-
Task
-
Resolution: Done
-
Blocker
-
None
-
None
-
None
-
2019 Week 08-10, 2019 Week 11-13
-
NEW
-
NEW
Today, on OpenShift environment we need to configure the Readiness and Liveneses probes which are used to tell to kubernetes when if a pod is ready to receive requests or if a pod is healthy.
For now the probes use a request on kie-wb.jsp:
curl --fail --silent -u '${KIE_ADMIN_USER}:${DEFAULT_PASSWORD}' http://localhost:8080/kie-wb.jsp
We need to improve it because:
- It exposes a ADMIN user credentials (even with sso) and probes should not require auth.
- turn the probe more accurate;
- on a env without SSO, the probes returns 200 OK with or without user:pass and it does not verify nothing than if the login page is available.
- Integrated with SSO requires authentication.
It will be great if we can have probes in the same way we have for the kieserver:
https://github.com/kiegroup/droolsjbpm-integration/blob/master/kie-server-parent/kie-server-remote/kie-server-rest/kie-server-rest-common/src/main/java/org/kie/server/remote/rest/common/resource/KieServerRestImpl.java#L331
The requirements are basically:
The ready and health probes should return 200 ok or 503 for service unavailable.
The probes should not expose any kind of information, unless, you think is necessary return a report when the probe fails.
The probes should not require authentication.
- blocks
-
KIECLOUD-182 Remove temporary Decision/Business Central security workaround
- Closed
-
KIECLOUD-164 Update the operator probes to match the new probes
- Closed
-
KIECLOUD-178 Update product probes on RHPAM APB
- Closed