Add encryption support for repository

CHANGELOG.md

@@ -11,7 +11,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Add events correlation engine plugin ([#6854](https://github.com/opensearch-project/OpenSearch/issues/6854))
 - Introduce new dynamic cluster setting to control slice computation for concurrent segment search ([#9107](https://github.com/opensearch-project/OpenSearch/pull/9107))
 - Implement on behalf of token passing for extensions ([#8679](https://github.com/opensearch-project/OpenSearch/pull/8679))
-- Added encryption-sdk lib to provide encryption and decryption capabilities ([#8466](https://github.com/opensearch-project/OpenSearch/pull/8466))
+- Added encryption-sdk lib to provide encryption and decryption capabilities ([#8466](https://github.com/opensearch-project/OpenSearch/pull/8466) [#9289](https://github.com/opensearch-project/OpenSearch/pull/9289))
 
 ### Dependencies
 - Bump `log4j-core` from 2.18.0 to 2.19.0

distribution/tools/plugin-cli/build.gradle

@@ -48,6 +48,10 @@ dependencies {
   implementation 'org.apache.commons:commons-compress:1.23.0'
 }
 
+configurations.implementation {
+  exclude group: 'org.bouncycastle', module: 'bcprov-jdk15to18'
+}
+
 tasks.named("dependencyLicenses").configure {
   mapping from: /bc.*/, to: 'bouncycastle'
 }

libs/common/src/main/java/org/opensearch/common/crypto/CryptoHandler.java

@@ -8,6 +8,7 @@
 
 package org.opensearch.common.crypto;
 
+import org.opensearch.common.annotation.ExperimentalApi;
 import org.opensearch.common.io.InputStreamContainer;
 
 import java.io.IOException;
@@ -20,6 +21,7 @@
  * T - Encryption Metadata / CryptoContext
  * U - Parsed Encryption Metadata / CryptoContext
  */
+@ExperimentalApi
 public interface CryptoHandler<T, U> {
 
     /**

modules/transport-netty4/build.gradle

@@ -131,10 +131,6 @@ thirdPartyAudit {
     'com.aayushatharva.brotli4j.encoder.Encoder$Parameters',
     // classes are missing
 
-    // from io.netty.logging.CommonsLoggerFactory (netty)
-    'org.apache.commons.logging.Log',
-    'org.apache.commons.logging.LogFactory',
-
     // from Log4j (deliberate, Netty will fallback to Log4j 2)
     'org.apache.log4j.Level',
     'org.apache.log4j.Logger',
@@ -177,13 +173,6 @@ thirdPartyAudit {
     'org.jboss.marshalling.MarshallingConfiguration',
     'org.jboss.marshalling.Unmarshaller',
 
-    // from io.netty.util.internal.logging.InternalLoggerFactory (netty) - it's optional
-    'org.slf4j.helpers.FormattingTuple',
-    'org.slf4j.helpers.MessageFormatter',
-    'org.slf4j.Logger',
-    'org.slf4j.LoggerFactory',
-    'org.slf4j.spi.LocationAwareLogger',
-
     'com.google.protobuf.nano.CodedOutputByteBufferNano',
     'com.google.protobuf.nano.MessageNano',
     'com.ning.compress.BufferRecycler',