Re: [VOTE] 3.1.0 RC1

2022-01-20 Thread Mickael Maison
Thanks David for running this release!

I checked signatures and keys, built from source and ran unit tests
with Java 11. I also ran the quickstart.

+1 (binding)

Thanks,
Mickael

On Wed, Jan 19, 2022 at 9:20 PM Bill Bejeck  wrote:
>
> Hi David,
>
> Thanks for running the release!
>
> I did the following:
>
>1. Validated all signatures and keys
>2. Built from source
>3. Ran all the unit tests
>4. Spot checked the java docs, and the site docs
>5. Ran a portion of the quick start
>6. Ran the Kafka Streams demo application
>
> I noticed one small error on the quick start page: the  "Kafka Streams demo 
> and
> the app development tutorial" links still reference the 2.5 release.
> This is a very minor issue and it doesn't require a new RC, we can simply
> update the links once released.
>
> +1(binding)
>
> Thanks,
> Bill
>
>
> On Wed, Jan 19, 2022 at 8:44 AM David Jacot 
> wrote:
>
> > Thanks for all the votes! We are still missing two binding votes from
> > PMC members.
> >
> > Best,
> > David
> >
> > On Tue, Jan 18, 2022 at 5:00 PM Israel Ekpo  wrote:
> > >
> > > Performed the following validations using the tools available here:
> > >
> > > https://github.com/izzyacademy/apache-kafka-release-party
> > >
> > >- Verified signatures, keys and hashes for release artifacts
> > >- Deployed Multi-Node Cluster in Legacy Mode (with Zookeeper)
> > >- Deployed Multi-Node Cluster in KRaft Mode (without Zookeeper)
> > >- Can confirm that KAFKA-13456 works as expected after switching to
> > 3.1.0
> > >- Briefly Walked Through 3.1 Documentation, Javadocs and Protocol
> > Pages
> > >
> > > +1 (non-binding) for the release candidate
> > >
> > > Thanks for running this release
> > >
> > > Israel Ekpo
> > > Lead Instructor, IzzyAcademy.com
> > > https://www.youtube.com/c/izzyacademy
> > > https://izzyacademy.com/
> > >
> > >
> > > On Wed, Jan 12, 2022 at 7:59 AM David Jacot  wrote:
> > >
> > > > Hello Kafka users, developers and client-developers,
> > > >
> > > > This is the second candidate for release of Apache Kafka 3.1.0.
> > > >
> > > > * Apache Kafka supports Java 17
> > > > * The FetchRequest supports Topic IDs (KIP-516)
> > > > * Extend SASL/OAUTHBEARER with support for OIDC (KIP-768)
> > > > * Add broker count metrics (KIP-748)
> > > > * Differentiate consistently metric latency measured in millis and
> > > > nanos (KIP-773)
> > > > * The eager rebalance protocol is deprecated (KAFKA-13439)
> > > > * Add TaskId field to StreamsException (KIP-783)
> > > > * Custom partitioners in foreign-key joins (KIP-775)
> > > > * Fetch/findSessions queries with open endpoints for
> > > > SessionStore/WindowStore (KIP-766)
> > > > * Range queries with open endpoints (KIP-763)
> > > > * Add total blocked time metric to Streams (KIP-761)
> > > > * Add additional configuration to control MirrorMaker2 internal topics
> > > > naming convention (KIP-690)
> > > >
> > > > Release notes for the 3.1.0 release:
> > > > https://home.apache.org/~dajac/kafka-3.1.0-rc1/RELEASE_NOTES.html
> > > >
> > > > *** Please download, test and vote by Monday, January 17, 9am PT
> > > >
> > > > Kafka's KEYS file containing PGP keys we use to sign the release:
> > > > https://kafka.apache.org/KEYS
> > > >
> > > > * Release artifacts to be voted upon (source and binary):
> > > > https://home.apache.org/~dajac/kafka-3.1.0-rc1/
> > > >
> > > > * Maven artifacts to be voted upon:
> > > > https://repository.apache.org/content/groups/staging/org/apache/kafka/
> > > >
> > > > * Javadoc:
> > > > https://home.apache.org/~dajac/kafka-3.1.0-rc1/javadoc/
> > > >
> > > > * Tag to be voted upon (off 3.1 branch) is the 3.1.0 tag:
> > > > https://github.com/apache/kafka/releases/tag/3.1.0-rc1
> > > >
> > > > * Documentation:
> > > > https://kafka.apache.org/31/documentation.html
> > > >
> > > > * Protocol:
> > > > https://kafka.apache.org/31/protocol.html
> > > >
> > > > * Successful Jenkins builds for the 3.1 branch:
> > > > Unit/integration tests:
> > > > https://ci-builds.apache.org/job/Kafka/job/kafka/job/3.1/60/
> > > > System tests:
> > > > https://jenkins.confluent.io/job/system-test-kafka/job/3.1/66/
> > > >
> > > > /**
> > > >
> > > > Thanks,
> > > > David
> > > >
> >


Kafka Log4j2.x upgrade plan

2022-01-20 Thread Deepak Jain
Hi Luke,

We are using Kafka 2.8.1 Broker/Client system in our prod env. Due to the Log4j 
vulnerability CVE-2021-44228, CVE-2021-45046, CVE-2021-4104 and CVE-2021-45105, 
we are waiting for kafka to upgrade to Log4j 2.17.

Our Customers are asking why Kafka is using obsolete log4j1.x version.

Please let us know when Kafka is planned to upgrade the Log4j version?

Thanks in advance.

Regards,
Deepak



Re: Kafka Log4j2.x upgrade plan

2022-01-20 Thread Luke Chen
Hi Deepak,

So far, we don't have an ETA for log4j2.
Please check this discussion:
https://issues.apache.org/jira/browse/KAFKA-9366

Thank you.
Luke

On Fri, Jan 21, 2022 at 1:57 PM Deepak Jain 
wrote:

> Hi Luke,
>
> We are using Kafka 2.8.1 Broker/Client system in our prod env. Due to the
> Log4j vulnerability CVE-2021-44228, CVE-2021-45046, CVE-2021-4104 and
> CVE-2021-45105, we are waiting for kafka to upgrade to Log4j 2.17.
>
> Our Customers are asking why Kafka is using obsolete log4j1.x version.
>
> Please let us know when Kafka is planned to upgrade the Log4j version?
>
> Thanks in advance.
>
> Regards,
> Deepak
>
>