[Deprecation] Deprecate the Blacklist / Whitelist nomenclature (#1808)

This PR does deprecate  the terminology blacklist / whitelist with denylist / allowlist

Signed-off-by: kaddy645 <xdeskart@amazon.com>

Author: kaddy645

config/opensearch_dashboards.yml

@@ -131,8 +131,9 @@
 # Set the allowlist to check input graphite Url. Allowlist is the default check list.
 #vis_type_timeline.graphiteAllowedUrls: ['https://www.hostedgraphite.com/UID/ACCESS_KEY/graphite']
 
-# Set the blocklist to check input graphite Url. Blocklist is an IP list.
+# Set the denylist to check input graphite Url. Denylist is an IP list.
 # Below is an example for reference
+
 # vis_type_timeline.graphiteBlockedIPs: [
 #  //Loopback
 #  '127.0.0.0/8',
@@ -161,7 +162,37 @@
 #  '2001:db8::/32',
 #  'ff00::/8',
 # ]
-#vis_type_timeline.graphiteBlockedIPs: []
+
+# vis_type_timeline.graphiteDeniedIPs: []
+
+# vis_type_timeline.graphiteDeniedIPs: [
+#  //Loopback
+#  '127.0.0.0/8',
+#  '::1/128',
+#  //Link-local Address for IPv6
+#  'fe80::/10',
+#  //Private IP address for IPv4
+#  '10.0.0.0/8',
+#  '172.16.0.0/12',
+#  '192.168.0.0/16',
+#  //Unique local address (ULA)
+#  'fc00::/7',
+#  //Reserved IP address
+#  '0.0.0.0/8',
+#  '100.64.0.0/10',
+#  '192.0.0.0/24',
+#  '192.0.2.0/24',
+#  '198.18.0.0/15',
+#  '192.88.99.0/24',
+#  '198.51.100.0/24',
+#  '203.0.113.0/24',
+#  '224.0.0.0/4',
+#  '240.0.0.0/4',
+#  '255.255.255.255/32',
+#  '::/128',
+#  '2001:db8::/32',
+#  'ff00::/8',
+# ]
 
 # opensearchDashboards.branding:
 #   logo:
@@ -177,9 +208,10 @@
 #   applicationTitle: ""
 #   useExpandedHeader: false
 
-# Set the value of this setting to true to capture region blocked warnings and errors
+# Set the value of this setting to true to capture region denied warnings and errors
 # for your map rendering services.
-# map.showRegionBlockedWarning: false
+
+# map.showRegionDeniedWarning: false
 
 # Set the value of this setting to false to suppress search usage telemetry
 # for reducing the load of OpenSearch cluster.

packages/opensearch-safer-lodash-set/scripts/update.sh

@@ -22,7 +22,7 @@ all_files=$(cd lodash && ls)
 modified_lodash_files=(_baseSet.js)
 
 # Get fresh copies of all the files that was originally copied from lodash,
-# expect the ones in the whitelist
+# expect the ones in the allowlist
 for file in $all_files
 do
   if [[ ! "${modified_lodash_files[@]}" =~ "${file}" ]]

packages/osd-pm/dist/index.js

@@ -86225,7 +86225,7 @@ module.exports = ProgressEmitter;
 "use strict";
 
 
-const blacklist = [
+const denylist = [
 	// # All
 	'^npm-debug\\.log$', // Error log for npm
 	'^\\..*\\.swp$', // Swap file for vim state
@@ -86254,7 +86254,7 @@ exports.re = () => {
 	throw new Error('`junk.re` was renamed to `junk.regex`');
 };
 
-exports.regex = new RegExp(blacklist.join('|'));
+exports.regex = new RegExp(denylist.join('|'));
 
 exports.is = filename => exports.regex.test(filename);
 

src/core/server/http/http_server.test.ts

@@ -869,7 +869,7 @@ describe('conditional compression', () => {
       expect(response.header).toHaveProperty('content-encoding', 'gzip');
     });
 
-    test('enables compression for whitelisted referer', async () => {
+    test('enables compression for whitelisted (deprecated) or allowlisted referer', async () => {
       const response = await supertest(listener)
         .get('/')
         .set('accept-encoding', 'gzip')
@@ -878,7 +878,7 @@ describe('conditional compression', () => {
       expect(response.header).toHaveProperty('content-encoding', 'gzip');
     });
 
