[HADOOP-17593] hadoop-huaweicloud and hadoop-cloud-storage to remove log4j as transitive dependency

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0
• Fix Version/s: 3.4.0
• Component/s: build
• Target Version/s: 3.4.0
• Assignee: lixianwei
• Reporter: Steve Loughran
• Created: 17/Mar/21 12:58
• Updated: 26/Jan/22 05:52
• Resolved: 24/Jan/22 12:06

Description

Dependencies of hadoop-cloud-storage show that hadoop-huaweicloud is pulling in logj4.

it should not/must not, at least, not if the huaweicloud can live without it.

• A version of log4j 2.,2 on the CP is only going to complicate lives
• once we can move onto it ourselves we need to be in control of versions

[INFO] - org.apache.hadoop:hadoop-huaweicloud:jar:3.4.0-SNAPSHOT:compile
[INFO] - com.huaweicloud:esdk-obs-java:jar:3.20.4.2:compile
[INFO] +- com.jamesmurty.utils:java-xmlbuilder:jar:1.2:compile
[INFO] +- com.squareup.okhttp3:okhttp:jar:3.14.2:compile
[INFO] +- org.apache.logging.log4j:log4j-core:jar:2.12.0:compile
[INFO] - org.apache.logging.log4j:log4j-api:jar:2.12.0:compile

Issue Links

• is duplicated by: HADOOP-18092 Exclude log4j2 dependency from hadoop-huaweicloud module
• is related to: YARN-11068 Update transitive log4j2 dependency to 2.17.1
• relates to: HADOOP-16492 Support HuaweiCloud Object Storage as a Hadoop Backend File System