spring-boot-admin | Admin UI for administration of spring boot applications | Application Framework library

by codecentric Java Version: 2.7.14 License: Apache-2.0

X-Ray Key Features Code Snippets Community Discussions(10)Vulnerabilities Install Support

kandi X-RAY | spring-boot-admin Summary

spring-boot-admin is a Java library typically used in Server, Application Framework, Spring Boot applications. spring-boot-admin has no bugs, it has build file available, it has a Permissive License and it has high support. However spring-boot-admin has 1 vulnerabilities. You can download it from GitHub, Maven.

Admin UI for administration of spring boot applications

Support

Quality

Security

License

Reuse

Support

spring-boot-admin has a highly active ecosystem.

It has 11732 star(s) with 3028 fork(s). There are 662 watchers for this library.

There were 1 major release(s) in the last 12 months.

There are 31 open issues and 1527 have been closed. On average issues are closed in 203 days. There are 2 open pull requests and 0 closed requests.

It has a positive sentiment in the developer community.

The latest version of spring-boot-admin is 2.7.14

Quality

spring-boot-admin has 0 bugs and 0 code smells.

Security

spring-boot-admin has 1 vulnerability issues reported (1 critical, 0 high, 0 medium, 0 low).

spring-boot-admin code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

spring-boot-admin is licensed under the Apache-2.0 License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

spring-boot-admin releases are available to install and integrate.

Deployable package is available in Maven.

Build file is available. You can build the component from source.

Installation instructions, examples and code snippets are available.

spring-boot-admin saves you 9703 person hours of effort in developing the same functionality from scratch.

It has 20614 lines of code, 1609 functions and 546 files.

It has medium code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed spring-boot-admin and discovered the below as its top functions. This is intended to give you an instant insight into spring-boot-admin implemented functionality, and help decide if they suit your requirements.

Deserialize a registration .
Create the request body for a given instance .
Appends events to the event log .
Converts an instance event to a Map .
Rewrite endpoint url .
The hazelcast configuration .
Forward to endpoint web .
Parses the build - version .
Returns the HTTP headers for the given instance .
Registers this application .

Get all kandi verified functions for this library.

spring-boot-admin Key Features

No Key Features are available at this moment for spring-boot-admin.

spring-boot-admin Examples and Code Snippets

No Code Snippets are available at this moment for spring-boot-admin.

Community Discussions

Trending Discussions on spring-boot-admin

Why does a Keycloak bearer token appear to be truncated during security filter chain processing

Making request to Spring Boot Admin server from custom view?

Spring Boot Admin Server and Client in the same application

When running spring-boot container on kubernetes active processor count is set with host CPU, not k8s cpu limit for container

How to solve java.lang.UnsupportedClassVersionError error? Where can I found the right JRE version?

Getting 404 when access spring admin

java.util.concurrent.TimeoutException: Did not observe any item or terminal signal within 10000ms in 'map' (and no fallback has been configured)

Spring Cloud sleuth memory leak issue

SpringBoot Admin custom authentication flow when accessing client

GitHub Actions: Cache Maven .m2 repository on Windows environment C\:\\Users\runneradmin\\.m2\repository: Cannot stat: No such file or directory

QUESTION

Why does a Keycloak bearer token appear to be truncated during security filter chain processing

Asked 2022-Mar-24 at 08:15

I am working with Keycloak 16.1.0, spring boot 2.6.2 and an external application client that sends a bearer token in to my server application to the endpoint http://romanmed-host:8888/actuator/health.

By cranking the debugging level up to maximum, I can see the access token before its processed. I can verify that its accurate by using the JWT Debug site JSON Web Tokens to verify that the signature is correct.

Yet several lines later in the output log the same bearer token appears to be somewhat truncated, its listed with an error saying that it failed to verify. When checked by using the JWT site indicates a signature error, but the token content is correct.

Naturally I would like to know why it appears to be truncated and what I can do about it.

I can match the output from the client program to the server and its not been changed, so truncation must occur within the server program.
The program is accepting the request by a get request, since the token can be checked by JWT as valid at this point, its not truncated by the get request input method.
I have not inserted a filter in the security filter chain, so I can see how any of my code could be doing anything to invalid the token.
Other than the Failed to verify token no other error messages are generated, suggesting that until this point everything is correct.

I can see that the WebAsyncManagerIntegrationFilter, SecurityContextPersistenceFilter, HeaderWriterFilter,KeycloakPreAuthActionsFilter and KeycloakAuthenticationProcessingFilter have all been invoked.

I am assuming that the problem is somewhere within the KeycloakAuthenticationProcessingFilter, but I don't understand why the token appears to have been truncated at this point.

