Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update security workflow #2

Closed
wants to merge 78 commits into from
Closed

update security workflow #2

wants to merge 78 commits into from

Conversation

Hailong-am
Copy link
Owner

Description

[Describe what this change achieves]

Issues Resolved

[List any issues this PR will resolve]

Check List

  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

qreshi and others added 30 commits July 6, 2022 14:16
* Add initial framework for BWC tests

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update developer guide with commands to run bwc tests

Signed-off-by: Mohammad Qureshi <[email protected]>
…orkflow (opensearch-project#483)

* Run Cypress tests as part of Notifications Dashboards GitHub Action workflow

Signed-off-by: Mohammad Qureshi <[email protected]>

* Use Java 11 for test run

Signed-off-by: Mohammad Qureshi <[email protected]>

* Fix bad indentation

Signed-off-by: Mohammad Qureshi <[email protected]>

* Fix Cypress snapshot and video path

Signed-off-by: Mohammad Qureshi <[email protected]>
* Adding K8s service name as webhook destination

Signed-off-by: jiahe zhang <[email protected]>

* Using Ternary operators and variable name changed

Signed-off-by: jiahe zhang <[email protected]>

* ktlint

Signed-off-by: jiahe zhang <[email protected]>

* refactored

Signed-off-by: jiahe zhang <[email protected]>

* validate FQDN

Signed-off-by: jiahe zhang <[email protected]>

* testing

Signed-off-by: jiahe zhang <[email protected]>

* testing

Signed-off-by: jiahe zhang <[email protected]>

* ktlint

Signed-off-by: jiahe zhang <[email protected]>

* test

Signed-off-by: jiahe zhang <[email protected]>

* testing

Signed-off-by: jiahe zhang <[email protected]>

* removing unused dependency

Signed-off-by: jiahe zhang <[email protected]>

* testing

Signed-off-by: jiahe zhang <[email protected]>

* Added more tests

Signed-off-by: jiahe zhang <[email protected]>
* Version increment automation

Signed-off-by: pgodithi <[email protected]>

* Version increment automation: task rename updateVersion

Signed-off-by: pgodithi <[email protected]>
* Add workflow to create documentation issues

Signed-off-by: Mohammad Qureshi <[email protected]>

* Add license header to workflow file

Signed-off-by: Mohammad Qureshi <[email protected]>
* Add security tests and workflow plus minor fix

Signed-off-by: Ashish Agrawal <[email protected]>

* fix test and update workflow

Signed-off-by: Ashish Agrawal <[email protected]>

* apply cleanup comments

Signed-off-by: Ashish Agrawal <[email protected]>
…t#496)

* Resolve hosts when checking against host deny list

Signed-off-by: Mohammad Qureshi <[email protected]>

* Stub isHostInDenyList() for notification core unit tests

Signed-off-by: Mohammad Qureshi <[email protected]>

* Stub the correct isHostInDenylist function

Signed-off-by: Mohammad Qureshi <[email protected]>

* Use Before annotation instead for mocking setup

Signed-off-by: Mohammad Qureshi <[email protected]>

* Test switching one of the ChimeDestinationTests to use mockk instead of EasyMock

Signed-off-by: Mohammad Qureshi <[email protected]>

* Switch to BeforeEach for setup and remove unneeded unit test

Signed-off-by: Mohammad Qureshi <[email protected]>

* Change CustomWebhookDestinationTest and SlackDestinationTests to use BeforeEach as well for consistency

Signed-off-by: Mohammad Qureshi <[email protected]>
Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Mohammad Qureshi <[email protected]>
* Bump to 2.3.0

Signed-off-by: Mohammad Qureshi <[email protected]>

* Make removal of the existing plugins in the security GitHub Action conditional on its existence in the Docker image

Signed-off-by: Mohammad Qureshi <[email protected]>

* Bump mockito-core to 4.7.0

Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Mohammad Qureshi <[email protected]>
)

* Change the SendTestMessage API to be a POST call

Signed-off-by: Mohammad Qureshi <[email protected]>

* Include GET send test message path as a depricated option until next major version

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update documentation comment for SendTestMessage replaced route

Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Mohammad Qureshi <[email protected]>
…earch-project#487)

Bumps [moment](https://github.com/moment/moment) from 2.29.3 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.3...2.29.4)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ct#545)

