[Bug]: 2.16.0 boot error because of missing files

[sandervandegeijn]

Describe the bug

During opensearch bootup it's complaining it's missing files for the security analytics plugin:

Doesn't halt booting but it's ugly. Confirmed on both a kubernetes install and local docker image.

To reproduce

Boot a fresh 2.16.0 cluster and look for the error

Expected behavior

No error

Screenshots

If applicable, add screenshots to help explain your problem.

Host / Environment

k8s
local docker desktop
default images

Additional context

No response

Relevant log output

No response

[sandervandegeijn]

/usr/share/opensearch/plugins/opensearch-security-analytics/

2.16.0

[opensearch@9f878c135158 opensearch-security-analytics]$ ls
commons-csv-1.10.0.jar	commons-lang3-3.14.0.jar  opensearch-security-analytics-2.16.0.0.jar  plugin-descriptor.properties  plugin-security.policy  security-analytics-commons-1.0.0.jar

2.15.0

[opensearch@2c2c9d882b41 opensearch-security-analytics]$ ls
antlr4-runtime-4.10.1.jar  commons-codec-1.16.1.jar  commons-lang3-3.14.0.jar  cron-utils-9.1.6.jar	  httpclient-4.5.14.jar  httpcore-nio-4.4.16.jar   opensearch-rest-client-2.15.0.jar	       plugin-descriptor.properties
common-utils-2.15.0.0.jar  commons-csv-1.10.0.jar    commons-logging-1.2.jar   httpasyncclient-4.1.5.jar  httpcore-4.4.16.jar	 kotlin-stdlib-1.6.10.jar  opensearch-security-analytics-2.15.0.0.jar  plugin-security.policy

Thera are differences:

Present in 2.16.0 but not in 2.15.0:

security-analytics-commons-1.0.0.jar

Present in 2.15.0 but not in 2.16.0:

antlr4-runtime-4.10.1.jar
commons-codec-1.16.1.jar
commons-logging-1.2.jar
cron-utils-9.1.6.jar
httpasyncclient-4.1.5.jar
httpclient-4.5.14.jar
httpcore-4.4.16.jar
httpcore-nio-4.4.16.jar
kotlin-stdlib-1.6.10.jar
opensearch-rest-client-2.15.0.jar
common-utils-2.15.0.0.jar

Present in Both Versions:

commons-csv-1.10.0.jar
commons-lang3-3.14.0.jar
opensearch-security-analytics-2.16.0.0.jar (or opensearch-security-analytics-2.15.0.0.jar in the other)
plugin-descriptor.properties
plugin-security.policy

Summary of Differences:

2.16.0 has one additional file: security-analytics-commons-1.0.0.jar.
2.15.0 contains several additional files related to HTTP clients, common utilities, and Kotlin, which are not present in 2.16.0.

[gaiksaya]

Moving to security analytics repo for the maintainers to take a look.

[dblock]

[Catch All Triage - 1, 2, 3, 4, 5]

[sandervandegeijn]

Apparently there is a PR out there to fix this.

edit: ah it got linked already ^^