fix: issues after security updates

[claudiu-muresan-pfa]

After testing on dev cluster there we're two outstanding problems detected:

• https://waylay.sentry.io/issues/7101987277/?environment=aws-dev&project=1728109&query=is%3Aunresolved&referrer=issue-stream
• 403 Forbidden when broker made calls towards kairosdb (although I see in Sentry that we see events for this error since almost 2y ago):
  • https://waylay.sentry.io/issues/5198817047/?project=63016&referrer=project-issue-stream
  • https://waylay.sentry.io/issues/6679349145/?project=63016&referrer=project-issue-stream

[claudiu-muresan-pfa]

🙏 I need to get this in before starting to work on new bugs coming from prod after Luca's attempt to deploy a newer Kairosdb release:

"sequenceNumber":0,"timestamp":1765983313359,"nanoseconds":359959154,"level":"ERROR","threadName":"qtp1141059550-40","loggerName":"org.kairosdb.core.datastore.CachedSearchResult","mdc": {},"message":"Error reading next data point.","throwable":{"className":"java.io.IOException","message":"Failed to read string and reset stream","stepArray":[{"className":"org.kairosdb.util.KDataInputStream","methodName":"readUTFLong","fileName":"KDataInputStream.java","lineNumber":67},{"className":"org.kairosdb.core.datapoints.StringDataPointFactory","methodName":"getDataPoint","fileName":"StringDataPointFactory.java","lineNumber":39},{"className":"org.kairosdb.core.GuiceKairosDataPointFactory","methodName":"createDataPoint","fileName":"GuiceKairosDataPointFactory.java","lineNumber":129},{"className":"org.kairosdb.core.datastore.CachedSearchResult$CachedDataPointRow","methodName":"next","fileName":"CachedSearchResult.java","lineNumber":534},{"className":"org.kairosdb.core.datastore.CachedSearchResult$CachedDataPointRow","methodName":"next","fileName":"CachedSearchResult.java","lineNumber":466},{"className":"org.kairosdb.core.datastore.DataPointGroupRowWrapper","methodName":"next","fileName":"DataPointGroupRowWrapper.java","lineNumber":75},{"className":"org.kairosdb.core.datastore.DataPointGroupRowWrapper","methodName":"next","fileName":"DataPointGroupRowWrapper.java","lineNumber":26},{"className":"org.kairosdb.util.TournamentTree","methodName":"addIterator","fileName":"TournamentTree.java","lineNumber":77},{"className":"org.kairosdb.core.datastore.SortingDataPointGroup","methodName":"addIterator","fileName":"SortingDataPointGroup.java","lineNumber":60},{"className":"org.kairosdb.core.datastore.SortingDataPointGroup","methodName":"<init>","fileName":"SortingDataPointGroup.java","lineNumber":54},{"className":"org.kairosdb.core.datastore.KairosDatastore","methodName":"groupByTypeAndTag","fileName":"KairosDatastore.java","lineNumber":372},{"className":"org.kairosdb.core.datastore.KairosDatastore$DatastoreQueryImpl","methodName":"execute","fileName":"KairosDatastore.java","lineNumber":522},{"className":"org.kairosdb.core.http.rest.MetricsResource","methodName":"runQuery","fileName":"MetricsResource.java","lineNumber":528},{"className":"org.kairosdb.core.http.rest.MetricsResource","methodName":"postQuery","fileName":"MetricsResource.java","lineNumber":484},{"className":"jdk.internal.reflect.NativeMethodAccessorImpl","methodName":"invoke0","fileName":"NativeMethodAccessorImpl.java","lineNumber":-2},{"className":"jdk.internal.reflect.NativeMethodAccessorImpl","methodName":"invoke","fileName":"NativeMethodAccessorImpl.java","lineNumber":77},{"className":"jdk.internal.reflect.DelegatingMethodAccessorImpl","methodName":"invoke","fileName":"DelegatingMethodAccessorImpl.java","lineNumber":43},{"className":"java.lang.reflect.Method","methodName":"invoke","fileName":"Method.java","lineNumber":569},{"className":"com.sun.jersey.spi.container.JavaMethodInvokerFactory$1","methodName":"invoke","fileName":"JavaMethodInvokerFactory.java","lineNumber":60},{"className":"com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker","methodName":"_dispatch","fileName":"AbstractResourceMethodDispatchProvider.java","lineNumber":205},{"className":"com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher","methodName":"dispatch","fileName":