...
Issues discovered in testing:
| Discovered by | Issue | bb | db | nw | af |
---|
1 | Bill | DuraCloud integration tests failing due to Spring Security's use of StrictHttpFirewall which does not allow the use of percent symbols. |
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
2 | Bill | When viewing snapshot totals in the UI, the number of snapshots in the spaces list doesn't match the number in the snapshot totals table. This is because only complete snapshots are included in the total. I expect this may be confusing to users (as it was to me initially). The simple resolution would be to adjust the totals table to capture details from all snapshots (complete and in-process). A follow-on ticket could be opened to expand the table to specify details for total, complete, and in-process snapshots. |
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
3 | Andy | The integration test for the Swift S3 endpoint is failing, because the CONTENT_RANGE header is being filtered out. Adding it to the list of valid Swift metadata fixes the issue. |
|
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
4 | Danny | Management Console: When the jsessionid is used for session management it causes an error due to the Spring Security firewall |
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
5 | Danny | Management Console: Invitation email contains a double slash, which results in an error from the Spring Security firewall when clicking on the link |
|
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg)
(still) |
|
6 | Bill | If S3 has an issue retrieving a bucket in an account, then the DurAdmin UI isn't able to display the space listing. The error in the logs: ERROR 2021/12/09 20:41:48 [http-nio-8080-exec-21] (SpacesController.java:92) [getSpacesAsJson()] - Error attempting to get space ACLs 'contentwriter-test-space-33162' due to: null In this case, spaces were deleted from S3, but apparently they weren't removed completely or correctly, so S3 is sending back a bucket listing that includes buckets that fail when you attempt to access them (like to get metadata for ACLs). | JIRA ticket needed |
|
|
|
7 | Danny | Duraspace refs in duradmin and synctoolui links: https://github.com/duracloud/duracloud/pull/163 |
| ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg) |
|
|
8 | Bill | On Windows, the SyncTool installer for 7.1.0-SNAPSHOT is flagged as a potential security risk when starting it up. We should check to see if the released 7.1.0 version has the same warning, and if so, create a JIRA ticket to look into it. | JIRA ticket needed |
|
|
|
Testing of Completed Issues
Regression Testing
Task | bb | db | nw | af |
---|
Perform Regression Tests | ![(info)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/information.svg) | ![(tick)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/check.svg)
I verified that we can build the installers and the osx installer works. I also ran the rest api scripts | ![(info)](/s/h9vz60/9012/1phy4ty/_/images/icons/emoticons/information.svg) |
|
Use ZAProxy to perform a security analysis
- Use a test DuraCloud account with very little content
- Start an Automated Scan
- Remove any sites not relevant to DuraCloud from the "Sites" list
- Generate an HTML
|
and XML - report and attach to this page
| Report summary: - 0 high risk concerns
- 37 medium risk concerns
- 41 low risk concerns
- 37 informational risk concerns
View file |
---|
name | 2021-12-07-ZAP-Report-.html |
---|
height | 250 |
---|
|
|
|
|
|
Build Tests
Release Actions - for each baseline (in this order): DB, DuraCloud, MC, Mill, Snapshot
- Complete testing
- Perform version release (v7.1.0): https://github.com/duracloud/deployment-docs/blob/master/release-new-version.md
-
DuraCloud DB 7.1.0
Code Block |
---|
a note here: the artifacts get signed and published when the main branch is pushed. I didn't realize that and manually signed and published the artifacts. That is why the publish to sonatype failed on the main branch: the artifacts were already present. |
-
DuraCloud 7.1.0
Code Block |
---|
# A manual deploy was required. It was not clear what the issue was sonatype - apparently a validation rule failed when trying to close the staging repository.
# To create the elastic beanstalk zip:
cd target
zip -r duracloud-elasticbeanstalk-7.1.0-33fa7cd.zip dura* .ebextensions ROOT.war .platform
# Then manually upload to github release page
# I manually created the installers and uploaded them to the release page.
|
- DuraCloud MC 7.1.0
- DuraCloud Mill 4.1.0
- DuraCloud Bridge 3.1.0
- Deploy release zip to production Beanstalk
- Create release notes in Github
- Update documentation
- Update download links to point to Github release
...