Gabor,

Thanks for highlighting this issue, it sounds like the default
configuration expectation changed with the upgrade to Spring 6.

This should probably be carried over to a new thread, but based on an
initial review of the history, the MiNiFi C2 Server has had minimal
maintenance in the last two years, so it may be worth considering
removal from the main branch as part of NiFi 2.0.

Regards,
David Handermann

On Mon, Jan 22, 2024 at 1:02 PM Gábor Gyimesi <[email protected]> wrote:
>
> Hi,
>
> I've also found an issue with RC earlier today, that the Minifi C2 server
> is not working anymore with Minifi C++.
>
> It seems that the Jetty server upgrade which was part of NIFI-11703 (
> https://github.com/apache/nifi/pull/8197) broke the compatibility and now
> we are getting 403 Forbidden response in the heartbeats:
>
> 2024-01-22 15:54:47,262 DEBUG [qtp443721024-38]
> o.s.security.web.csrf.CsrfFilter Invalid CSRF token found for
> http://localhost:10090/c2/config/heartbeat
> 2024-01-22 15:54:47,263 DEBUG [qtp443721024-38]
> o.s.s.web.access.AccessDeniedHandlerImpl Responding with 403 status
> code
>
> Kalman Jantner is working on the issue, maybe this fix should also be
> included in the next RC.
>
> BR,
> Gabor
>
> On Mon, 22 Jan 2024 at 17:08, Dan S <[email protected]> wrote:
>
> > Joe,
> >  I do not have any specific settings.xml.
> >
> > Chris,
> >  Before building I had wiped away my local Maven repo per the optional step
> > in Release Candidate Verification
> > <
> > https://cwiki.apache.org/confluence/display/NIFI/Release+Candidate+Verification
> > >
> >
> > On Mon, Jan 22, 2024 at 11:05 AM Chris Sampson
> > <[email protected]> wrote:
> >
> > > Maven might have got itself confused. Could you try clearing out your
> > > .m2/repository (at least if anything in the org/apache/nifi directories)?
> > >
> > > Note that if you delete the whole local repo, then the build will need to
> > > re-download all 3rd party libraries too, so things will take longer.
> > >
> > > On the new UI front, should it be covered by the include-all profile in
> > the
> > > nifi-assembly (I don't think it is currently, but that's maybe
> > intentional
> > > and in the cards to change later one it's more stable)?
> > >
> > > On Mon, 22 Jan 2024, 15:58 Dan S, <[email protected]> wrote:
> > >
> > > > ./mvnw -T 1C clean install -Pcontrib-check
> > > >
> > > > On Mon, Jan 22, 2024 at 10:55 AM David Handermann <
> > > > [email protected]> wrote:
> > > >
> > > > > Dan,
> > > > >
> > > > > Thanks for noting this build behavior.
> > > > >
> > > > > The release candidate process does not publish artifacts to the Maven
> > > > > Central repository. The RC build only publishes artifacts to the
> > > > > Apache Nexus staging repository. When running the standard full
> > > > > rebuild as described in the release verification steps, it should not
> > > > > try to retrieve release versions at all. Can you provide the command
> > > > > you used for the initial build?
> > > > >
> > > > > Regards,
> > > > > David Handermann
> > > > >
> > > > > On Mon, Jan 22, 2024 at 9:52 AM Dan S <[email protected]> wrote:
> > > > > >
> > > > > > Sorry typo in my previous email
> > > > > >  would like to bring to your attention that I had a problem
> > building
> > > as
> > > > > > certain dependencies did seem to be present in Maven repos.
> > > > > >  would like to bring to your attention that I had a problem
> > building
> > > as
> > > > > > certain dependencies did not seem to be present in Maven repos.
> > > > > >
> > > > > > On Mon, Jan 22, 2024 at 10:36 AM Dan S <[email protected]> wrote:
> > > > > >
> > > > > > > David,
> > > > > > >  Despite cancelling RC1 I would like to bring to your attention
> > > that
> > > > I
> > > > > had
> > > > > > > a problem building as certain dependencies did seem to be present
> > > in
> > > > > Maven
> > > > > > > repos.