* Add test case for LEGACY SNS and 2.4 version update

Signed-off-by: Ashish Agrawal <[email protected]>
Signed-off-by: prudhvigodithi <[email protected]>

Signed-off-by: prudhvigodithi <[email protected]>
Signed-off-by: prudhvigodithi <[email protected]>

Signed-off-by: prudhvigodithi <[email protected]>
)

Add build and test workflows for Mac and Windows

Signed-off-by: Mohammad Qureshi <[email protected]>
…#566)

* the millisecond granularity was causing bounds mismatch between 2 intervals
* made the upper bound exclusive while fetching config to fix indeterminism

Signed-off-by: Rishabh Maurya <[email protected]>

Signed-off-by: Rishabh Maurya <[email protected]>
…opensearch-project#550)

* Edited help text to reference only the respective sender types.

Signed-off-by: AWSHurneyt <[email protected]>

* Implemented unit tests to confirm SMTP assets are not visible when SMTP is an unsupported config type.

Signed-off-by: AWSHurneyt <[email protected]>

Signed-off-by: AWSHurneyt <[email protected]>
* Add retries to first test in each Cypress suite to counter random timeout failures

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update dashboard version in CI to 2.4.0 until branch is updated to newer version

Signed-off-by: Mohammad Qureshi <[email protected]>

* Move Cypress retry to global config

Signed-off-by: Mohammad Qureshi <[email protected]>

* Reduce Cypress retry count to 2

Signed-off-by: Mohammad Qureshi <[email protected]>

* Remove MacOS from Dashboard test matrix for now

Signed-off-by: Mohammad Qureshi <[email protected]>

* Remove include args for macos dashboard test

Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Mohammad Qureshi <[email protected]>
* Bump to 3.0

Signed-off-by: Ashish Agrawal <[email protected]>

* update packages

Signed-off-by: Ashish Agrawal <[email protected]>

* Update http client and core

Signed-off-by: Ashish Agrawal <[email protected]>

* Fix integ test issue for sending messages

Signed-off-by: Ashish Agrawal <[email protected]>

* use admin client for wiping os indices

Signed-off-by: Ashish Agrawal <[email protected]>

* remove admin client

Signed-off-by: Ashish Agrawal <[email protected]>

* update flow and gradle

Signed-off-by: Ashish Agrawal <[email protected]>

* update flow and gradle

Signed-off-by: Ashish Agrawal <[email protected]>

* Update BWC to use 2.5.0 as the source version

Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Ashish Agrawal <[email protected]>
Signed-off-by: Mohammad Qureshi <[email protected]>
Co-authored-by: Mohammad Qureshi <[email protected]>
…ter upgrading to 3.0 (opensearch-project#583)

Signed-off-by: Andriy Redko <[email protected]>

Signed-off-by: Andriy Redko <[email protected]>
Signed-off-by: Ashish Agrawal <[email protected]>

Signed-off-by: Ashish Agrawal <[email protected]>
…ests (opensearch-project#590)

* Add refresh to config creation in tests

Signed-off-by: Mohammad Qureshi <[email protected]>

* Remove duplicate createConfig utility methods for tests

Signed-off-by: Mohammad Qureshi <[email protected]>

* Replace delete config calls in tests with helper method with indices refresh

Signed-off-by: Mohammad Qureshi <[email protected]>

* Replace creating config from JSON string calls with helper method that refreshes indices

Signed-off-by: Mohammad Qureshi <[email protected]>

* Update security test back to correct request with expected response assertion

Signed-off-by: Mohammad Qureshi <[email protected]>

Signed-off-by: Mohammad Qureshi <[email protected]>
Signed-off-by: Chenyang Ji <[email protected]>

Signed-off-by: Chenyang Ji <[email protected]>
Co-authored-by: Chenyang Ji <[email protected]>
gaobinlong and others added 24 commits May 26, 2023 18:45
* Add 2.8.0 release notes

