Merge "[Security] Add log4j vulnerability mitigation in Elasticsearch"

ansible/roles/elasticsearch/defaults/main.yml

@@ -38,7 +38,7 @@ elasticsearch_enable_keystone_registration: False
 
 elasticsearch_cluster_name: "kolla_logging"
 es_heap_size: "1g"
-es_java_opts: "{% if es_heap_size %}-Xms{{ es_heap_size }} -Xmx{{ es_heap_size }}{%endif%}"
+es_java_opts: "{% if es_heap_size %}-Xms{{ es_heap_size }} -Xmx{{ es_heap_size }}{%endif%} -Dlog4j2.formatMsgNoLookups=true"
 
 #######################
 # Elasticsearch Curator

releasenotes/notes/security-log4j-1be047799f8e590a.yaml

+---
+security:
+  - |
+    Adds mitigation for the Apache Log4j2 Remote Code Execution (RCE)
+    Vulnerability in Elasticsearch - CVE-2021-44228.