From 5e13811e8bf8d551ffd32b666e083c793eb00f4f Mon Sep 17 00:00:00 2001 From: Vijay Venkatesh Kumar Date: Tue, 14 Dec 2021 11:41:36 -0500 Subject: [PATCH] [DCAE] Log4j vulnerability fix Disable explicitly the msg format lookups Change-Id: I7485d5de818bd7897458723aaf5b3357a8ccc1dd Signed-off-by: Vijay Venkatesh Kumar Issue-ID: DCAEGEN2-3022 --- .../dcaegen2-services/components/dcae-restconf-collector/values.yaml | 4 ++++ .../dcaegen2-services/components/dcae-ves-collector/values.yaml | 1 + kubernetes/dcaegen2-services/components/dcae-ves-mapper/values.yaml | 3 +++ 3 files changed, 8 insertions(+) diff --git a/kubernetes/dcaegen2-services/components/dcae-restconf-collector/values.yaml b/kubernetes/dcaegen2-services/components/dcae-restconf-collector/values.yaml index ad29e33a90..66c781cb3b 100644 --- a/kubernetes/dcaegen2-services/components/dcae-restconf-collector/values.yaml +++ b/kubernetes/dcaegen2-services/components/dcae-restconf-collector/values.yaml @@ -107,6 +107,10 @@ credentials: uid: *controllerCredsUID key: password +# application environments +applicationEnv: + LOG4J_FORMAT_MSG_NO_LOOKUPS: 'true' + # Initial Application Configuration applicationConfig: collector.rcc.appDescription: DCAE RestConf Collector Application diff --git a/kubernetes/dcaegen2-services/components/dcae-ves-collector/values.yaml b/kubernetes/dcaegen2-services/components/dcae-ves-collector/values.yaml index f863ff8641..31007f2dde 100644 --- a/kubernetes/dcaegen2-services/components/dcae-ves-collector/values.yaml +++ b/kubernetes/dcaegen2-services/components/dcae-ves-collector/values.yaml @@ -107,6 +107,7 @@ service: # application environments applicationEnv: CBS_CLIENT_CONFIG_PATH: '/app-config-input/application_config.yaml' + LOG4J_FORMAT_MSG_NO_LOOKUPS: 'true' # initial application configuration applicationConfig: diff --git a/kubernetes/dcaegen2-services/components/dcae-ves-mapper/values.yaml b/kubernetes/dcaegen2-services/components/dcae-ves-mapper/values.yaml index a7186a4d98..93214d3057 100644 --- a/kubernetes/dcaegen2-services/components/dcae-ves-mapper/values.yaml +++ b/kubernetes/dcaegen2-services/components/dcae-ves-mapper/values.yaml @@ -70,6 +70,9 @@ service: port: 80 port_protocol: http +# application environments +applicationEnv: + LOG4J_FORMAT_MSG_NO_LOOKUPS: 'true' # Initial Application Configuration applicationConfig: -- 2.16.6