All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Upgrade to Java 17 and NodeJS 20
- Patched Apache Commons IO vulnerability
- Change EC2 userdata script to install Python 3.10
- Fix Data Node Splitting in Tiers #33
- Apache curl alternative url for Druid and Zookeeper for installation in case archive.apache is unavailable
- Patch versions of path-to-regexp, aws-cdk and micromatch
- Upgrade Zookeeper to the latest patch version of v3.8.4
- Upgrade Druid to v30.0.0
- Upgrade Druid-Operator to be v1.2.3
- EC2 instances now require IMDSv2
- Patch axios vulnerability
- Empty S3 buckets during teardown if needed
- Gracefully delete CloudWatch Synthetics Canary network interfaces
- Patched fast-xml-parser vulnerability
- Fix the outdated segmentCache selection strategy runtime config #11
- Fix log/metrics endpoints when fips enabled #14
- allow solution to config internal system #7
- Update zk netplan render to handle docker bridge network interface#8
- add support to define custom oidc scopes #9
- Bump CloudWatch Synthetics runtime version #10
- Add vpc to all lambdas, allow users to self manage install bucket assets #15
- setup nvme disk for data/historical/middlemanager #16
- Use proper cfn endpoint, update name tag to include tier #22
- adding graceful shutdown for druid process #23
- for pac4j version change: OidcAuthenticator.java, OidcConfig.java, OidcFilter.java, OidcSessionStore.java
- ec2 user data for provisioning changes
- deprecated RDS certificate name changed from RDS_CA_RDS2048_G1 to RDS_CA_RSA2048_G1
- deprecated CloudWatch VPC endpoint name changed from CLOUDWATCH to CLOUDWATCH_MONITORING
- README instructions
- cdk version updated to 2.146.0
- Druid release to 29.0.1
- braces package to 3.0.3 due to CVE-2024-4068
- unit test improvements
- pac4j package to 4.5.7 due to CVE-2021-44878
- druid-oidc to 29.0.1
- guava to 32.0.0-jre due to CVE-2023-2976
- All files, initial version