"ResourceJavaMethodDispatcher.java","lineNumber":75},{"className":"com.sun.jersey.server.impl.uri.rules.HttpMethodRule","methodName":"accept","fileName":"HttpMethodRule.java","lineNumber":302},{"className":"com.sun.jersey.server.impl.uri.rules.RightHandPathRule","methodName":"accept","fileName":"RightHandPathRule.java","lineNumber":147},{"className":"com.sun.jersey.server.impl.uri.rules.ResourceClassRule","methodName":"accept","fileName":"ResourceClassRule.java","lineNumber":108},{"className":"com.sun.jersey.server.impl.uri.rules.RightHandPathRule","methodName":"accept","fileName":"RightHandPathRule.java","lineNumber":147},{"className":"com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule","methodName":"accept","fileName":"RootResourceClassesRule.java","lineNumber":84},{"className":"com.sun.jersey.server.impl.application.WebApplicationImpl","methodName":"_handleRequest","fileName":"WebApplicationImpl.java","lineNumber":1542},{"className":"com.sun.jersey.server.impl.application.WebApplicationImpl","methodName":"_handleRequest","fileName":"WebApplicationImpl.java","lineNumber":1473},{"className":"com.sun.jersey.server.impl.application.WebApplicationImpl","methodName":"handleRequest","fileName":"WebApplicationImpl.java","lineNumber":1419},{"className":"com.sun.jersey.server.impl.application.WebApplicationImpl","methodName":"handleRequest","fileName":"WebApplicationImpl.java","lineNumber":1409},{"className":"com.sun.jersey.spi.container.servlet.WebComponent","methodName":"service","fileName":"WebComponent.java","lineNumber":409},{"className":"com.sun.jersey.spi.container.servlet.ServletContainer","methodName":"service","fileName":"ServletContainer.java","lineNumber":558},{"className":"com.sun.jersey.spi.container.servlet.ServletContainer","methodName":"service","fileName":"ServletContainer.java","lineNumber":733},{"className":"javax.servlet.http.HttpServlet","methodName":"service","fileName":"HttpServlet.java","lineNumber":790},{"className":"com.google.inject.servlet.ServletDefinition","methodName":"doServiceImpl","fileName":"ServletDefinition.java","lineNumber":290},{"className":"com.google.inject.servlet.ServletDefinition","methodName":"doService","fileName":"ServletDefinition.java","lineNumber":280},{"className":"com.google.inject.servlet.ServletDefinition","methodName":"service","fileName":"ServletDefinition.java","lineNumber":184},{"className":"com.google.inject.servlet.ManagedServletPipeline","methodName":"service","fileName":"ManagedServletPipeline.java","lineNumber":89},{"className":"com.google.inject.servlet.FilterChainInvocation","methodName":"doFilter","fileName":"FilterChainInvocation.java","lineNumber":85},{"className":"org.kairosdb.core.http.MonitorFilter","methodName":"doFilter","fileName":"MonitorFilter.java","lineNumber":81},{"className":"com.google.inject.servlet.FilterChainInvocation","methodName":"doFilter","fileName":"FilterChainInvocation.java","lineNumber":82},{"className":"org.kairosdb.core.http.LoggingFilter","methodName":"doFilter","fileName":"LoggingFilter.java","lineNumber":50},{"className":"com.google.inject.servlet.FilterChainInvocation","methodName":"doFilter","fileName":"FilterChainInvocation.java","lineNumber":82},{"className":"com.google.inject.servlet.ManagedFilterPipeline","methodName":"dispatch","fileName":"ManagedFilterPipeline.java","lineNumber":121},{"className":"com.google.inject.servlet.GuiceFilter","methodName":"doFilter","fileName":"GuiceFilter.java","lineNumber":133},{"className":"org.eclipse.jetty.servlet.ServletHandler$CachedChain","methodName":"doFilter","fileName":"ServletHandler.java","lineNumber":1638},{"className":"org.eclipse.jetty.servlet.ServletHandler","methodName":"doHandle","fileName":"ServletHandler.java","lineNumber":567},{"className":"org.eclipse.jetty.server.handler.ScopedHandler","methodName":"handle","fileName":"ScopedHandler.java","lineNumber":143},{"className":"org.eclipse.jetty.security.SecurityHandler","methodName":"handle","fileName":"SecurityHandler.java","lineNumber":567},{"className":"org.eclipse.jetty.server.handler.HandlerWrapper","methodName":"handle","fileName":"HandlerWrapper.java","lineNumber":127},{"className":"org.eclipse.jetty.server.handler.ScopedHandler","methodName":"nextHandle","fileName":"ScopedHandler.java","lineNumber":235},{"className":"org.eclipse.jetty.server.handler.ContextHandler","methodName":"doHandle","fileName":"ContextHandler.java","lineNumber":1377},{"className":"org.eclipse.jetty.server.handler.ScopedHandler","methodName":"nextScope","fileName":"ScopedHandler.java","lineNumber":188},{"className":"org.eclipse.jetty.servlet.ServletHandler","methodName":"doScope","fileName":"ServletHandler.java","lineNumber":507},{"className":"org.eclipse.jetty.server.handler.ScopedHandler","methodName":"nextScope","fileName":"ScopedHandler.java","lineNumber":186},{"className":"org.eclipse.jetty.server.handler.ContextHandler","methodName":"doScope","fileName":"ContextHandler.java","lineNumber":1292},{"className":"org.eclipse.jetty.server.handler.ScopedHandler","methodName":"handle","fileName":"ScopedHandler.java","lineNumber":141},{"className":"org.eclipse.jetty.server.handler.gzip.GzipHandler","methodName":"handle","fileName":"GzipHandler.java","lineNumber":767},{"className":"org.eclipse.jetty.server.handler.HandlerList","methodName":"handle","fileName":"HandlerList.java","lineNumber":59},{"className":"org.eclipse.jetty.server.handler.HandlerWrapper","methodName":"handle","fileName":"HandlerWrapper.java","lineNumber":127},{"className":"org.eclipse.jetty.server.Server","methodName":"handle","fileName":"Server.java","lineNumber":501},{"className":"org.eclipse.jetty.server.HttpChannel","methodName":"lambda$handle$1","fileName":"HttpChannel.java","lineNumber":383},{"className":"org.eclipse.jetty.server.HttpChannel","methodName":"dispatch","fileName":"HttpChannel.java","lineNumber":556},{"className":"org.eclipse.jetty.server.HttpChannel","methodName":"handle","fileName":"HttpChannel.java","lineNumber":375},{"className":"org.eclipse.jetty.server.HttpConnection","methodName":"onFillable","fileName":"HttpConnection.java","lineNumber":273},{"className":"org.eclipse.jetty.io.AbstractConnection$ReadCallback","methodName":"succeeded","fileName":"AbstractConnection.java","lineNumber":311},{"className":"org.eclipse.jetty.io.FillInterest","methodName":"fillable","fileName":"FillInterest.java","lineNumber":105},{"className":"org.eclipse.jetty.io.ChannelEndPoint$1","methodName":"run","fileName":"ChannelEndPoint.java","lineNumber":104},{"className":"org.eclipse.jetty.util.thread.strategy.EatWhatYouKill","methodName":"runTask","fileName":"EatWhatYouKill.java","lineNumber":336},{"className":"org.eclipse.jetty.util.thread.strategy.EatWhatYouKill","methodName":"doProduce","fileName":"EatWhatYouKill.java","lineNumber":313},{"className":"org.eclipse.jetty.util.thread.strategy.EatWhatYouKill","methodName":"tryProduce","fileName":"EatWhatYouKill.java","lineNumber":171},{"className":"org.eclipse.jetty.util.thread.strategy.EatWhatYouKill","methodName":"run","fileName":"EatWhatYouKill.java","lineNumber":129},{"className":"org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread","methodName":"run","fileName":"ReservedThreadExecutor.java","lineNumber":375},{"className":"org.eclipse.jetty.util.thread.QueuedThreadPool","methodName":"runJob","fileName":"QueuedThreadPool.java","lineNumber":806},{"className":"org.eclipse.jetty.util.thread.QueuedThreadPool$Runner","methodName":"run","fileName":"QueuedThreadPool.java","lineNumber":938},{"className":"java.lang.Thread","methodName":"run","fileName":"Thread.java","lineNumber":840}],"cause":{"className":"java.io.IOException","message":"Resetting to invalid mark","stepArray":[{"className":"java.io.BufferedInputStream","methodName":"reset","fileName":"BufferedInputStream.java","lineNumber":446},{"className":"java.io.FilterInputStream","methodName":"reset","fileName":"FilterInputStream.java","lineNumber":224},{"className":"org.kairosdb.util.KDataInputStream","methodName":"readUTFLong","fileName":"KDataInputStream.java","lineNumber":48}],"commonFramesCount":75}}}

[claudiu-muresan-pfa]

@ramazanyich, I need a review for this PR 🙏 before merging #24