Bug 1406766

Summary:	ovirt-engine dependencies module fetch java artifacts which jboss wildfly already provides
Product:	[oVirt] ovirt-engine	Reporter:	Eyal Edri <eedri>
Component:	Build.Maven	Assignee:	Ori Liel <oliel>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Lukas Svaty <lsvaty>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	4.1.0	CC:	bugs, eedri, juan.hernandez, lsvaty, lveyde, mperina, rhv-bugzilla-bot, vtunka
Target Milestone:	ovirt-4.2.2	Keywords:	CodeChange
Target Release:	4.2.2.2	Flags:	rule-engine: ovirt-4.2+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ovirt-engine-4.2.2	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-03-29 11:09:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Eyal Edri 2016-12-21 12:23:54 UTC

Description of problem:
When looking at pom.xml under backend/manager/dependencies/commons|tools we see external java projects which are being used by ovirt-engine and some of them bring transitive dependencies that are already being provided by jboss, and by doing so causing false alerts on outdated versions being used by ovirt-engine ( which in fact uses newer versions provided by jboss wildfly)

We should check if there is a possibility to avoid that using the maven dependencies mechanism or in another way.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Ori Liel 2017-11-23 08:04:20 UTC

Can you please provide an example of such an alert, and specify where they can be found? 

In the build log I see: 

  [INFO] --- maven-jar-plugin:2.2:jar (default-jar) @ common-dependencies ---
  [WARNING] JAR will be empty - no content was marked for inclusion!
  .
  .
  .
  [INFO] --- maven-jar-plugin:2.2:jar (default-jar) @ tools-dependencies ---
  [WARNING] JAR will be empty - no content was marked for inclusion!

I don't know if these warnings are connected to this issue, and in any case they are very vague

Comment 2 RHV bug bot 2017-11-26 10:28:59 UTC

We used the whitesource tool to get this info, I've sent you an invite to the SaaS tool so you'll be able to login and check.

Comment 3 Sandro Bonazzola 2018-03-29 11:09:10 UTC

This bugzilla is included in oVirt 4.2.2 release, published on March 28th 2018.

Since the problem described in this bug report should be
resolved in oVirt 4.2.2 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.