The GitHub Actions job "Java CI with Maven" on stormcrawler.git/main has succeeded. Run started by GitHub user rzo1 (triggered by rzo1).
Head commit for run: 06aa32a0776037552cc488efa542c3e653e4cafd / Richard Zowalla <[email protected]> #2103 OpenSearchConnection: send the credentials only to the configured addresses (#2173) * #2103 OpenSearchConnection: send the credentials only to the configured addresses Both OpenSearchConnection classes, in external/opensearch and external/opensearch-java, registered the Basic credentials of opensearch.<type>.user and opensearch.<type>.password for any host, port and realm (AuthScope.ANY and new AuthScope(null, -1)). In the opensearch module the sniffer is on by default, so the credentials were also offered to every node address it learned from the cluster. An address without a scheme is contacted over plain http, and nothing was logged when the credentials went out that way, nor when opensearch.disable.tls.validation turned off certificate and host name checks. The credentials are now registered for the host and port of each configured address only. A node the sniffer finds under another host or port no longer receives them; such nodes have to be listed in the addresses, or sniffing disabled, if the cluster requires authentication on them. A WARN says so when sniffing is enabled together with credentials. When credentials are configured, a WARN is logged at client creation listing the addresses which use plain http, loopback addresses excepted so that local setups stay quiet. A WARN is also logged whenever opensearch.disable.tls.validation is on. The default scheme for an address without one stays http. Switching it to https would break every existing setup which gives a bare host name for a cluster served over http, including the shipped example configuration, so the warning is used instead. The docs and the example configurations now describe the scoping and recommend https:// addresses with credentials. * Sniff nodes over https when an address uses https and document opensearch.<type>.sniff * Match the OpenSearch credentials on the scheme, host and port of the configured addresses Report URL: https://github.com/apache/stormcrawler/actions/runs/35893575794 With regards, GitHub Actions via GitBox
