2024-04-24 Meeting notes

• Migration to Java 17
  • Tomcat 9 on Dev
    • Working on config
  • Jenkins jobs created - to be tested this afternoon
• On Dev - none of the configuration done
  • catalina.properties 
  • setenv.sh present
• Will work on services one at a time on Dev and QA
  • Will send to new Stage and Prod
  • Will cutover when all finished
  • NCItbrowser first
• Some of the value set files seem to want to live on local machine - compiledVSDefinitions?
  • • Do code review to determine where dependencies lie - create Jira item

• Create Jira item to do compiledVSDefinition files analysis and elimination

• Chasing ehcache temp bean jar creation
  • Normal behavior, but all files should be deleted when application shuts down/restarted
  • Claims files cant be used or processed - loading files fails. 
  • Kicks off at same time as commonValueSetsUtils. Does a hash of all value sets
  • ehcache updated as part of Spring 5 update
  • Heap Dump file might be useful during startup to see what is being loaded onto stack
    • onchange() no longer hooked up for managing process, since no longer loading during serving
    • Could be adding a lot of pressure on environment to build it all during startup
    • Could new OS be handling the stacks differently?
    • Corretto - outside chance this is an issue, but we think it not likely

• Try to get a Heap dump on Dev/ maybe on local
  • Requested Virtual VM - doesn't come automatially with Corretto
  • Need to manage users to use x-forwarding
• Examine what has changed in ehcache with Spring 5

• Working on eliminating Contact Us form
  • Request for Stage

• Still multiple issues on Prod
  • Scott creating Jira issues as items identified
• L3cache issues?  Possibly filling up and not allowing processing by cores
  • Dev has larger cache and more CPUs
• Possible security solution - throttle IPs that are overworking CPU
  • L5 load balancer

• Tracy to follow up with Security team/systems - again

• Prod completed testing
• Stage 2 - can we ask for top access to this?
• DataQA after Prod
  • database on machine - migrate first?
  • Test performance of old loaders vs new database.
  • Other apps follow DB - determine if needs to be co-located
  • Does script need to be updated?
• List of EVS URLs

• Check with systems - See if we can test prod2 data deployment
  
• Start process for migrating DataQA to new server - Tracy

Brandon Devarra scanned DataQA and found it on Oracle Java 8.  Has it drifted from Prod?

-- 189356 (1) - OpenJDK 8 <= 8u392 / 11.0.0 <= 11.0.21 / 17.0.0 <= 17.0.9 / 21.0.0 <= 21.0.1 Multiple Vulnerabilities (2024-01-16

Path : /usr/local/jdk1.8/

Installed version : 8.0.391

Fixed version : Upgrade to a version greater than 8u392

• $PATH on devvm points to Oracle jdk.  Should be Corretto