-    test('disables compression for non-whitelisted referer', async () => {
+    test('disables compression for non-whitelisted (deprecated) or non-allowlisted referer', async () => {
       const response = await supertest(listener)
         .get('/')
         .set('accept-encoding', 'gzip')

src/core/server/opensearch/opensearch_config.ts

@@ -149,6 +149,10 @@ const deprecations: ConfigDeprecationProvider = ({ renameFromRoot, renameFromRoo
     'opensearch.requestHeadersWhitelist',
     'opensearch.requestHeadersAllowlist'
   ),
+  renameFromRootWithoutMap(
+    'opensearch.requestHeadersWhitelistConfigured',
+    'opensearch.requestHeadersAllowlistConfigured'
+  ),
   renameFromRoot('elasticsearch.customHeaders', 'opensearch.customHeaders'),
   renameFromRoot('elasticsearch.shardTimeout', 'opensearch.shardTimeout'),
   renameFromRoot('elasticsearch.requestTimeout', 'opensearch.requestTimeout'),

src/core/server/saved_objects/mappings/lib/get_root_properties_objects.test.ts

@@ -179,7 +179,7 @@ test(`includes one object with type === 'object' and excludes one object without
   });
 });
 
-test('excludes references and migrationVersion which are part of the blacklist', () => {
+test('excludes references and migrationVersion which are part of the denylist', () => {
   const mappings = {
     properties: {
       references: {

src/dev/license_checker/config.ts

@@ -30,7 +30,7 @@
 
 // The following list applies to packages both
 // used as dependencies or dev dependencies
-export const LICENSE_WHITELIST = [
+export const LICENSE_ALLOWLIST = [
   'Elastic-License',
   '0BSD',
   '(BSD-2-Clause OR MIT OR Apache-2.0)',
@@ -86,7 +86,7 @@ export const LICENSE_WHITELIST = [
 
 // The following list only applies to licenses that
 // we wanna allow in packages only used as dev dependencies
-export const DEV_ONLY_LICENSE_WHITELIST = ['MPL-2.0'];
+export const DEV_ONLY_LICENSE_ALLOWLIST = ['MPL-2.0'];
 
 // Globally overrides a license for a given package@version
 export const LICENSE_OVERRIDES = {

src/dev/license_checker/index.ts

@@ -28,5 +28,5 @@
  * under the License.
  */
 
-export { LICENSE_WHITELIST, DEV_ONLY_LICENSE_WHITELIST, LICENSE_OVERRIDES } from './config';
+export { LICENSE_ALLOWLIST, DEV_ONLY_LICENSE_ALLOWLIST, LICENSE_OVERRIDES } from './config';
 export { assertLicensesValid } from './valid';

src/dev/license_checker/run_check_licenses_cli.ts

@@ -32,7 +32,7 @@ import { REPO_ROOT } from '@osd/utils';
 import { run } from '@osd/dev-utils';
 import { getInstalledPackages } from '../npm';
 
-import { LICENSE_WHITELIST, DEV_ONLY_LICENSE_WHITELIST, LICENSE_OVERRIDES } from './config';
+import { LICENSE_ALLOWLIST, DEV_ONLY_LICENSE_ALLOWLIST, LICENSE_OVERRIDES } from './config';
 import { assertLicensesValid } from './valid';
 
 run(
@@ -47,7 +47,7 @@ run(
     // packages are valid
     assertLicensesValid({
       packages: packages.filter((pkg) => !pkg.isDevOnly),
-      validLicenses: LICENSE_WHITELIST,
+      validLicenses: LICENSE_ALLOWLIST,
     });
     log.success('All production dependency licenses are allowed');
 
@@ -56,7 +56,7 @@ run(
     if (flags.dev) {
       assertLicensesValid({
         packages: packages.filter((pkg) => pkg.isDevOnly),
-        validLicenses: LICENSE_WHITELIST.concat(DEV_ONLY_LICENSE_WHITELIST),
+        validLicenses: LICENSE_ALLOWLIST.concat(DEV_ONLY_LICENSE_ALLOWLIST),
       });
       log.success('All development dependency licenses are allowed');
     }

src/legacy/server/config/schema.js

@@ -154,7 +154,7 @@ export default () =>
     map: Joi.object({
       includeOpenSearchMapsService: Joi.boolean().default(true),
       proxyOpenSearchMapsServiceInMaps: Joi.boolean().default(false),
-      showRegionBlockedWarning: Joi.boolean().default(false),
+      showRegionDeniedWarning: Joi.boolean().default(false),
       tilemap: Joi.object({
         url: Joi.string(),
         options: Joi.object({