From 3efc75775a486e5116d73dd1180c461870edb51b Mon Sep 17 00:00:00 2001 From: Fiete Ostkamp Date: Mon, 24 Feb 2025 08:31:33 +0100 Subject: [AAI] 15.0.3 release - [graphadmin] make auth configurable - [resources, traversal] cleanup logback config by removing logToFile option [0] - [resources, traversal] reduce log noise from liveness probe - [babel] make tracing configurable via globals [0] this is not a viable option anymore in a readonly filesystem. EmptyDir volumes can still allow logging to file, but sooner or later these volumes fill up Issue-ID: AAI-4124 Change-Id: I3a8284e3cd8a3b387722fa49506cfdeaeeb303f0 Signed-off-by: Fiete Ostkamp --- .../resources/config/application.properties | 6 - .../resources/config/localhost-access-logback.xml | 108 ------- .../aai-resources/resources/config/logback.xml | 348 +-------------------- .../aai-resources/templates/configmap.yaml | 1 - .../aai-resources/templates/deployment.yaml | 3 - 5 files changed, 11 insertions(+), 455 deletions(-) delete mode 100644 kubernetes/aai/components/aai-resources/resources/config/localhost-access-logback.xml (limited to 'kubernetes/aai/components/aai-resources') diff --git a/kubernetes/aai/components/aai-resources/resources/config/application.properties b/kubernetes/aai/components/aai-resources/resources/config/application.properties index cde0261b6c..5a16ebe9ef 100644 --- a/kubernetes/aai/components/aai-resources/resources/config/application.properties +++ b/kubernetes/aai/components/aai-resources/resources/config/application.properties @@ -54,13 +54,7 @@ server.local.startpath=aai-resources/src/main/resources/ server.basic.auth.location=${server.local.startpath}etc/auth/realm.properties server.port=8447 -security.require-ssl=false -server.ssl.enabled=false -# JMS bind address host port -jms.bind.address=tcp://localhost:61647 - -# dmaap is deprecated now kafka is used spring.kafka.producer.bootstrap-servers=${BOOTSTRAP_SERVERS} spring.kafka.producer.properties.security.protocol=SASL_PLAINTEXT spring.kafka.producer.properties.sasl.mechanism=SCRAM-SHA-512 diff --git a/kubernetes/aai/components/aai-resources/resources/config/localhost-access-logback.xml b/kubernetes/aai/components/aai-resources/resources/config/localhost-access-logback.xml deleted file mode 100644 index 54c3d81e05..0000000000 --- a/kubernetes/aai/components/aai-resources/resources/config/localhost-access-logback.xml +++ /dev/null @@ -1,108 +0,0 @@ -{{/* - -*/}} - - - - - - - - - - - - - ${AJSC_HOME}/logs/ajsc-jetty/localhost_access.log - - ${AJSC_HOME}/logs/ajsc-jetty/localhost_access.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - %a %u %z [%t] "%m %U%q" %s %b %y %i{X-TransactionId} %i{X-FromAppId} - %i{X-Forwarded-For} %i{X-AAI-SSL-Client-CN} %i{X-AAI-SSL-Client-OU} - %i{X-AAI-SSL-Client-O} %i{X-AAI-SSL-Client-L} %i{X-AAI-SSL-Client-ST} - %i{X-AAI-SSL-Client-C} %i{X-AAI-SSL-Client-NotBefore} %i{X-AAI-SSL-Client-NotAfter} - %i{X-AAI-SSL-Client-DN} %D - - - - - - - - - %a %u %z [%t] "%m %U%q" %s %b %y %i{X-TransactionId} %i{X-FromAppId} - %i{X-Forwarded-For} %i{X-AAI-SSL-Client-CN} %i{X-AAI-SSL-Client-OU} %i{X-AAI-SSL-Client-O} - %i{X-AAI-SSL-Client-L} %i{X-AAI-SSL-Client-ST} %i{X-AAI-SSL-Client-C} - %i{X-AAI-SSL-Client-NotBefore} %i{X-AAI-SSL-Client-NotAfter} %i{X-AAI-SSL-Client-DN} %D - - "logType": "access" - - - - - - /aai/util/echo - - NEUTRAL - DENY - - - - - - - - -{{/* - -*/}} diff --git a/kubernetes/aai/components/aai-resources/resources/config/logback.xml b/kubernetes/aai/components/aai-resources/resources/config/logback.xml index c458fb8eae..32334d0c5c 100644 --- a/kubernetes/aai/components/aai-resources/resources/config/logback.xml +++ b/kubernetes/aai/components/aai-resources/resources/config/logback.xml @@ -29,24 +29,12 @@ - - - - - - - + @@ -66,284 +54,22 @@ - - - - ${logDirectory}/rest/sane.log - - ${logDirectory}/rest/sane.log.%d{yyyy-MM-dd}.zip - ${maxHistory} - ${totalSizeCap} - - - %d{HH:mm:ss.SSS} [%thread] %-5level %logger{1024} - %msg%n - - - - - - ${queueSize} - true - - - - ${logDirectory}/rest/metrics.log - - ${logDirectory}/rest/metrics.log.