hawkular wildfly agent installer enhancements
by John Mazzitelli
I'm going to see if I can tweek this server-side installer builder servlet some more to accept FORM POST rather than GET.
I don't like the idea that we have to put passwords and things in a query string on a URL since web servers usually log URLs in their log files (and thus we'd have sensitive passwords being logged in some log file out on the file system).
I'm also going to look into an optional parameter you can pass in to encode the passwords using a given random-key or something. You would then pass that in to the installer to "decode" the passwords that the installer then uses.
For example:
http://localhost:8080/hawkular/wildfly-agent/download?installer=true&encr...
I'll then do something to encrypt the passwords (not just the hawkular password and secret key but also the key/keystore password if one is provided) before writing them to the installer .properties file. When you run the installer, you have to provide that encryptionSeed to the installer somehow (either pass it in as a cmdline option or have the installer ask on stdin).
This encryptionSeed isn't as sensitive as the passwords, since its used one time only during installation. So even if that is logged or captured in the bash history, its not that much of a problem - you can delete the installer jar and download another installer with a different encryptionSeed to render the original encrypionSeed useless.
Before I do this encryptionSeed thing - what are your thoughts on that? Any other better ideas?
9 years, 7 months
agent 0.13.0.Final released
by John Mazzitelli
FYI: the Hawkular WildFly Agent 0.13.0.Final has been released. This involved a major refactoring to support runtime discovery of changes to inventory (and those updates made to hawkular-inventory).
I did not update the hawkular kettle build - we should probably consider doing that soon.
9 years, 7 months
Inventory model change?
by Heiko W.Rupp
Hey,
I saw this on irc:
[2015-11-06T21:19:27+0100] <mazz> I was going to update kettle, but
that's broken if pulling in the
latest agent and inventory. looks like we'll need to get the UI to
know that feeds are no longer under
environment
We have clients that use subsystems like inventory today - internal like
pinger
and UI and also external ones.
If we make such changes we need to communicate them here so that
everyone knows about them. And not only what has changed, but also
something like a list of previous->new and when it applies (e.g. is in
inv-0.8.15 and
will be in Hawkular-1.0.7
With our rest apis, we should perhaps even transparently redirect
requests
to give old clients time to transition to the new model / api /
endpoints.
9 years, 7 months
WF10
by Thomas Heute
Just a quick note that next week release won't be rebased on WildFly 10,
the main blocker is that Keycloak doesn't run on WF10 and we depend on it.
So we'll release on top of WF9, hopefully the release after will be on WF10
Thomas
9 years, 7 months
Version endpoint for components
by Heiko W.Rupp
Hey,
I think it would be good for all components that have a REST interface
to have a /version endpoint that responds on GET and which returns
- the tag (e.g. 0.8.1.Final or 0.3.44-SNAPSHOT or 1.2.3-src-dep-0xcafebabe))
- the git hash they are built from (less needed for .Final)
So that clients can easily verify what version they have as peer.
9 years, 7 months
Is this an applicable use-case for Hawkular
by Anton Hughes
Hello
I have been watching the developments of Hawkular, and am really impressed!
I have a few questions about Hawkular.
Hawkular seems to be primarily focused on server metrics and monitoring.
I am, however, interested in exploring the possibility of using it for
monitoring and alerting of specific business events. For example, lets say
I had an online shop and I sold my widgets via affiliates. Would it be
possible to capture the sales event, persist and display metrics - so the
affiliate partner could login and see their activities? And to send such
events to Hawkular, is there a java client?
When using the server agent, are captured events sent async?
Thanks
--
Anton Hughes
9 years, 7 months
[hawkular-ui-services] Tests broken
by Lucas Ponce
Hi,
some of tests of ui-services are broken against hawkular/master, in particular:
gulp rest:alert
gulp rest:inventory
I am investigating on alert if this is something introduced in the project, or it has to do with hawkular/master environment.
I wonder if there is some way to automate this (as it is complex), but in the meanwhile, I think it could be good if before to send a PR we validate that the tests are ok.
That could help to trace where the issue could be introduced.
Thanks,
Lucas
9 years, 7 months