> > > > > > > I initially got
> > > > > > >
> > > > > > >> Could not resolve dependencies for project
> > > > > > >> org.apache.nifi:nifi-stateless-nar:nar:2.0.0-M2: The following
> > > > > artifacts
> > > > > > >> could not be resolved:
> > > > > org.apache.nifi:nifi-stateless-engine:jar:2.0.0-M2
> > > > > > >> (absent): Could not find artifact
> > > > > > >> org.apache.nifi:nifi-stateless-engine:jar:2.0.0-M2 in central (
> > > > > > >> https://repo.maven.apache.org/maven2)
> > > > > > >
> > > > > > >
> > > > > > > I tried resuming and I had to manually resume with the following
> > as
> > > > it
> > > > > > > errored each time.
> > > > > > >
> > > > > > >> ./mvnw -T 1C clean install -Pcontrib-check -rf
> > :nifi-stateless-nar
> > > > > > >> ./mvnw -T 1C clean install -Pcontrib-check -rf
> > > :nifi-salesforce-nar
> > > > > > >> ./mvnw -T 1C clean install -Pcontrib-check -rf :nifi-zendesk-nar
> > > > > > >> ./mvnw -T 1C clean install -Pcontrib-check -rf
> > :nifi-airtable-nar
> > > > > > >> ./mvnw -T 1C clean install -Pcontrib-check -rf
> > > > > :nifi-box-services-api-nar
> > > > > > >> ./mvnw -T 1C clean install -Pcontrib-check -rf :nifi-cipher-nar
> > > > > > >
> > > > > > >
> > > > > > > At the last command I got an error with
> > > > > > >
> > > > > > >> [ERROR] Failed to execute goal on project nifi-cipher-nar: Could
> > > not
> > > > > > >> resolve dependencies for project
> > > > > > >> org.apache.nifi:nifi-cipher-nar:nar:2.0.0-M2: The following
> > > > artifacts
> > > > > could
> > > > > > >> not be resolved:
> > > org.apache.nifi:nifi-cipher-processors:jar:2.0.0-M2
> > > > > > >> (absent), org.apache.nifi:nifi-standard-shared-nar:nar:2.0.0-M2
> > > > > (absent):
> > > > > > >> org.apache.nifi:nifi-cipher-processors:jar:2.0.0-M2 was not
> > found
> > > in
> > > > > > >> https://repo.maven.apache.org/maven2 during a previous attempt.
> > > > This
> > > > > > >> failure was cached in the local repository and resolution is not
> > > > > > >> reattempted until the update interval of central has elapsed or
> > > > > updates are
> > > > > > >> forced -> [Help 1]
> > > > > > >> [ERROR] Failed to execute goal on project nifi-apicurio-nar:
> > Could
> > > > not
> > > > > > >> resolve dependencies for project
> > > > > > >> org.apache.nifi:nifi-apicurio-nar:nar:2.0.0-M2: The following
> > > > > artifacts
> > > > > > >> could not be resolved:
> > > > > > >>
> > org.apache.nifi:nifi-apicurio-schema-registry-service:jar:2.0.0-M2
> > > > > > >> (absent), org.apache.nifi:nifi-standard-shared-nar:nar:2.0.0-M2
> > > > > (absent):
> > > > > > >> Could not find artifact
> > > > > > >>
> > org.apache.nifi:nifi-apicurio-schema-registry-service:jar:2.0.0-M2
> > > > in
> > > > > > >> central (https://repo.maven.apache.org/maven2) -> [Help 1]
> > > > > > >> [ERROR] Failed to execute goal on project nifi-py4j-nar: Could
> > not
> > > > > > >> resolve dependencies for project
> > > > > > >> org.apache.nifi:nifi-py4j-nar:nar:2.0.0-M2: The following
> > > artifacts
> > > > > could
> > > > > > >> not be resolved: org.apache.nifi:nifi-py4j-bridge:jar:2.0.0-M2
> > > > > (absent),
> > > > > > >> org.apache.nifi:nifi-standard-shared-nar:nar:2.0.0-M2 (absent):
> > > > Could
> > > > > not
> > > > > > >> find artifact org.apache.nifi:nifi-py4j-bridge:jar:2.0.0-M2 in
> > > > > central (
> > > > > > >> https://repo.maven.apache.org/maven2) -> [Help 1]
> > > > > > >> [ERROR] Failed to execute goal on project
> > nifi-opentelemetry-nar:
> > > > > Could
> > > > > > >> not resolve dependencies for project
> > > > > > >> org.apache.nifi:nifi-opentelemetry-nar:nar:2.0.0-M2: The
> > following
> > > > > > >> artifacts could not be resolved:
> > > > > > >> org.apache.nifi:nifi-opentelemetry-processors:jar:2.0.0-M2
> > > (absent),
> > > > > > >> org.apache.nifi:nifi-standard-shared-nar:nar:2.0.0-M2 (absent):
> > > > Could
> > > > > not
> > > > > > >> find artifact
> > > > > org.apache.nifi:nifi-opentelemetry-processors:jar:2.0.0-M2 in
> > > > > > >> central (https://repo.maven.apache.org/maven2) -> [Help 1]
> > > > > > >> [ERROR] Failed to execute goal on project nifi-jolt-nar: Could
> > not
> > > > > > >> resolve dependencies for project
> > > > > > >> org.apache.nifi:nifi-jolt-nar:nar:2.0.0-M2: The following
> > > artifacts
> > > > > could
> > > > > > >> not be resolved:
> > > > org.apache.nifi:nifi-standard-shared-nar:nar:2.0.0-M2
> > > > > > >> (absent), org.apache.nifi:nifi-jolt-processors:jar:2.0.0-M2
> > > > (absent):
> > > > > > >> org.apache.nifi:nifi-standard-shared-nar:nar:2.0.0-M2 was not
> > > found
> > > > in
> > > > > > >> https://repo.maven.apache.org/maven2 during a previous attempt.
> > > > This
> > > > > > >> failure was cached in the local repository and resolution is not
> > > > > > >> reattempted until the update interval of central has elapsed or
> > > > > updates are
> > > > > > >> forced -> [Help 1]
> > > > > > >
> > > > > > >
> > > > > > > without an option to resume. Please advise. Thanks!
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > On Mon, Jan 22, 2024 at 10:25 AM David Handermann <
> > > > > > > [email protected]> wrote:
> > > > > > >
> > > > > > >> RC1 for 2.0.0-M2 is cancelled.
> > > > > > >>
> > > > > > >> On Mon, Jan 22, 2024 at 9:23 AM David Handermann
> > > > > > >> <[email protected]> wrote:
> > > > > > >> >
> > > > > > >> > Joe,
> > > > > > >> >
> > > > > > >> > Thanks for highlighting the build issue related to the
> > optional
> > > > > > >> > profile for the new UI. In the interest of maintaining
> > > consistency
> > > > > in
> > > > > > >> > the source release, I agree this issue is worth resolving.
> > > > > > >> >
> > > > > > >> > A new version of the json-path library was also released over
> > > the
> > > > > > >> > weekend, resolving CVE-2023-51074. Although this does not
> > appear
> > > > to
> > > > > > >> > have a direct impact on NiFi usage, it would be helpful to
> > > include
> > > > > as
> > > > > > >> > well.
> > > > > > >> >
> > > > > > >> > I am cancelling RC1 and I will follow up with an RC2 build
> > after
> > > > > > >> > getting the json-path 2.9.0 upgrade reviewed and merged.
> > > > > > >> >
> > > > > > >> > Regards,
> > > > > > >> > David Handermann
> > > > > > >> >
> > > > > > >> > On Mon, Jan 22, 2024 at 9:15 AM Joe Witt <[email protected]>
> > > > > wrote:
> > > > > > >> > >
> > > > > > >> > > -1
> > > > > > >> > >
> > > > > > >> > > David,
> > > > > > >> > >
> > > > > > >> > > First of all thanks for continuing to plow through the magic
> > > of
> > > > > > >> release
> > > > > > >> > > management.
> > > > > > >> > >
> > > > > > >> > > I noticed the static check failed in github and it was due
> > to
> > > a
> > > > > > >> snapshot
> > > > > > >> > > reference. I then tried a local build of the RC and it
> > failed
> > > > for
> > > > > me
> > > > > > >> for
> > > > > > >> > > the same reason.  The difference here is that I was wanting
> > to
> > > > > > >> include the
> > > > > > >> > > new UI so it could also be evaluated in the RC.
> > > > > > >> > >
> > > > > > >> > > I think this is worth resolving and doing and RC2 for but if
> > > you
> > > > > > >> disagree
> > > > > > >> > > that is fair as well.
> > > > > > >> > >
> > > > > > >> > > Thanks
> > > > > > >> > >
> > > > > > >> > > On Sat, Jan 20, 2024 at 9:36 AM David Handermann <
> > > > > > >> > > [email protected]> wrote:
> > > > > > >> > >
> > > > > > >> > > > Team,
> > > > > > >> > > >
> > > > > > >> > > > I am pleased to be calling this vote for the source
> > release
> > > of
> > > > > > >> Apache
> > > > > > >> > > > NiFi 2.0.0-M2.
> > > > > > >> > > >
> > > > > > >> > > > Please review the following guide for how to verify a
> > > release
> > > > > > >> candidate
> > > > > > >> > > > build:
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >>
> > > > >
> > > >
> > >
> > https://cwiki.apache.org/confluence/display/NIFI/Release+Candidate+Verification
> > > > > > >> > > >
> > > > > > >> > > > The source being voted on and the convenience binaries are
> > > > > available
> > > > > > >> > > > on the Apache Distribution Repository:
> > > > > > >> > > >
> > > > > > >> > > > https://dist.apache.org/repos/dist/dev/nifi/nifi-2.0.0-M2
> > > > > > >> > > >
> > > > > > >> > > > The build artifacts are available on the Apache Nexus
> > > > > Repository:
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >>
> > > > https://repository.apache.org/content/repositories/orgapachenifi-1254
> > > > > > >> > > >
> > > > > > >> > > > Git Tag: nifi-2.0.0-M2-RC1
> > > > > > >> > > > Git Commit ID: b462c7051d004be70fba34f2795bd5c682cd1124
> > > > > > >> > > > GitHub Commit Link:
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >>
> > > > >
> > > >
> > >
> > https://github.com/apache/nifi/commit/b462c7051d004be70fba34f2795bd5c682cd1124
> > > > > > >> > > >
> > > > > > >> > > > Checksums of nifi-2.0.0-M2-source-release.zip
> > > > > > >> > > >
> > > > > > >> > > > SHA256:
> > > > > > >> c42655212abacef6f901f2a43ad7f43d3172c631652c517d822a36321199d411
> > > > > > >> > > > SHA512:
> > > > > > >> > > >
> > > > > > >>
> > > > >
> > > >
> > >
> > b1a4d6790f85719a46f321f64cfc436da459795f03315a2f578940e266aa98a3d4a6d50d5be83583e7ac7adbf4a10f6050be314acc62a27fd247d082100718f4
> > > > > > >> > > >
> > > > > > >> > > > Release artifacts are signed with the following key:
> > > > > > >> > > >
> > > > > > >> > > >
> > > https://people.apache.org/keys/committer/exceptionfactory.asc
> > > > > > >> > > >
> > > > > > >> > > > KEYS file is available on the Apache Distribution
> > > Repository:
> > > > > > >> > > >
> > > > > > >> > > > https://dist.apache.org/repos/dist/release/nifi/KEYS
> > > > > > >> > > >
> > > > > > >> > > > Issues resolved for this version: 197
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >>
> > > > >
> > > >
> > >
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020&version=12353861
> > > > > > >> > > >
> > > > > > >> > > > Release note highlights can be found on the project wiki:
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >> > > >
> > > > > > >>
> > > > >
> > > >
> > >
> > https://cwiki.apache.org/confluence/display/NIFI/Release+Notes#ReleaseNotes-Version2.0.0-M2
> > > > > > >> > > >
> > > > > > >> > > > The vote will be open for 72 hours.
> > > > > > >> > > >
> > > > > > >> > > > Please download the release candidate and evaluate the
> > > > necessary
> > > > > > >> items
> > > > > > >> > > > including checking hashes, signatures, build from source,
> > > and
> > > > > test.
> > > > > > >> > > > Then please vote:
> > > > > > >> > > >
> > > > > > >> > > > [] +1 Release this package as nifi-2.0.0-M2
> > > > > > >> > > > [] +0 no opinion
> > > > > > >> > > > [] -1 Do not release this package because...
> > > > > > >> > > >
> > > > > > >>
> > > > > > >
> > > > >
> > > >
> > >
> >

Reply via email to