logstash-input-http_poller 5.1.0 → 5.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d7223eb133a657b108ccadc547d953ea940d9c7f814b32e69048bee665ff89fa
-  data.tar.gz: ea919bb6bd64fd83cedf9421e2457e60717357ae2ad41798feb2edb227403f40
+  metadata.gz: 59101199a9b6eda278187132d5e5fd719247a893a29917fb305178347f89bf1e
+  data.tar.gz: 10f4717d83cd6befd62a314939c27db5633e65cd7c83706478efe3c2f42b1983
 SHA512:
-  metadata.gz: 205e05fa3dc29773537dbfa9f58eb9efe489b518b3e210c1668434221b69b3f7c339f57c70951ee83f8ddffa55eaf22e3a269479e079e453080f4089301e9071
-  data.tar.gz: a1b9acc31715ea764b3f50a8388da6578d1d3e5380503d154c9d5e8afb347992b8ce7c8dd5fc60c4783c3dfe81b7e722691e70c5631fc9823c8ea979f55d87a9
+  metadata.gz: e6eb58b9354d0e60aa5c2d5c1217f8fa769c3c70b8f207c453645b8e12dadd5b533193c8fcb60689319be0d6abdcba5e2de931f956a6b7974739d1cc516dad35
+  data.tar.gz: 15dcd344b59b3a14184153b82f5be9375427a5ff3cbdf2103922a4c8800624957ed86bff73c45bdf854ac52577e7a899f35c750d123ca8b8fc870e005e36cd5a

data/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 5.3.0
+  - Feat: added ssl_supported_protocols option [#133](https://github.com/logstash-plugins/logstash-input-http_poller/pull/133)
+
+## 5.2.1
+  - Deps: unpin rufus-scheduler dependency [#130](https://github.com/logstash-plugins/logstash-input-http_poller/pull/130)
+
+## 5.2.0
+  - Feat: support ssl_verification_mode option [#131](https://github.com/logstash-plugins/logstash-input-http_poller/pull/131)
+
 ## 5.1.0
   - Add ECS support [#129](https://github.com/logstash-plugins/logstash-input-http_poller/pull/129)
 

data/Gemfile

@@ -9,3 +9,5 @@ if Dir.exist?(logstash_path) && use_logstash_source
   gem 'logstash-core', :path => "#{logstash_path}/logstash-core"
   gem 'logstash-core-plugin-api', :path => "#{logstash_path}/logstash-core-plugin-api"
 end
+
+gem 'rufus-scheduler', ENV['RUFUS_SCHEDULER_VERSION'] if ENV['RUFUS_SCHEDULER_VERSION']

data/docs/index.asciidoc

@@ -146,6 +146,8 @@ This plugin supports the following configuration options plus the <<plugins-{typ
 | <<plugins-{type}s-{plugin}-retry_non_idempotent>> |<<boolean,boolean>>|No
 | <<plugins-{type}s-{plugin}-schedule>> |<<hash,hash>>|Yes
 | <<plugins-{type}s-{plugin}-socket_timeout>> |<<number,number>>|No
+| <<plugins-{type}s-{plugin}-ssl_supported_protocols>> |<<string,string>>|No
+| <<plugins-{type}s-{plugin}-ssl_verification_mode>> |<<string,string>>|No
 | <<plugins-{type}s-{plugin}-target>> |<<string,string>>|No
 | <<plugins-{type}s-{plugin}-truststore>> |a valid filesystem path|No
 | <<plugins-{type}s-{plugin}-truststore_password>> |<<password,password>>|No
@@ -413,6 +415,39 @@ See: rufus/scheduler for details about different schedule options and value stri
 
