Skip to content

Conversation

@siegfriedweber
Copy link
Member

@siegfriedweber siegfriedweber commented Jan 13, 2026

Description

Add OpenSearch 3.4.0

  • opensearch 3.1.0: Kept org.cyclonedx.bom at version 1.8.2; Newer versions would have required updates to dependencies.
  • opensearch 3.4.0:
    • Set org.cyclonedx.bom to version 3.1.0; Upgrades to dependencies were required, but older versions of the CycloneDX Gradle Plugin are not compatible with the used Gradle version 9.2.
    • Use JDK 24, because it is also bundled in the upstream image.
    • Make the scripts in the security-plugin executable again. They lost the executable flag in the 3.4.0 build.
  • opensearch/opensearch-prometheus-exporter 3.1.0.0: Upgraded org.cyclonedx.bom to version 2.4.1; Newer versions would have required updates to dependencies.
  • opensearch/opensearch-prometheus-exporter 3.4.0.0: Set org.cyclonedx.bom to version 2.4.1; Newer versions would have required updates to dependencies.
  • opensearch/security-plugin 3.1.0.0: Upgraded org.cyclonedx.bom to version 2.4.1; Newer versions would have required updates to dependencies.
  • opensearch/security-plugin 3.4.0.0: Set org.cyclonedx.bom to version 3.1.0.

Definition of Done Checklist

Note

Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant.

Please make sure all these things are done and tick the boxes

  • Changes are OpenShift compatible
  • All added packages (via microdnf or otherwise) have a comment on why they are added
  • Things not downloaded from Red Hat repositories should be mirrored in the Stackable repository and downloaded from there
  • All packages should have (if available) signatures/hashes verified
  • Add an entry to the CHANGELOG.md file
  • Integration tests ran successfully
TIP: Running integration tests with a new product image

The image can be built and uploaded to the kind cluster with the following commands:

boil build <IMAGE> --image-version <RELEASE_VERSION> --strip-architecture --load
kind load docker-image <MANIFEST_URI> --name=<name-of-your-test-cluster>

See the output of boil to retrieve the image manifest URI for <MANIFEST_URI>.

@siegfriedweber siegfriedweber self-assigned this Jan 13, 2026
@siegfriedweber siegfriedweber marked this pull request as ready for review January 13, 2026 10:47
@siegfriedweber siegfriedweber requested a review from a team January 13, 2026 10:47
@siegfriedweber siegfriedweber moved this to Development: Waiting for Review in Stackable Engineering Jan 13, 2026
@dervoeti dervoeti self-requested a review January 13, 2026 13:08
@dervoeti dervoeti moved this from Development: Waiting for Review to Development: In Review in Stackable Engineering Jan 13, 2026
@siegfriedweber siegfriedweber removed the request for review from a team January 13, 2026 14:01
Copy link
Member

@dervoeti dervoeti left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One integration test for 3.1.0 failed but it looks like flakiness.

The images for 3.4.0 and 3.1.0 built fine locally for me, SBOMs look good as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Development: In Review

Development

Successfully merging this pull request may close these issues.

3 participants