hide Artemis codec key from Hawtio console

[Vilius Šumskas <vi...@rivile.lt>]

Hello,

is there a way to hide Artemis codec key from Hawtio console and preferably other places reachable by developers and administrators?

I already unset environment variable used to set the key on Artemis service startup, however property can be still seen by everyone who has access to Hawtio console -> Runtime.

--
   Best Regards,

    Vilius Šumskas
    Rivile
    IT manager
    +370 614 75713

Re: hide Artemis codec key from Hawtio console

[Justin Bertram <jb...@apache.org>]

The "Runtime" section of Hawtio is populated by information from the
java.lang:type=Runtime MBean [1]. Therefore, you can modify
etc/management.xml to disallow access to this MBean, e.g.:

         <match domain="java.lang" key="type=Runtime">
            <access method="*" roles="no-access"/>
         </match>

Only users in the role "no-access" will be allowed to see the attributes of
this MBean. This will effectively hide the codec key from anybody using JMX
(including the web console).


Justin

[1]
https://docs.oracle.com/en/java/javase/11/docs/api/java.management/java/lang/management/RuntimeMXBean.html

On Fri, Jul 15, 2022 at 6:00 AM Vilius Šumskas <vi...@rivile.lt>
wrote:

> Hello,
>
> is there a way to hide Artemis codec key from Hawtio console and
> preferably other places reachable by developers and administrators?
>
> I already unset environment variable used to set the key on Artemis
> service startup, however property can be still seen by everyone who has
> access to Hawtio console -> Runtime.
>
> --
>    Best Regards,
>
>     Vilius Šumskas
>     Rivile
>     IT manager
>     +370 614 75713
>
>