 Timeout (in seconds) to wait for data on the socket. Default is `10s`
 
+[id="plugins-{type}s-{plugin}-ssl_supported_protocols"]
+===== `ssl_supported_protocols`
+
+  * Value type is <<string,string>>
+  * Allowed values are: `'TLSv1.1'`, `'TLSv1.2'`, `'TLSv1.3'`
+  * Default depends on the JDK being used. With up-to-date Logstash, the default is `['TLSv1.2', 'TLSv1.3']`.
+    `'TLSv1.1'` is not considered secure and is only provided for legacy applications.
+
+List of allowed SSL/TLS versions to use when establishing a connection to the HTTP endpoint.
+
+For Java 8 `'TLSv1.3'` is supported  only since **8u262** (AdoptOpenJDK), but requires that you set the
+`LS_JAVA_OPTS="-Djdk.tls.client.protocols=TLSv1.3"` system property in Logstash.
+
+NOTE: If you configure the plugin to use `'TLSv1.1'` on any recent JVM, such as the one packaged with Logstash,
+the protocol is disabled by default and needs to be enabled manually by changing `jdk.tls.disabledAlgorithms` in
+the *$JDK_HOME/conf/security/java.security* configuration file. That is, `TLSv1.1` needs to be removed from the list.
+
+[id="plugins-{type}s-{plugin}-ssl_verification_mode"]
+===== `ssl_verification_mode`
+
+  * Value type is <<string,string>>
+  * Supported values are: `full`, `none`
+  * Default value is `full`
+
+Controls the verification of server certificates.
+The `full` option verifies that the provided certificate is signed by a trusted authority (CA)
+and also that the server’s hostname (or IP address) matches the names identified within the certificate.
+
+The `none` setting performs no verification of the server’s certificate.
+This mode disables many of the security benefits of SSL/TLS and should only be used after cautious consideration.
+It is primarily intended as a temporary diagnostic mechanism when attempting to resolve TLS errors.
+Using `none`  in production environments is strongly discouraged.
+
 [id="plugins-{type}s-{plugin}-target"]
 ===== `target` 
 

data/lib/logstash/inputs/http_poller.rb

@@ -55,9 +55,12 @@ class LogStash::Inputs::HTTP_Poller < LogStash::Inputs::Base
     setup_requests!
   end
 
+  # @overload
   def stop
-    Stud.stop!(@interval_thread) if @interval_thread
-    @scheduler.stop if @scheduler
+    if @scheduler
+      @scheduler.shutdown # on newer Rufus (3.8) this joins on the scheduler thread
+    end
+    # TODO implement client.close as we as releasing it's pooled resources!
   end
 
   private
@@ -163,16 +166,15 @@ class LogStash::Inputs::HTTP_Poller < LogStash::Inputs::Base
     #schedule hash must contain exactly one of the allowed keys
     msg_invalid_schedule = "Invalid config. schedule hash must contain " +
       "exactly one of the following keys - cron, at, every or in"
-    raise Logstash::ConfigurationError, msg_invalid_schedule if @schedule.keys.length !=1
+    raise Logstash::ConfigurationError, msg_invalid_schedule if @schedule.keys.length != 1
     schedule_type = @schedule.keys.first
     schedule_value = @schedule[schedule_type]
     raise LogStash::ConfigurationError, msg_invalid_schedule unless Schedule_types.include?(schedule_type)
 
     @scheduler = Rufus::Scheduler.new(:max_work_threads => 1)
-    #as of v3.0.9, :first_in => :now doesn't work. Use the following workaround instead
     opts = schedule_type == "every" ? { :first_in => 0.01 } : {} 
     @scheduler.send(schedule_type, schedule_value, opts) { run_once(queue) }
-    @scheduler.join
+    @scheduler.thread.join # due newer rufus (3.8) doing a blocking operation on scheduler.join
   end
 
   def run_once(queue)

data/logstash-input-http_poller.gemspec

@@ -1,9 +1,9 @@
 Gem::Specification.new do |s|
   s.name        = 'logstash-input-http_poller'
-  s.version         = '5.1.0'
+  s.version     = '5.3.0'
   s.licenses    = ['Apache License (2.0)']
   s.summary     = "Decodes the output of an HTTP API into events"
-  s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
+  s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
   s.authors     = [ "Elastic", "andrewvc"]
   s.email       = 'info@elastic.co'
   s.homepage    = "http://www.elastic.co/guide/en/logstash/current/index.html"
@@ -20,9 +20,8 @@ Gem::Specification.new do |s|
   # Gem dependencies
   s.add_runtime_dependency "logstash-core-plugin-api", ">= 1.60", "<= 2.99"
   s.add_runtime_dependency 'logstash-codec-plain'
-  s.add_runtime_dependency 'logstash-mixin-http_client', "~> 7"
-  s.add_runtime_dependency 'stud', "~> 0.0.22"
-  s.add_runtime_dependency 'rufus-scheduler', "~>3.0.9"
+  s.add_runtime_dependency "logstash-mixin-http_client", ">= 7.2.0"
+  s.add_runtime_dependency 'rufus-scheduler', ">= 3.0.9"
   s.add_runtime_dependency 'logstash-mixin-ecs_compatibility_support', '~>1.3'
   s.add_runtime_dependency 'logstash-mixin-event_support', '~> 1.0', '>= 1.0.1'
   s.add_runtime_dependency 'logstash-mixin-validator_support', '~> 1.0'

