Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Page Properties
hiddentrue
idPROGRESS

Product Version2021 Autumn
Report Note
AssigneeAntje

Resources & Remarks

Modification History

NameDateProduct VersionAction
Antje07 JUL 20212021 Autumn

Security of Actuator Endpoints



Excerpt

When updating your yuuvis® Momentum installation to version 2021 Autumn, manual configuration changes are required for some services.


Section
bordertrue


Column

Table of Contents

Table of Contents
exclude(Table of Contents|Read on|Another Tutorial|Another Concept Article|Another interesting Tutorial|Ressources|Remarks|Authentication against the Core API|Graphical Overview \/ Use Cases \(Flows\)|Login to the Core API \(Java\)|yuuvis® Momentum Services|Basic Use Case Flows)


Core

Configuration Changes for the AUTHENTICATION Service

Especially for customers using the Tenant Management services, the configuration of the AUTHENTICATION Service has to be adjusted as follows:

...

  • Expose the individual /manage endpoints in the section authorization.accesses.

    Deprecated ConfigurationNew Configuration


    Code Block
    languageyml
    authorization.accesses:
    ### manage-endpoints
      - endpoints: /manage/info,/manage/health
        expose: true



    Code Block
    languageyml
    authorization.accesses:
    ### manage-endpoints
      - endpoints: /manage/**
        expose: true



  • Add the following two lines in order to select the port number 9091 for the /manage endpoints.

    Code Block
    languageyml
    management.server.port: 9091
    management.server.servlet.context-path: /


...

  • Run the command.

    Code Block
    languagepowershell
    kubectl -n yuuvis edit svc authentication


  • Remove the label yuuvis: "true".

    Deprecated ConfigurationNew Configuration


    Code Block
    languageyml
      labels:
        app: yuuvis
        name: authentication
        yuuvis: "true"
      name: authentication



    Code Block
    languageyml
    labels:
      app: yuuvis
      name: authentication
    name: authentication



Create a new Kubernetes Service:

...

  • Run the command:

    Code Block
    languagepowershell
    kubectl -n yuuvis edit deploy authentication


  • Adjust the configuration:

    Deprecated ConfigurationNew Configuration


    Code Block
    languageyml
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /manage/info
        port: 8080
        scheme: HTTP
    ...
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /manage/info
        port: 8080
        scheme: HTTP



    Code Block
    languageyml
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /manage/info
        port: 9091
        scheme: HTTP
    ...
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /manage/info
        port: 9091
        scheme: HTTP



Restart the AUTHENTICATION service.