Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-14034

New health/ready check fails with RBAC enabled

XMLWordPrintable

    • Hide

      1. Install fresh Wildfly 21.0.0.Final Java EE Full & Web Distribution
      2. Access health in localhost:9990/health/ready = UP
      3. Enable RBAC with jboss-cli: /core-service=management/access=authorization:write-attribute(name=provider,value=rbac)
      4. Access health in localhost:9990/health/ready = DOWN

      Show
      1. Install fresh Wildfly 21.0.0.Final Java EE Full & Web Distribution 2. Access health in localhost:9990/health/ready = UP 3. Enable RBAC with jboss-cli: /core-service=management/access=authorization:write-attribute(name=provider,value=rbac) 4. Access health in localhost:9990/health/ready = DOWN
    • Hide

      The workaround is to disable new health ready/live checks with property 'mp.health.disable-default-procedures=true'

      Show
      The workaround is to disable new health ready/live checks with property 'mp.health.disable-default-procedures=true'
    • Undefined
    • ---
    • ---

      See https://github.com/wildfly/wildfly/pull/13397

      When RBAC is enabled, new MicroProfile ready health check shows DOWN status to http requests or in management console, but shows UP in jboss cli.

      // Jboss cli
/subsystem=microprofile-health-smallrye:check-ready > results UP
// HTTP request
curl http://localhost:9990/health/ready > results DOWN
// HAL
Menu Runtime > Server > MicroProfileHealth > results DOWN

      Also, when workaround is applied, HAL continue to show DOWN status, but only with datasources status displayed.

        1. WhatsApp Image 2021-01-07 at 08.07.37 (1).jpeg
          WhatsApp Image 2021-01-07 at 08.07.37 (1).jpeg
          53 kB

              jmesnil1@redhat.com Jeff Mesnil
              ceweiler Claudio Weiler (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: