27.11%. Comparing base (ad667bb) to head (cccf8d9).

Additional details and impacted files
@@             Coverage Diff              @@
##              8.0.x    #8080      +/-   ##
============================================
- Coverage     28.89%   27.11%   -1.79%     
  Complexity       98       98              
============================================
  Files           850      736     -114     
  Lines         90980    87837    -3143     
  Branches        970      970              
============================================
- Hits          26289    23816    -2473     
+ Misses        62533    62024     -509     
+ Partials       2158     1997     -161     
Flag Coverage Δ
traffic_ops_integration 57.79% <ø> (-11.63%) ⬇️
v3 57.79% <ø> (ø)
v4 ?
v5 ?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@rimashah25 rimashah25 force-pushed the bugfix/reset-password_sql-injection branch from a28534f to cccf8d9 Compare September 27, 2024 20:01
* Update Go version to 1.22.5

* Update some images to Rocky Linux 8

---------

Co-authored-by: asf-ci-trafficcontrol <asf-ci-trafficcontrol@users.noreply.github.com>
Co-authored-by: Zach Hoffman <zrhoffman@apache.org>

(cherry picked from commit 0b21b43)
.env Outdated Show resolved Hide resolved
Co-authored-by: asf-ci-trafficcontrol <asf-ci-trafficcontrol@users.noreply.github.com>

(cherry picked from commit f647d58)
@zrhoffman
Copy link
Member

Only failing tests are

  • TP tests, which are failing due to Docker rate limits and nothing else. They passed on cccf8d9
  • TPv2 tests. TPv2 is an experimental component, so this should not block the 8.0.2 release, IMO

@zrhoffman zrhoffman merged commit bf8568c into apache:8.0.x Sep 27, 2024
45 of 47 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport an upstream change merged into an older release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants