Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-9493

Zookeeper password is not encrypted in child containers

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • fuse-6.x-GA
    • jboss-fuse-6.3
    • Fabric8 v1
    • None
    • % %
    • Hide

      1. Unzip jboss-fuse-karaf-6.3.0.redhat-347.zip
      2. Create a fabric:

      > fabric:create --clean --zookeeper-password admin --wait-for-provisioning

      3. Create a child container:

      > fabric:container-create-child root child

      4. Check the process in the OS:

      $ps -fea | grep child

      [emunoz@localhost jboss-fuse-6.3.0.redhat-347]$ ps -fea | grep -i child
      emunoz 27608 2138 99 09:00 pts/2 00:00:16 /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/bin/java -server -Dcom.sun.management.jmxremote -Dorg.jboss.gravia.repository.storage.dir=data/repository -Dzookeeper.url=ovpn-124-127.rdu2.redhat.com:2181 -Dzookeeper.password.encode=true -Dzookeeper.password=admin -Xmx768m -XX:+UnlockDiagnosticVMOptions -XX:+UnsyncloadClass -Dio.fabric8.datastore.gitTimeout=40 -Dio.fabric8.datastore.component.name=io.fabric8.datastore -Dio.fabric8.datastore.felix.fileinstall.filename=file:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/etc/io.fabric8.datastore.cfg -Dio.fabric8.datastore.importDir=fabric -Dio.fabric8.datastore.gitAllowRemoteUpdate=true -Dio.fabric8.datastore.gitRandomFetchDelay=0 -Dio.fabric8.datastore.gitRemotePollInterval=60000 -Dio.fabric8.datastore.service.pid=io.fabric8.datastore -Densemble.auto.start=false -Dagent.auto.start=true -Dpatching.disabled=false -Djava.util.logging.config.file=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child/etc/java.util.logging.properties -Djavax.management.builder.initial=org.apache.karaf.management.boot.KarafMBeanServerBuilder -Djava.endorsed.dirs=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/jre/lib/endorsed:/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/lib/endorsed:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/endorsed -Djava.ext.dirs=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/jre/lib/ext:/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/lib/ext:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/ext -Dkaraf.home=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347 -Dkaraf.base=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child -Dkaraf.data=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child/data -Dkaraf.etc=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child/etc -Dkaraf.startLocalConsole=false -Dkaraf.startRemoteShell=true -classpath /home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/karaf-jaas-boot.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/esb-version.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/org.apache.servicemix.specs.locator-2.7.0.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/org.apache.karaf.diagnostic.core-2.4.0.redhat-630347.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/org.apache.servicemix.specs.activator-2.7.0.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/karaf.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/karaf-jmx-boot.jar org.apache.karaf.main.Main server

      Show
      1. Unzip jboss-fuse-karaf-6.3.0.redhat-347.zip 2. Create a fabric: > fabric:create --clean --zookeeper-password admin --wait-for-provisioning 3. Create a child container: > fabric:container-create-child root child 4. Check the process in the OS: $ps -fea | grep child [emunoz@localhost jboss-fuse-6.3.0.redhat-347] $ ps -fea | grep -i child emunoz 27608 2138 99 09:00 pts/2 00:00:16 /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/bin/java -server -Dcom.sun.management.jmxremote -Dorg.jboss.gravia.repository.storage.dir=data/repository -Dzookeeper.url=ovpn-124-127.rdu2.redhat.com:2181 -Dzookeeper.password.encode=true -Dzookeeper.password=admin -Xmx768m -XX:+UnlockDiagnosticVMOptions -XX:+UnsyncloadClass -Dio.fabric8.datastore.gitTimeout=40 -Dio.fabric8.datastore.component.name=io.fabric8.datastore -Dio.fabric8.datastore.felix.fileinstall.filename= file:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/etc/io.fabric8.datastore.cfg -Dio.fabric8.datastore.importDir=fabric -Dio.fabric8.datastore.gitAllowRemoteUpdate=true -Dio.fabric8.datastore.gitRandomFetchDelay=0 -Dio.fabric8.datastore.gitRemotePollInterval=60000 -Dio.fabric8.datastore.service.pid=io.fabric8.datastore -Densemble.auto.start=false -Dagent.auto.start=true -Dpatching.disabled=false -Djava.util.logging.config.file=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child/etc/java.util.logging.properties -Djavax.management.builder.initial=org.apache.karaf.management.boot.KarafMBeanServerBuilder -Djava.endorsed.dirs=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/jre/lib/endorsed:/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/lib/endorsed:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/endorsed -Djava.ext.dirs=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/jre/lib/ext:/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181-7.b13.fc28.x86_64/jre/lib/ext:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/ext -Dkaraf.home=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347 -Dkaraf.base=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child -Dkaraf.data=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child/data -Dkaraf.etc=/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/instances/child/etc -Dkaraf.startLocalConsole=false -Dkaraf.startRemoteShell=true -classpath /home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/karaf-jaas-boot.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/esb-version.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/org.apache.servicemix.specs.locator-2.7.0.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/org.apache.karaf.diagnostic.core-2.4.0.redhat-630347.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/org.apache.servicemix.specs.activator-2.7.0.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/karaf.jar:/home/emunoz/Documents/CEE/jboss-fuse-6.3.0.redhat-347/lib/karaf-jmx-boot.jar org.apache.karaf.main.Main server

    Description

      When you create a child container, the zookeeper password is showed as a plain text using the "ps -fea" command and in the fuse log file.

      Attachments

        Issue Links

          causes

          Bug - A problem that impairs or prevents the functions of the product. ENTESB-9710 Cannot patch fabric child container to 6.3 R10

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Activity

            People

              ggrzybek Grzegorz Grzybek
              emunoz@redhat.com Elkin Dario Munoz Duarte
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: