According to https://about.codecov.io/security-update/

Add some defensive codes for NPE and bump up Kubernetes client version to expose exception stack trace (#6327)

* Update elasticsearch client 7.0.0 to elasticsearch client 7.5.0.
* Update CHANGES.md and LICENSE.

Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
Co-authored-by: Nkezhenxu94 <kezhenxu94@163.com>

The current implementation of envoy ALS K8S analysis is based on the hierarchy, pod -> StatefulSet -> deployment, StatefulSet, or others. It's freaky and different from the Istio Kubernetes registry.

The new path is pod -> endpoint -> service, and we should leverage Informer API instead of raw Kubernetes API.

Add syncBulkActions config to avoid the large amount of metrics data written ES in a single sync bulk request. (#5699)

test: add a tool to select a suitable group for a new plugin test and remove the outdated group size of plugin tests (#5676)

* Upgrade dependencies and make the JDK11 compiling passed.

* Update license and fix license check file.

* Add CI for JDK11 compiling.

* Update doc.

* Support SSL for prometheus telemetry and prometheus fetcher
* Documents
* Clear up abandunt dependencies
* Update license
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>

* Add annotation(AlarmCore.start)

* Upgrade nacos version to 1.2.0

* Revert "Upgrade nacos version to 1.2.0"

This reverts commit 4d7b06f6d20ee09ad377ad6ef736aeab429314e0.

* Update nacos version to 1.2.0(Solve the security problem of the old version of fastsjon)

* Recovery annotation

* Recovery annotation

* Update nacos version to 1.2.0

* Update tls_key_generate.sh path

Update tls_key_generate.sh path

* Add annotation(AlarmCore.start)

* Revert "Upgrade nacos version to 1.2.0"

This reverts commit 4d7b06f6d20ee09ad377ad6ef736aeab429314e0.

* Update nacos version to 1.2.0(Solve the security problem of the old version of fastsjon)

* Recovery annotation

* Recovery annotation

* Update tls_key_generate.sh path

* Execution Authority

* Remove nacos

* remove nacos code

* remove nacos

remove nacos

* remove nacos

remove nacos

* remove nacos

* remove nacos
Co-authored-by: Nsongzhendong <289505773@qq.com>
Co-authored-by: Nsongzhendong <songzhendong@xiaomi.com>
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>

[CVE] Update Nacos 1.0.0 to Nacos 1.2.0(Solve the security problem of the old version of fastjson) (#4753)

* Update nacos version to 1.2.0(Solve the security problem of the old version of fastsjon)
Co-authored-by: Nsongzhendong <289505773@qq.com>
Co-authored-by: Nsongzhendong <songzhendong@xiaomi.com>

Here are the list of changes we made in this pull request. Top 3 are the principle changes, others are following these principles.
1. New agent and mesh report protocol. 
2. New agent header protocol. 
3. Service register, instance register and network address register have been removed permanently.
4. Service traffic, instance traffic and network alias metrics are added to replace the service, instance and network address inventory.
5. Register process has been removed.
6. Metrics stream process supports insert only mode, especially for traffic entities.
7. Metrics stream process supports no-downsampling mode for traffic entities and network alias.
8. Remove all register mechanism and cache in the java agent.
9. Remove MONTH step in GraphQL query.
10. Update UI to remove MONTH step query, the max query range is 60 days now.
11. Simplify the TTL to metrics and record. And the unit has been formatted in Day unit. No specific TTL for ElasticSearch storage.
12. Buffer mechanism of trace receiver and mesh receiver has been removed due to no register.
13. New service id, instance id and endpoint id rules, including service relation, instance relation and endpoint relation id rules.
14. Java agent support `keep tracing` mode, meaning, agent generating tracing context even the backend is unconnected/unavailable.
15. Plugin test tool up to date, in order to support new protocol.
16. Plugin tests expected data files updated.
17. E2E tests updated.
18. Telemetry of Grafana config has been merged into one.
19. Documentation updates.
20. [TBD] InfluxDB storage implementation is not available, need @dmsolr to fix later, in order to reduce the master change block by this PR.

### Motivation

 Ease the efforts of modifying configurations in automatic workflow and scripts, like Docker and helm chart.

 ### Modification

 Add a `selector` property into `application.yml` to enable switching configuration simply by environment variables or system properties, and filter the unselected options, leaving only selected one.

 ### Result

 - We can switch a configuration by environment variables or system property

 - Closes #4511

* Enable OAP gRPC SSL transportation

Porting to OpenSSL to enable SSL transportation. The server private
key is in the format of PCKS#8, certificates is x509 though.
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Add netty-tcnative-boringssl-static 2.0.26 licnese
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Update docs/en/setup/backend/grpc-ssl.md
Co-Authored-By: Nkezhenxu94 <kezhenxu94@apache.org>

* Update docs/en/setup/backend/grpc-ssl.md
Co-Authored-By: Nkezhenxu94 <kezhenxu94@apache.org>

* Add SSL to grpc remote client and sharing server
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Update documents
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Fix nits
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Fix test case
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Add e2e-ssl and remove other test cases temporarily
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Add TLS relevant files
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Decrease timeout
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Test config works
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* triger CI on oap-ssl branch

* Disable agent ca
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Switch to sharing server
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Add agent log to console
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Upload log files

* Change backend
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Revert "Change backend"

This reverts commit 7a085711e3653d3bf642aa84f73650e22595e383.

* Update backend
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Revert e2e
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Ignore TSL relevant files
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Polish codes
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>

* Update certificates expires year to 2120
Signed-off-by: NGao Hongtao <hanahmily@gmail.com>
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
Co-authored-by: Nkezhenxu94 <kezhenxu94@apache.org>

* support http api.

* e2e
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>
Co-authored-by: Nkezhenxu94 <kezhenxu94@apache.org>

* provide influxdb as a new storage plugin
Co-authored-by: Nkezhenxu94 <kezhenxu94@163.com>
Co-authored-by: 吴晟 Wu Sheng <wu.sheng@foxmail.com>

### Motivation:

Make E2E tests more stable.

### Modifications:

Verify the traces loosely as other tests, and remove the `verify` method which verifies traces strictly, as we have preparation that also generates traces.

### Result:

E2E tests are more stable.

* Update JDK compiling level to 8, and remove zip dist.

* Exclude annotation and shade API.

* Fix more exclusion.

* 1. Update grava and gson 2. Fix compile issue. 3. Keep protoc and maven plugin in old version. Some incompatible of 3rd party grpc proto.

* Fix dependency conflicts, license and notice issue, and dependency check script issue
Co-authored-by: Nkezhenxu94 <kezhenxu94@163.com>