Bug 1680569 - Disable Hawtio portal in OpenShift Web Console
Summary: Disable Hawtio portal in OpenShift Web Console
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 3.11.0
Hardware: All
OS: All
low
low
Target Milestone: ---
: ---
Assignee: Samuel Padgett
QA Contact: Yadan Pei
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-02-25 10:35 UTC by Feras Al Taher
Modified: 2022-03-13 17:02 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-05-01 18:39:35 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Feras Al Taher 2019-02-25 10:35:02 UTC
Description of problem:


My customer wants to disable Hawtio portal. Also, they want to disable exposing the following Javascript libraries exposed by the following URL:

  [+] https://master-url/console/java/version.json

Based on my test, I can confirm that the Hawtio and version.json are all static files compiled directly into /usr/bin/origin-web-console golang binary and it can't be disabled or deleted.
+++
[root@master-0 ~]# oc project  openshift-web-console                                                                    
Now using project "openshift-web-console" on server "https://openshift.internal.sharedocp39.lab.rdu2.cee.redhat.com:443"
.
[root@master-0 ~]# oc rsh webconsole-78494b999-2f8gs
sh-4.2$ file /usr/bin/origin-web-console
/usr/bin/origin-web-console: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs),
 not stripped
sh-4.2$ grep -A20 -a "openshift-jvm" /usr/bin/origin-web-console   
...
  "name": "openshift-jvm",
  "version": "1.3.0",
  "commitId": "86841d0720c2b014d97a9ce6b6620937be817599",
  "packages": {
    "angular": {
      "version": "1.5.11"
    },
    "angular-bootstrap": {
      "version": "0.13.4"
    },
    "angular-resource": {
      "version": "1.5.11"
    },
    "angular-route": {
      "version": "1.5.11"
    },
    "angular-sanitize": {
      "version": "1.5.11"
    },
    "bootstrap": {
      "version": "3.3.7"
sh-4.2$ 
+++

I also tried to customize WebConsole and to disable Hawtio by modifying hawtioPluginLoader. However, all my changes were not successful, and neither was I able to change the behavior of Hawtio nor was I able to disable => https://master-url/console/java/version.json


How reproducible:


Steps to Reproduce:
1. curl https://master-url/console/java/version.json
2. or on the browser (https://master-url/console/java/preferences)



Expected results:
Document a way to disable Hawtio portal in OpenShift Web Console and to block the access for all Hawtio javascript libraries

Comment 3 Samuel Padgett 2019-05-06 21:10:20 UTC
Starting in 4.1 the Java console is no longer bundled with OpenShift console and is not installed by default.

Comment 4 mchoma 2019-05-24 10:52:41 UTC
Do you know what is meant to be the alternative in OCP 4.1 to "Java console" ?

Comment 5 Samuel Padgett 2019-09-09 17:54:54 UTC
(In reply to mchoma from comment #4)
> Do you know what is meant to be the alternative in OCP 4.1 to "Java console"

See Bug 1713656

Comment 7 Samuel Padgett 2020-05-01 18:39:35 UTC
Closing this bug as the Java console has not been enabled by default since 4.1.


Note You need to log in before you can comment on or make changes to this bug.