+1 (binding)

src package:
- verified signature/checksum
- LICENSE/NOTICE present
- RAT check passed
- built binary distribution, ran into an issue with CVE-2022-1471
failing on druid-kubernetes-extensions, I don't think this needs to be
a blocker
- tested msq ingestion in binary distribution, successfully ran some queries

bin package:
- verified signature/checksum
- LICENSE/NOTICE present
- test native ingest example data and successfully ran some queries

docker:
- verified checksum
- distribution/docker-compose.yml looks like only the coordinator
version was updated to 24.0.2, the others are 24.0.1,
https://github.com/apache/druid/blob/24.0.2/distribution/docker/docker-compose.yml#L68
I don't think this needs to be a blocker
- tested native ingestion (msq extension still not enabled by
default), ran queries

On Tue, Nov 29, 2022 at 2:56 AM Abhishek Agarwal
<abhishek.agar...@imply.io.invalid> wrote:
>
> +1 (binding)
>
> src package:
> - verified signature/checksum
> - LICENSE/NOTICE present
> - built binary distribution, Loaded example wikipedia dataset and ran some
> queries
>
> binary package:
> - verified signature/checksum
> - LICENSE/NOTICE present
> - Loaded example wikipedia dataset and ran some queries
>
> docker:
> - verified checksum
> - started cluster with docker-compose, Loaded example wikipedia dataset and
> ran some queries
>
> On Tue, Nov 29, 2022 at 2:00 PM Laksh Singla <laksh.sin...@imply.io.invalid>
> wrote:
>
> > +1 (non-binding)
> > Verified that https://github.com/apache/druid/pull/13138 is included and
> > working in the build.
> >
> > Regards
> > Laksh
> >
> > The https://github.com/apache/druid/pull/13138 is
> >
> > On Sat, Nov 26, 2022 at 2:52 PM Kashif Faraz <kfa...@apache.org> wrote:
> >
> > > Hi
> > >
> > > I have created a build for Apache Druid 24.0.2, release candidate 1.
> > >
> > > Thanks to everyone who has helped contribute to the release! You can read
> > > the proposed release notes here:
> > > https://github.com/apache/druid/issues/13435
> > >
> > > The release candidate has been tagged in GitHub as druid-24.0.2-rc1
> > > (13c9fdcbafcf61211a9381892615c4b4db6a3535),
> > > available here:
> > > https://github.com/apache/druid/releases/tag/druid-24.0.2-rc1
> > >
> > > The artifacts to be voted on are located here:
> > > https://dist.apache.org/repos/dist/dev/druid/24.0.2-rc1/
> > >
> > > A staged Maven repository is available for review at:
> > > https://repository.apache.org/content/repositories/orgapachedruid-1037/
> > >
> > > A Docker image containing the binary of the release candidate can be
> > > retrieved via:
> > > docker pull apache/druid:24.0.2-rc1
> > >
> > > Artifact checksums:
> > > src:
> > >
> > >
> > 1ca1ea4b9a4418813fc22cdba2626725f802ff886e118b9986b89e8a6df9fe304a0fb0eca1370a1c937ac5b136448c8157d58b1f79712347ca5cb67f7f034cfc
> > > bin:
> > >
> > >
> > ca22923d0c1b60803289ada2be6c7e74b41641e95e3ad36fb625edd71c62d29f5203221062e5bf7af8199075bbc46606ec3ae8b559b455e1ecfc990f0e669f55
> > > docker:
> > > e96ae3293242e90e0a78be128c0d12325b8a6fc5c68ce2f2bc53de3aac568bbf
> > >
> > > Release artifacts are signed with the following key:
> > > https://people.apache.org/keys/committer/kfaraz.asc
> > >
> > > This key and the key of other committers can also be found in the
> > project's
> > > KEYS file here:
> > > https://dist.apache.org/repos/dist/release/druid/KEYS
> > >
> > > (If you are a committer, please feel free to add your own key to that
> > file
> > > by following the instructions in the file's header.)
> > >
> > > Verify checksums:
> > > diff <(shasum -a512 apache-druid-24.0.2-src.tar.gz | \
> > > cut -d ' ' -f1) \
> > > <(cat apache-druid-24.0.2-src.tar.gz.sha512 ; echo)
> > >
> > > diff <(shasum -a512 apache-druid-24.0.2-bin.tar.gz | \
> > > cut -d ' ' -f1) \
> > > <(cat apache-druid-24.0.2-bin.tar.gz.sha512 ; echo)
> > >
> > > Verify signatures:
> > > gpg --verify apache-druid-24.0.2-src.tar.gz.asc \
> > > apache-druid-24.0.2-src.tar.gz
> > >
> > > gpg --verify apache-druid-24.0.2-bin.tar.gz.asc \
> > > apache-druid-24.0.2-bin.tar.gz
> > >
> > > Please review the proposed artifacts and vote. Note that Apache has
> > > specific requirements that must be met before +1 binding votes can be
> > cast
> > > by PMC members. Please refer to the policy at
> > > http://www.apache.org/legal/release-policy.html#policy for more details.
> > >
> > > As part of the validation process, the release artifacts can be generated
> > > from source by running:
> > > mvn clean install -Papache-release,dist -Dgpg.skip
> > >
> > > The RAT license check can be run from source by:
> > > mvn apache-rat:check -Prat
> > >
> > > This vote will be open for at least 72 hours. The vote will pass if a
> > > majority of at least three +1 PMC votes are cast.
> > >
> > > [ ] +1 Release this package as Apache Druid 24.0.2
> > > [ ] 0 I don't feel strongly about it, but I'm okay with the release
> > > [ ] -1 Do not release this package because...
> > >
> > >
> > > Thanks
> > > Kashif
> > >
> >

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org
For additional commands, e-mail: dev-h...@druid.apache.org

Reply via email to