J.Andreina created KNOX-2925:
--------------------------------

             Summary: The knox gateway urls for UI services which are in HA  
should not be exposing the service endpoint url as part of query param 
                 Key: KNOX-2925
                 URL: https://issues.apache.org/jira/browse/KNOX-2925
             Project: Apache Knox
          Issue Type: Improvement
          Components: Homepage
    Affects Versions: 1.3.0
            Reporter: J.Andreina


*ENV:*
knox 1.3
Knox , HDFS , Hbase , Impala is installed in HA 

*Steps :*
1. Create a topology_1 with HDFSUI,HBASEUI,IMPALAUI services 
2. Login to  knox homepage 
3. Expand topology_1
4. Access any one of the link for HDFS / Hbase/Impala instance via knox proxy

*Observation;*
the knox gateway url link for HDFS / Hbase/Impala will expose the underlying 
service address as part of the query param for example as follows. 

https://<knox_host>:8443/gateway/topology_1/hbase/webui/master?&host=<hbase_host1>&port=22002

Suggestion :
Since exposing the service address in knox gateway url is against proxying 
concept , we should have a mechanism to avoid exposing the service address to 
the end user. 

CC: [~smolnar], [~more] , [~pzampino] , [~amagyar],




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to