Signed-off-by: gaobinlong <[email protected]>

* Modify release notes

Signed-off-by: gaobinlong <[email protected]>

* modify releate notes

Signed-off-by: gaobinlong <[email protected]>

---------

Signed-off-by: gaobinlong <[email protected]>
* Support SNS FIFO queues

Signed-off-by: Ashish Agrawal <[email protected]>

* use clusterService.clusterName when applicable

Signed-off-by: Ashish Agrawal <[email protected]>

* fix unit tests

Signed-off-by: Ashish Agrawal <[email protected]>

---------

Signed-off-by: Ashish Agrawal <[email protected]>
Co-authored-by: Hailong Cui <[email protected]>
* add auto upgrade mapping logic

Signed-off-by: zhichao-aws <[email protected]>

* put load mapping to initialize step

Signed-off-by: zhichao-aws <[email protected]>

* add schema_version field

Signed-off-by: zhichao-aws <[email protected]>

* add integ test

Signed-off-by: zhichao-aws <[email protected]>

* add integ test for lacking _meta field

Signed-off-by: zhichao-aws <[email protected]>

---------

Signed-off-by: zhichao-aws <[email protected]>
* fix actions

Signed-off-by: zhichao-aws <[email protected]>

* fix test

Signed-off-by: zhichao-aws <[email protected]>

---------

Signed-off-by: zhichao-aws <[email protected]>
* Added feature support for microsoft teams webhoo

Signed-off-by: danielkyalo599 <[email protected]>

* Added feature support for microsoft teams webhook ,removed valid webhooks

Signed-off-by: danielkyalo599 <[email protected]>

* Added feature support for Microsoft teams webhook

Signed-off-by: danielkyalo599 <[email protected]>

* Refactored feature support for  ms teams and added unit and integTest

Signed-off-by: danielkyalo599 <[email protected]>

* fix build in core

Signed-off-by: zhichao-aws <[email protected]>

* fix core-spi build

Signed-off-by: zhichao-aws <[email protected]>

* fix notifications main code

Signed-off-by: zhichao-aws <[email protected]>

* fix mappings, add IT

Signed-off-by: zhichao-aws <[email protected]>

* add auto upgrade mapping logic

Signed-off-by: zhichao-aws <[email protected]>

* put load mapping to initialize step

Signed-off-by: zhichao-aws <[email protected]>

* add schema_version field

Signed-off-by: zhichao-aws <[email protected]>

* add integ test

Signed-off-by: zhichao-aws <[email protected]>

* adjust with auto upgrade mapping logic

Signed-off-by: zhichao-aws <[email protected]>

* add bwc

Signed-off-by: zhichao-aws <[email protected]>

* modify bwc

Signed-off-by: zhichao-aws <[email protected]>

* modify bwc

Signed-off-by: zhichao-aws <[email protected]>

* resolve  comments

Signed-off-by: zhichao-aws <[email protected]>

* add license header

Signed-off-by: zhichao-aws <[email protected]>

* fix microsoft teams sample url in IT to adapt url validation

Signed-off-by: zhichao-aws <[email protected]>

---------

Signed-off-by: danielkyalo599 <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>
Co-authored-by: danielkyalo599 <[email protected]>
* add validation failure message for Microsoft Teams

Signed-off-by: zhichao-aws <[email protected]>

* modify integtest

Signed-off-by: zhichao-aws <[email protected]>

---------

Signed-off-by: zhichao-aws <[email protected]>
* Add 2.10.0 release notes

Signed-off-by: Hailong Cui <[email protected]>

* update release notes

Signed-off-by: Hailong Cui <[email protected]>

* Update opensearch-notifications.release-notes-2.10.0.0.md

Signed-off-by: Hailong Cui <[email protected]>

* fix wrong PR number

Signed-off-by: Hailong Cui <[email protected]>

---------

Signed-off-by: Hailong Cui <[email protected]>
…x warning (opensearch-project#784)

* Fix integration test failure by allowing direct access to system index warning

Signed-off-by: gaobinlong <[email protected]>

* Fix bwc test failure of throwing direct access to system index when getting mapping

Signed-off-by: gaobinlong <[email protected]>

---------

Signed-off-by: gaobinlong <[email protected]>
@codecov-commenter
Copy link

Welcome to Codecov 🎉

Once merged to your default branch, Codecov will compare your coverage reports and display the results in this comment.

Thanks for integrating Codecov - We've got you covered ☂️

@Hailong-am Hailong-am force-pushed the security_workflow branch 2 times, most recently from 373b232 to 22de490 Compare October 16, 2023 03:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.