两年了，ambari终于发布了2.7.6新版本

该版本主要修复了：

1. Spring组件的安全漏洞（AMBARI-25571. Vulnerable Spring components in Ambari - CVE-2020-5398, CVE-2020-5421）
2. 升级Grafana以修复相关漏洞（AMBARI-25547 Update Grafana version to 6.7.4 to avoid CVE-2020-13379）
3. 使用开源版本apache hbase作为Ambari Metrics的后端存储（AMBARI-25668 Integrate the Apache released HBase as back store of Ambari Metrics）
4. 修复时区问题（AMBARI-25608. Timezone data is outdated）
5. 升级apache solr版本为7.7.3（AMBARI-25506 Upgrade Apache Solr version to 7.7.3 in Ambari Infra）
6. 支持maven 3.8.x作为基本打包工具（AMBARI-25695 Pull request tests fail due to Maven 3.8.x blocks http repositories）
7. ···

接下来我们看一下具体的commmits。

• AMBARI-25450. [ubuntu16] HDP install failed for upgrade from HDP-3.0.1.0-187 to HDP-3.1.5.0-139
• AMBARI-25453. If hive.server2.webui.use.ssl was setted to true it will always use https, does not matter if now it is false
• Merge pull request #3166 from hiveww/AMBARI-25453-branch-2.7
• AMBARI-25455. Ambari-agent does not restart the agent when memory leak happens
• AMBARI-25457 Hive 3 Grafana dashboards showing outdated metrics. Some of the metrics' name has been changed in Hive 3. Due to this change many graphs shows no data on Hive Home, HiveServer2 and HiveMetastore dashboards.
• AMBARI-25459. Ambari doesn't show versions page after invalid repo was added.
• replace maven repo urls with their https counterparts
• AMBARI-25464. Components autostart does not work sometimes and ambari-agent restart
• AMBARI-25454 API exception on trying to assign permission to user group with custom Ambari Views
• AMBARI-25469. Bad UTF encoding on Alert listener receiver.
• AMBARI-25471. After node reboot autostart of components takes too much time.
• AMBARI-25465 Postgresql service naming convention changed on SUSE 12SP2
• AMBARI-25473 Upgrade Infra Solr Clients fails if it is installed on only one host
• AMBARI-25481. Customize Widget Threshold validation issue
• Merge pull request #3180 from hiveww/AMBARI-25481-branch-2.7
• set hbase.wal.provider with value filesystem for HBASE2
• AMBARI-25499 Outdated bower version causes Ambari build to fail
• AMBARI-25344. Provide graceful start/stop option for RegionServer
• AMBARI-25500. Hive Service Check Fails if the trustStorePassword has Special character
• AMBARI-25519. Ambari builds are failing with a bower error
• AMBARI-25518. DB connection details in API call.
• AMBARI-25495. Extend the set of headers from server's response.
• AMBARI-25208. Enable/Disable HBase Cross Cluster Replication (with common-service changes for branch-2.7)
• AMBARI-25520. Insecure Transport : Weak SSL Cipher and weak protocol.
• AMBARI-25493. Ambari - Application Test Script Detected
• AMBARI-25489. On adding new VDF the Base URLs are not auto populated
• AMBARI-25472. Disable autocomplete on login screen
• AMBARI-25486. Configs page not loading after Ambari upgrade
• AMBARI-25494. Ambari - Unsafe third-party link (target="_blank")
• AMBARI-25516. Missing @OverRide on methods
• AMBARI-25517. Should not use '!=' to compare 'Long hostId' in HostStateEntity, which could lead to unforeseen problems
• AMBARI-25485. Change authentication method from get to post.
• AMBARI-25487.Change authentication method from get to post
• AMBARI-25526. Typo in the "NameNode" turn off maintenance mode dialog box
• AMBARI-25529. Unit tests coverage improvement
• AMBARI-25532. Unit tests coverage improvement for hawq wizard controller
• AMBARI-25533. Delete redundant phantomjs dependency
• AMBARI-25536. Failed to execute goal on project ambari-metrics-timelineservice
• AMBARI-25506 Upgrade Apache Solr version to 7.7.3 in Ambari Infra
• AMBARI-25506 Upgrade Apache Solr version to 7.7.3 in Ambari Infra
• AMBARI-25353 Seeing an error stack when running an API call against Ambari server
• AMBARI-25549 NegativeArraySizeException thrown when invoking CurrentCollectorHost
• AMBARI-25550. Add viewFS protocol to DFS_PROTOCOLS_REGEX
• AMBARI-25558. HDP 7.1.4 upgrade failure due to ArrayIndexOutOfBoundsException on RHEL7 Oracle 12
• AMBARI-25559. Clarify the difference between num_llap_nodes and num_llap_nodes_for_llap_daemons properties
• Revert "AMBARI-25558. Upgrade fails because host is out of sync
• AMBARI-25552 Improve stack-trace disablement on HTTP 500 error response from the server
• AMBARI-25551. NodeManager doesn't work after adding a new host to a patch upgraded cluster.
• AMBARI-25511. hive auth fallback to SIMPLE because startup script fail to do kerberos login
• AMBARI-25560 UT failing due to tar download error
• AMBARI-25534. DB purge fails removing topology requests.
• AMBARI-25537. Fix AMS ambari-database and hbase dashboards.
• AMBARI-25539. Unit tests coverage improvement for highAvailability controllers