data/spec/inputs/http_poller_spec.rb

@@ -25,18 +25,19 @@ describe LogStash::Inputs::HTTP_Poller do
       "schedule" => default_schedule,
       "urls" => default_urls,
       "codec" => "json",
-      "metadata_target" => metadata_target
+      "metadata_target" => metadata_target,
+      "pool_max" => 3, "pool_max_per_route" => 1, 'keepalive' => false
     }
   }
-  let(:klass) { LogStash::Inputs::HTTP_Poller }
+  let(:opts) { default_opts }
 
+  subject(:plugin) { described_class.new(opts) }
 
   describe "instances" do
-    subject { klass.new(default_opts) }
+    subject { described_class.new(default_opts) }
 
-    before do
-      subject.register
-    end
+    before { subject.register }
+    after { subject.stop }
 
     describe "#run" do
       it "should setup a scheduler" do
@@ -189,22 +190,21 @@ describe LogStash::Inputs::HTTP_Poller do
           "metadata_target" => metadata_target
         }
       }
-      it "should run at the schedule" do
-        instance = klass.new(opts)
-        instance.register
+
+      before do
         Timecop.travel(Time.new(2000,1,1,0,0,0,'+00:00'))
         Timecop.scale(60)
-        queue = Queue.new
-        runner = Thread.new do
-          instance.run(queue)
-        end
-        sleep 3
-        instance.stop
-        runner.kill
-        runner.join
-        expect(queue.size).to eq(2)
+      end
+
+      after do
         Timecop.return
       end
+
+      it "should run at the schedule" do
+        run_plugin_and_yield_queue(plugin, sleep: 3) do |queue|
+          try(5) { expect(queue.size).to be >= 2 }
+        end
+      end
     end
 
     context "given 'at' expression" do
@@ -216,22 +216,21 @@ describe LogStash::Inputs::HTTP_Poller do
           "metadata_target" => metadata_target
         }
       }
-      it "should run at the schedule" do
-        instance = klass.new(opts)
-        instance.register
+
+      before do
         Timecop.travel(Time.new(2000,1,1,0,0,0,'+00:00'))
-        Timecop.scale(60 * 5)
-        queue = Queue.new
-        runner = Thread.new do
-          instance.run(queue)
-        end
-        sleep 2
-        instance.stop
-        runner.kill
-        runner.join
-        expect(queue.size).to eq(1)
+        Timecop.scale (60 * 5) / 2
+      end
+
+      after do
         Timecop.return
       end
+
+      it "should run at the schedule" do
+        run_plugin_and_yield_queue(plugin, sleep: 2) do |queue|
+          try(5) { expect(queue.size).to eq(1) }
+        end
+      end
     end
 
     context "given 'every' expression" do
@@ -244,20 +243,12 @@ describe LogStash::Inputs::HTTP_Poller do
         }
       }
       it "should run at the schedule" do
-        instance = klass.new(opts)
-        instance.register
-        queue = Queue.new
-        runner = Thread.new do
-          instance.run(queue)
+        run_plugin_and_yield_queue(plugin, sleep: 5) do |queue|
+          #T       0123456
+          #events  x x x x
+          #expects 3 events at T=5
+          try(5) { expect(queue.size).to be_between(2, 3) }
         end
-        #T       0123456
-        #events  x x x x
-        #expects 3 events at T=5
-        sleep 5
-        instance.stop
-        runner.kill
-        runner.join
-        expect(queue.size).to be_between(2, 3)
       end
     end
 
@@ -271,21 +262,28 @@ describe LogStash::Inputs::HTTP_Poller do
         }
       }
       it "should run at the schedule" do
-        instance = klass.new(opts)
-        instance.register
-        queue = Queue.new
-        runner = Thread.new do
-          instance.run(queue)
+        run_plugin_and_yield_queue(plugin, sleep: 2.5) do |queue|
+          try(5) { expect(queue.size).to eq(1) }
         end
-        sleep 3
-        instance.stop
-        runner.kill
-        runner.join
-        expect(queue.size).to eq(1)
       end
     end
   end
 
+  def run_plugin_and_yield_queue(plugin, sleep: nil)
+    plugin.register
+    queue = Queue.new
+    begin
+      runner = Thread.new do
+        plugin.run(queue)
+      end
+      sleep(sleep) if sleep
+      yield(queue)
+    ensure
+      plugin.stop
+      runner.join if runner
+    end
+  end
+
   describe "events", :ecs_compatibility_support, :aggregate_failures do
     ecs_compatibility_matrix(:disabled, :v1, :v8 => :v1) do |ecs_select|
       before do
@@ -339,6 +337,8 @@ describe LogStash::Inputs::HTTP_Poller do
           event # materialize the subject
         end
 
+        after { poller.stop }
+
         it "should enqueue a message" do
           expect(event).to be_a(LogStash::Event)
         end
@@ -399,9 +399,6 @@ describe LogStash::Inputs::HTTP_Poller do
         let(:payload) { {"a" => 2, "hello" => ["a", "b", "c"]} }
         let(:response_body) { LogStash::Json.dump(payload) }
         let(:opts) { default_opts }
-        let(:instance) {
-          klass.new(opts)
-        }
         let(:name) { default_name }
         let(:url) { default_url }
         let(:code) { 202 }
@@ -411,14 +408,14 @@ describe LogStash::Inputs::HTTP_Poller do
         }
 
         before do
-          instance.register
+          plugin.register
           u = url.is_a?(Hash) ? url["url"] : url # handle both complex specs and simple string URLs
-          instance.client.stub(u,
+          plugin.client.stub(u,
                                :body => response_body,
                                :code => code
           )
-          allow(instance).to receive(:decorate)
-          instance.send(:run_once, queue)
+          allow(plugin).to receive(:decorate)
+          plugin.send(:run_once, queue)
         end
 
         it "should have a matching message" do
@@ -426,7 +423,7 @@ describe LogStash::Inputs::HTTP_Poller do
         end
 
         it "should decorate the event" do
-          expect(instance).to have_received(:decorate).once
+          expect(plugin).to have_received(:decorate).once
         end
 
         include_examples("matching metadata")
@@ -434,7 +431,7 @@ describe LogStash::Inputs::HTTP_Poller do
         context "with an empty body" do
           let(:response_body) { "" }
           it "should return an empty event" do
-            instance.send(:run_once, queue)
+            plugin.send(:run_once, queue)
             headers_field = ecs_select[disabled: "[#{metadata_target}][response_headers]",
                                       v1: "[#{metadata_target}][input][http_poller][response][headers]"]
             expect(event.get("#{headers_field}[content-length]")).to eql("0")
@@ -449,7 +446,7 @@ describe LogStash::Inputs::HTTP_Poller do
           }
 
           it "should not have any metadata on the event" do
-            instance.send(:run_once, queue)
+            plugin.send(:run_once, queue)
             expect(event.get(metadata_target)).to be_nil
           end
         end
@@ -555,6 +552,8 @@ describe LogStash::Inputs::HTTP_Poller do
 
   describe "stopping" do
     let(:config) { default_opts }
-    it_behaves_like "an interruptible input plugin"
+    it_behaves_like "an interruptible input plugin" do
+      let(:allowed_lag) { 10 } # CI: wait till scheduler shuts down
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: logstash-input-http_poller
 version: !ruby/object:Gem::Version
-  version: 5.1.0
+  version: 5.3.0
 platform: ruby
 authors:
 - Elastic
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-08-19 00:00:00.000000000 Z
+date: 2022-03-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -48,35 +48,21 @@ dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '7'
+        version: 7.2.0
   name: logstash-mixin-http_client
   prerelease: false
   type: :runtime
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '7'
-- !ruby/object:Gem::Dependency
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.0.22
-  name: stud
-  prerelease: false
-  type: :runtime
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.0.22
+        version: 7.2.0
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 3.0.9
   name: rufus-scheduler
@@ -84,7 +70,7 @@ dependencies:
   type: :runtime
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 3.0.9
 - !ruby/object:Gem::Dependency