DAVE-6.4.2 release notes¶
This document is a summary of content, changes, limitations and fixes of this release as compared to DAVE-6.4.1 release.
Refer to the the Punchplatform official site if you look for the complete documentations and resources.
The documentation for this release can be found inside the deployment archives (standalone and deployer versions), and at https://doc.punchplatform.com/6.4.2/index.html.
Note about upgrades: Please carefully review the documentation for this release before upgrading your clusters. The upgrade notes (e.g. upgrade from 6.3 to 6.4) discuss every critical information about compatibility issues, breaking changes, performance changes, and any other configuration changes that might impact your Punchplatform.
Changes¶
The most important change in this release is the integration of Opensearch 1.2.4 & Opensearch Dashboards 1.2.0.
Opensearch 1.X.Y is compatible with Elasticsearch 7.10.2. For more information on how to migrate data from Elasticsearch to Opensearch, check https://opensearch.org/docs/latest/upgrade-to/upgrade-to/.
Those COTS can be deployed instead of Elasticsearch & Kibana. If you use Opensearch, you must also use OpensearchDashboards.
For standalone :
./install.sh --with-opensearch
For deployment :
In punchplatform-deployment.settings, replace elasticsearch by opensearch
and kibana by opensearch_dashboards and update the parameters as following :
268,269c268,269
< "elasticsearch": {
< "elasticsearch_version": "7.10.2",
---
> "opensearch": {
> "opensearch_version": "1.2.4",
284c284
< "temporary_directory": "/data/elasticsearch/tmp"
---
> "temporary_directory": "/data/opensearch/tmp"
289c289
< "temporary_directory": "/data/elasticsearch/tmp",
---
> "temporary_directory": "/data/opensearch/tmp",
302,303c302,303
< "opendistro_security": {
< "opendistro_security_version": "1.13.1.0",
---
> "opensearch_security": {
> "opensearch_security_version": "1.2.4.0",
312c312
< "kibana_index": ".kibana"
---
> "opensearch_dashboards_index": ".opensearch_dashboards"
329c329
< "temporary_directory": "/data/elasticsearch/tmp"
---
> "temporary_directory": "/data/opensearch/tmp"
346,347c346,347
< "opendistro_security": {
< "opendistro_security_version": "1.13.1.0",
---
> "opensearch_security": {
> "opensearch_security_version": "1.2.4.0",
356c356
< "kibana_index": ".kibana",
---
> "opensearch_dashboards_index": ".opensearch_dashboards",
366,367c366,367
< "kibana": {
< "kibana_version": "7.10.2",
---
> "opensearch_dashboards": {
> "opensearch_dashboards_version": "1.2.0",
370,372c370,372
< "es_cluster_target": "es_data",
< "es_type_of_nodes_targeted": "data_node",
< "kibana_port": 5601,
---
> "opensearch_cluster_target": "es_data",
> "opensearch_type_of_nodes_targeted": "data_node",
> "opensearch_dashboards_port": 5601,
374c374
< "index": ".kibana",
---
> "index": ".opensearch_dashboards",
382,384c382,384
< "elasticsearch_ssl_enabled": true,
< "elasticsearch_ssl_verificationMode": "full",
< "elasticsearch_ssl_certificateAuthorities_names": [
---
> "opensearch_ssl_enabled": true,
> "opensearch_ssl_verificationMode": "full",
> "opensearch_ssl_certificateAuthorities_names": [
389,391c389,391
< "es_cluster_target": "es_monitoring",
< "es_type_of_nodes_targeted": "data_node",
< "kibana_port": 5602,
---
> "opensearch_cluster_target": "es_monitoring",
> "opensearch_type_of_nodes_targeted": "data_node",
> "opensearch_dashboards_port": 5602,
393c393
< "index": ".kibana",
---
> "index": ".opensearch_dashboards",
400,402c400,402
< "elasticsearch_ssl_enabled": true,
< "elasticsearch_ssl_verificationMode": "full",
< "elasticsearch_ssl_certificateAuthorities_names": [
---
> "opensearch_ssl_enabled": true,
> "opensearch_ssl_verificationMode": "full",
> "opensearch_ssl_certificateAuthorities_names": [
408,409c408,409
< "opendistro_security": {
< "opendistro_security_version": "1.13.0.1"
---
> "opensearch_dashboards_security": {
> "opensearch_dashboards_security_version": "1.2.0.0"
The other sections referencing elasticsearch (such as platform.punch_commands, gateway etc...)
do not have to be changed.
You can make a diff between those 2 deployment settings to check differences :
- Log Management Central with Elastic & Kibana
- Log Management Central with Opensearch & Opensearch Dashboards
Deployment configuration can be found in deployment configuration.
Breaking changes¶
Refer to more information about the Kibana Punch Plugin in the Migration Guide.
Improvements¶
- #1799 import kibana objects into a custom opendistro tenant
- #1800 integrate opensearch and opensearch dashboards in standalone
- #1805 integrate opensearch and opensearch dashboards in deployer
- #0001 add a control panel on monitoring dashboards
- #1807 add loop through nodes in punchplatform-es-api.sh
- #1803 add jna.tmpdir option on elasticsearch and opensearch service
Bug Fixes¶
- #1801 fix conflict version on jna library between ceph and elastic
- #1779 fix issues when loading multiple ipRange resource files with IpRangeOperator
- #1809 kv operator fail to correctly replace all escaped substrings occurences
- #1798 fix missing acl package for ubuntu distribution when installing kbn/osd plugins
Security Fixes¶
None.
Internal tasks¶
- #0001 push packagings to artifactory with cicd
- #0001 fix conflict on guava in punch command app
Limitations¶
- Modsecurity does not work with Opensearch.
- Opensearch Dashboards is using "admin:admin" credentials during Punch deployment.
Known bugs¶
None.