Bug 1680569

Description of problem:


My customer wants to disable Hawtio portal. Also, they want to disable exposing the following Javascript libraries exposed by the following URL:

  [+] https://master-url/console/java/version.json

Based on my test, I can confirm that the Hawtio and version.json are all static files compiled directly into /usr/bin/origin-web-console golang binary and it can't be disabled or deleted.
+++
[root@master-0 ~]# oc project  openshift-web-console                                                                    
Now using project "openshift-web-console" on server "https://openshift.internal.sharedocp39.lab.rdu2.cee.redhat.com:443"
.
[root@master-0 ~]# oc rsh webconsole-78494b999-2f8gs
sh-4.2$ file /usr/bin/origin-web-console
/usr/bin/origin-web-console: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs),
 not stripped
sh-4.2$ grep -A20 -a "openshift-jvm" /usr/bin/origin-web-console   
...
  "name": "openshift-jvm",
  "version": "1.3.0",
  "commitId": "86841d0720c2b014d97a9ce6b6620937be817599",
  "packages": {
    "angular": {
      "version": "1.5.11"
    },
    "angular-bootstrap": {
      "version": "0.13.4"
    },
    "angular-resource": {
      "version": "1.5.11"
    },
    "angular-route": {
      "version": "1.5.11"
    },
    "angular-sanitize": {
      "version": "1.5.11"
    },
    "bootstrap": {
      "version": "3.3.7"
sh-4.2$ 
+++

I also tried to customize WebConsole and to disable Hawtio by modifying hawtioPluginLoader. However, all my changes were not successful, and neither was I able to change the behavior of Hawtio nor was I able to disable => https://master-url/console/java/version.json


How reproducible:


Steps to Reproduce:
1. curl https://master-url/console/java/version.json
2. or on the browser (https://master-url/console/java/preferences)



Expected results:
Document a way to disable Hawtio portal in OpenShift Web Console and to block the access for all Hawtio javascript libraries