• AMBARI-25545 Downloaded zip-file name shows empty in the fileview
• AMBARI-25546 Prevent negative float and NaN value in heatmap metrics page
• AMBARI-25523. Ambari UI keeps loading at step3 while adding the new namespace for HDFS for the second time
• AMBARI-25562 Nightly test is failing due to Ambari Metrics Host Aggregator
• AMBARI-25561 Python Test for zeppelin failing
• [AMBARI-25398] Textareas in configuration page can be resized beyond its container border limit
• AMBARI-25565. ConfigHelper.java logging consumes most server logs for clusters with many hosts
• AMBARI-25567. Fix escaping issues in check database command
• "AMBARImbari-25568]. Fix The 'NodeManager RAM Utilized' metric in the heatmap had no unit
• Revert "AMBARImbari-25568] Fix The 'NodeManager RAM Utilized' metric in the heatmap had no unit
• AMBARI-25571. Vulnerable Spring components in Ambari - CVE-2020-5398, CVE-2020-5421
• AMBARI-25569 Reassess Ambari Metrics data migration
• AMBARI-25568 Fix The 'NodeManager RAM Utilized' metric in the heatmap had no unit
• AMBARI-25570 Move DataNode RPC metrics graphs to HDFS DataNode dashboard and fix the metric name change
• AMBARI-25573 Ambari Metrics save as JSON/CSV use custom fileName instead of default name.
• Revert "AMBARI-25573 Ambari Metrics save as JSON/CSV use custom fileName instead of default name.
• AMBARI-25576. Primary key duplication error during flushing alerts from alerts cache.
• AMBARI-25563. Storm dashboards are not showing metrics.
• AMBARI-25581. Prototype pollution issue in JQuery
• AMBARI-25573 Ambari Metrics save as JSON/CSV use custom fileName instead of default name fixed.
• [AMBARI-25543] fix hdfs Disk I/O Utilization result.
• AMBARI-25582. Change the way AMS Grafana datasource discovers the Kafka topics
• [AMBARI-25586] File/Directory Permission can't be auto refreshed after modified
• [AMBARI-25587] Metrics cannot be stored and the exception message is null when metric value is NaN
• AMBARI-25590. Ambari Get Hosts API returning empty json
• AMBARI-25589. When hearbeat is lost sometimes start/stop tasks can hang for a long time.
• AMBARI-25569 Reassess Ambari Metrics data migration - 2nd part
• AMBARI-25602. BlackDuck scan: vulnerable org.apache.hadoop 1.2.1 in fast-hdfs
• AMBARI-25602. BlackDuck scan: vulnerable org.apache.hadoop 1.2.1 in fast-hdfs
• AMBARI-25604. During blueprint deploy tasks sometimes fail due to Key Error on large clusters
• AMBARI-25601. Ambari with AMS HA unable to change metrics collector for metrics providing on collector fail.
• AMBARI-25606. Sometimes request aborting doesn't abort IN_PROGRESS task.
• AMBARI-25608. Timezone data is outdated
• AMBARI-25609. sysUpTime field is populated with invalid value during SNMP trap creation.
• AMBARI-25610. No warning message at changing repo name to an invalid one
• AMBARI-25547 Update Grafana version to 6.7.4 to avoid CVE-2020-13379
• AMBARI-25612. Ambari stops alert notices dispatching on unhandled exception inside.
• Fix ConcurrentModificationException in HostRequest.getPhysicalTaskMapping
• AMBARI-25599 Consider to eliminate HDP public binary references
• AMBARI-25621. Ambari soft alert never become hard.
• AMBARI-25625 druid.emitter.ambari-metrics.hostname set improperly
• AMBARI-22827. DB Cleanup scripts are using IN clauses
• AMBARI-25627 ORA-01795 error when querying hostcomponentdesiredstate table on large cluster
• AMBARI-25629 For kerberos service check IN clause must be split into batches
• AMBARI-25630 Kerberization of the big cluster using Blueprints takes too much time
• AMBARI-25634. Code cleanup: Remove AgentResource class as it is not needed anymore
• AMBARI-25633. Get rid of ignored tests cases in TestHeartbeatHandler and related to the original change tests.
• AMBARI-25636 FindBugs: Comparison of String parameter using == or !=
• AMBARI-25639. StackOverflowError appears on MethodArgument*Exception during stomp message handling.
• AMBARI-25637. ConcurrentModificationException during stomp subscriptions processing.
• AMBARI-25632 Verify custom queries with "IN" clause for ORA-01795 issue
• AMBARI-25638 FindBugs: Class defines equals() and uses Object.hashCode()
• AMBARI-25635 Clear Cluster and METRIC_AGGREGATORS MBeans upon shutdown
• AMBARI-25668 Integrate the Apache released HBase as back store of Ambari Metrics
• AMBARI-25693 Ambari Admin View failed to build due to PhantomJS
• AMBARI-25695 Pull request tests fail due to Maven 3.8.x blocks http repositories
• Adding new PGP public keys to KEYS file
• AMBARI-25683 Updated pom.xmls with version 2.7.6.0.0
• AMBARI-25683 Regenerate swagger API docs
• AMBARI-25683 Ambari 2.7.6 Release