Tenant Id - Not Part of URL
by Stefan Negrea
Hello Everybody,
I've been working on a PR for the upcoming Hawkular Metrics release that will remove the tenant id from the end-point URLs. The tenant id will be moved to either a header parameter or a query parameter. The query parameter is in place for cases (such as curl) where setting a header is not possible, difficult, or inconvenient.
Here is an example of the change:
Existing URL:
/{tenantId}/gauge/{metricId}/data
New URL:
/gauge/{metricId}/data
Tenant id set via:
1) header - tenantId
2) query parameter - tenantId
There are two exceptions to this rule, /tenants and /db/{tenantid}/series. The /tenants end-point will be changed into something different in the upcoming releases since it is mostly a management type API that does not belong in the same place with the regular metrics endpoint. And /db/{tenantid}/series end-point is needed in this exact format for compatibility with Influxdb compatible services.
Now, to the merits of this change. The tenant id is volatile, can change any time, and changes to it should be expected; but the rest of the URL is fixed. The second issue is that the tenant id is a security concern. So we were limited in design choices since a security concern was leaking as part of the URL.
So removing the tenant id from the URL will give us permanent & consistent addresses for resources (metrics and metric data points). And we will gain a lot of flexibility on the security side. In the future, users could authenticate with a user/pass combo and the backend would transform that into a tenant id to be used on the request. If the same user later decides to use a tenant id to pass along the request, the URL of the resources would not change. Another expectation is that tenant id is not sufficient, it is typically a combo of id + secret; so we would have resorted to a header or query param for the second piece of information (the secret).
This change will give us the flexibility to adjust the security model (the meaning of tenant ids and ways to validate them) without compromising the URL structure. This will help Hawkular Metrics as it gets integrated into more and more projects and products.
Here are the links to the JIRA and the PR for this change:
https://github.com/hawkular/hawkular-metrics/pull/202
https://issues.jboss.org/browse/HWKMETRICS-68
Thank you,
Stefan Negrea
Software Engineer
1 year, 3 months
New and noteworthy in hawkular-parent 25
by Peter Palaga
Hi *,
hawkular-parent 25 brings the following:
* srcdeps-maven-plugin 0.0.5
* meets the promisses falsely done for 0.0.4:
* less console output
* built without tests
* wildfly-maven-plugin 1.1.0.Alpha4
I have sent PRs to all components repos.
Thanks,
Peter
_______________________________________________
hawkular-dev mailing list
hawkular-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/hawkular-dev
1 year, 3 months
Hawkular
by Daniel Glöckner
Hi,
we're using WildFly 10.1.0 and we need more monitoring ;)
I hope this is the right mailing list.
The target picture is
-InfluxDB as TSDB for archiving performance relevant measurements
-Grafana for creating and sharing dashboards
We'd like to use "standard" tools as much as possible. JMX is a mature
standard and we'd like to use it for publishing the metrics.
Using jmxtrans (https://github.com/jmxtrans/jmxtrans) we're able to get a
lot of details about JVM and parts of WildFly.
We're lacking visibility on
-connection pools
-thread pools
-EJBs (remoting)
-web services
How could hawkular help here? I guess hawkular plugs into metrics which
are (unfortunately) not available via JMX in WildFly?
Can hawkular publish via JMX? Or write to InfluxDB?
InfluxDB is not set into stone but is the preferred solution.
Kind regards,
Daniel
1 year, 3 months
Диски
by monreal karakurt
Де варто купувати диски?
1 year, 6 months
Casino for you
by Crownplay Casino
Crownplay Casino offers a luxurious gaming experience with a vast selection of games and enticing bonuses. Whether you’re a fan of slots, table games, or live dealer options, Crownplay has something for everyone. Join now and experience the royal treatment at Crownplay Casino here https://crownplay.casinologinaustralia.com/!
1 year, 10 months
бонусні пропозиції
by Kfenan Coko
Мені подобається мати конкурентну перевагу, коли я граю, і бонусні пропозиції https://casinocityslots.com/ru/bonusy/ дають мені саме це. Завдяки різним бонусам для різних ігор, я можу планувати свої сесії так, щоб мої гроші протрималися найдовше. Це простий спосіб зробити мій ігровий досвід і веселим, і стратегічним.
1 year, 11 months
sitislot
by Kfenan Coko
Будучи новичком в онлайн-казино, я сначала немного опасался, но https://sitislot.com/ru/ сделал мое знакомство с сайтом беспроблемным. Сайт приветливый, с четкими инструкциями и очень интуитивно понятным дизайном. Служба поддержки также была очень полезной, оперативно отвечая на мои вопросы и заботясь о том, чтобы мой старт прошел гладко.
1 year, 11 months
