Unauthorized access to Jolokia API using CDK/minishift with OpenShift 3.11

Solution Verified - Updated

Environment

  • Red Hat OpenShift (OpenShift)
    • 3.11
  • Minishift
    • 1.34.1

Issue

  • When I try to open the Fuse Console, it requests username and password (basic authentication), and no user configured can have access.
  • Unauthorized access to Jolokia API using CDK/minishift with OpenShift 3.11.0

Resolution

This bug has been reported in the following JIRA's: Content from issues.jboss.org is not included.ENTESB-10087 & Content from issues.jboss.org is not included.CDK-361.

Workaround:
To enable users with edit role on the project to access the Java/Fuse console, disable Jolokia authentication with the following commands (replace $NAME with your DeploymentConfig's name):

oc create -f - <<EOF
apiVersion: v1
kind: ConfigMap
data:
  jolokia.properties: |-
    host=*
    port=8778
    discoveryEnabled=false
    protocol=https
metadata:
  name: jolokia.properties
EOF

oc set volume dc/$NAME --add --name=jolokiaprops --type=configmap --configmap-name='jolokia.properties' --mount-path=/home/jboss/jolokia

oc set env dc/$NAME AB_JOLOKIA_CONFIG=/home/jboss/jolokia/jolokia.properties

Root Cause

Content from issues.jboss.org is not included.ENTESB-10087 - OCP 3.11 - Unauthorized access to Jolokia API
Content from issues.jboss.org is not included.CDK-361 - CDK3 Jolokia does not work on Java containers

Components
Category

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.