%d{yyyy-MM-dd}.zip - ${maxHistory} - ${totalSizeCap} - - - ${metricPattern} - - - - - ${queueSize} - true - - - - - - DEBUG - ACCEPT - DENY - - ${logDirectory}/rest/debug.log - - ${logDirectory}/rest/debug.log.%d{yyyy-MM-dd}.zip - ${maxHistory} - ${totalSizeCap} - - - ${debugPattern} - - - - - ${queueSize} - - true - - - ${logDirectory}/rest/error.log - - ${logDirectory}/rest/error.log.%d{yyyy-MM-dd}.zip - ${maxHistory} - ${totalSizeCap} - - - WARN - - - ${errorPattern} - - - - - ${queueSize} - - - - - ${logDirectory}/rest/audit.log - - ${logDirectory}/rest/audit.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - ${auditPattern} - - - - - ${queueSize} - true - - - - - - DEBUG - ACCEPT - DENY - - ${logDirectory}/rest/translog.log - - ${logDirectory}/rest/translog.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - ${transLogPattern} - - - - - ${queueSize} - true - - - - - - WARN - - ${logDirectory}/kafkaAAIEventConsumer/error.log - - ${logDirectory}/kafkaAAIEventConsumer/error.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - ${errorPattern} - - - - - - - DEBUG - ACCEPT - DENY - - ${logDirectory}/kafkaAAIEventConsumer/debug.log - - ${logDirectory}/kafkaAAIEventConsumer/debug.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - ${debugPattern} - - - - - INFO - ACCEPT - DENY - - ${logDirectory}/kafkaAAIEventConsumer/kafka-transaction.log - - ${logDirectory}/kafkaAAIEventConsumer/kafka-transaction.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - ${auditPattern} - - - - - INFO - ACCEPT - DENY - - ${logDirectory}/kafkaAAIEventConsumer/metrics.log - - ${logDirectory}/kafkaAAIEventConsumer/metrics.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - ${metricPattern} - - - - - WARN - - ${logDirectory}/external/external.log - - ${logDirectory}/external/external.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - ${debugPattern} - - - - - DEBUG - - ${logDirectory}/auth/auth.log - - ${logDirectory}/auth/auth.log.%d{yyyy-MM-dd}.zip - - ${maxHistory} - ${totalSizeCap} - - - %d{yyyy-MM-dd'T'HH:mm:ss.SSSZ, UTC}[%thread] %-5level %logger{1024} - %msg%n - - - - ${queueSize} - true - - - - + + - - - timestamp - - - context - ServerIPAddress - EntryTimestamp - InvokeTimestamp - ErrorCode - ErrorDesc - - - exception - - ^sun\.reflect\..*\.invoke - ^net\.sf\.cglib\.proxy\.MethodProxy\.invoke - true - - - thread - - logger - 36 - - - - {"logType":"app"} - - + + + DEBUG + + + ${CONSOLE_LOG_PATTERN} + utf8 - @@ -365,73 +91,21 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/kubernetes/aai/components/aai-resources/templates/configmap.yaml b/kubernetes/aai/components/aai-resources/templates/configmap.yaml index 8e13c8c90d..acf30c831d 100644 --- a/kubernetes/aai/components/aai-resources/templates/configmap.yaml +++ b/kubernetes/aai/components/aai-resources/templates/configmap.yaml @@ -23,7 +23,6 @@ metadata: labels: {{- include "common.labels" . | nindent 4 }} data: {{ tpl (.Files.Glob "resources/config/logback.xml").AsConfig . | indent 2 }} -{{ tpl (.Files.Glob "resources/config/localhost-access-logback.xml").AsConfig . | indent 2 }} {{ tpl (.Files.Glob "resources/config/janusgraph-realtime.properties").AsConfig . | indent 2 }} {{ tpl (.Files.Glob "resources/config/aaiconfig.properties").AsConfig . | indent 2 }} {{ tpl (.Files.Glob "resources/config/application.properties").AsConfig . | indent 2 }} diff --git a/kubernetes/aai/components/aai-resources/templates/deployment.yaml b/kubernetes/aai/components/aai-resources/templates/deployment.yaml index 01faacbb75..6b35a0f252 100644 --- a/kubernetes/aai/components/aai-resources/templates/deployment.yaml +++ b/kubernetes/aai/components/aai-resources/templates/deployment.yaml @@ -98,9 +98,6 @@ spec: - mountPath: /opt/app/aai-resources/resources/logback.xml name: {{ include "common.fullname" . }}-config subPath: logback.xml - - mountPath: /opt/app/aai-resources/resources/localhost-access-logback.xml - name: {{ include "common.fullname" . }}-config - subPath: localhost-access-logback.xml - mountPath: /opt/app/aai-resources/resources/etc/auth/realm.properties name: {{ include "common.fullname" . }}-config subPath: realm.properties -- cgit