The received bearer token is

eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJ3dUhKc1pvWnduelVsU1Zqc2JyTkxsbUNhR0ZIVkV0cTcyQkI5V0pORTVVIn0.eyJleHAiOjE2NDY0MDI3NTAsImlhdCI6MTY0NjQwMjQ1MCwianRpIjoiMjIyMjUxZDgtNDYxMy00OGQwLWEwNzAtMjU5YTYyY2NhZDkyIiwiaXNzIjoiaHR0cDovL2xvY2FsaG9zdDo4MDg1L2F1dGgvcmVhbG1zL0Jvb3RBZG1pbiIsImF1ZCI6WyJybS1jb25maWctc2VydmVyIiwiYXBwLXRvZG8iLCJhY2NvdW50Il0sInN1YiI6Ijc4ZTU1YjhiLWQ5MjAtNGQ0Yi1hNWQ5LWIyZDk3MDYzNDgyYiIsInR5cCI6IkJlYXJlciIsImF6cCI6ImFwcC1hZG1pbiIsImFjciI6IjEiLCJhbGxvd2VkLW9yaWdpbnMiOlsiaHR0cDovL2xvY2FsaG9zdDozMDAwMSJdLCJyZWFsbV9hY2Nlc3MiOnsicm9sZXMiOlsib2ZmbGluZV9hY2Nlc3MiLCJ1bWFfYXV0aG9yaXphdGlvbiIsImRlZmF1bHQtcm9sZXMtYm9vdGFkbWluIl19LCJyZXNvdXJjZV9hY2Nlc3MiOnsicm0tY29uZmlnLXNlcnZlciI6eyJyb2xlcyI6WyJhY3R1YXRvciJdfSwiYXBwLWFkbWluIjp7InJvbGVzIjpbImFjdHVhdG9yIl19LCJhcHAtdG9kbyI6eyJyb2xlcyI6WyJhY3R1YXRvciJdfSwiYWNjb3VudCI6eyJyb2xlcyI6WyJtYW5hZ2UtYWNjb3VudCIsIm1hbmFnZS1hY2NvdW50LWxpbmtzIiwidmlldy1wcm9maWxlIl19fSwic2NvcGUiOiJlbWFpbCBwcm9maWxlIiwiY2xpZW50SWQiOiJhcHAtYWRtaW4iLCJjbGllbnRIb3N0IjoiMTI3LjAuMC4xIiwiZW1haWxfdmVyaWZpZWQiOmZhbHNlLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJzZXJ2aWNlLWFjY291bnQtYXBwLWFkbWluIiwiY2xpZW50QWRkcmVzcyI6IjEyNy4wLjAuMSJ9.fwQPLiSIrUSjnRnTBrd1vvGic49OSf7aGDemc0TdmTshZzJ-eYhiEqnAh9-QU2rxDayPIhoIzA9CgBXmGPCnl1Qu4CujDddpBcLpnjszBoBdzwjDgpShgwFpGk0fGCM0fxtSZgMWRfeS_sRjBpRzZ42GelCYZ2E1kZX_E7o_LB3thpiv5oYqgTNucusNmzpm0-iFcEUe5rfnu2ZOHI_hLQvIYKlGURnNld4jov-KDLf2QTh2h3XqjbsGHG9PDq4MbFPhKY_9yF0jQkhF6F3oYrw9MIH4SbemrR-CHw6-aWqGmgucjJ7iKMY5o86HxLPu2tzM06NdaurQZX4ImLCBlQ

Its truncated format is

eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJ3dUhKc1pvWnduelVsU1Zqc2JyTkxsbUNhR0ZIVkV0cTcyQkI5V0pORTVVIn0.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

The debug log is

...

ANSWER

Answered 2022-Mar-07 at 08:32

The problem is the set up of the client and server programs.

The server used the value

auth-server-url: http://localhost:8085/auth

in its application.yml file to define the location of the Keycloak server, the client used the value

auth-server-url: http://romanmed-host:8085/auth

to define the location of Keycloak where the machine name romanmed-host is an alias for localhost. Having changed these values to be the same value, everything works as expected.

The diagnostics generated by the debugging/trace code are confusing, string described as truncated header seems to be truncated the bearer token, with out the signature. What the 'Keycloak` diagnostic is attempting to print is the part of the token which defines the tokens permissions and not the signature section.

Running the entire bearer token through the JWT site does show that the token is valid, because its a correctly encoded token and is legitimate.

The problem is not the token, but the way the token is being used! The client was expecting a legal signed token generated by them instance of Keycloak that it knew about, what it got was a legal signed token generated by Keycloak with a different address, which it correctly objected to.

The problem being the nature of the generated error message, it just claimed that the token signature was invalid, had it said something about an invalid/unexpected hostname, the nature of the problem would have been rather more obvious and resolved much faster. Keycloak is design to be flexible, so error messages tend to more vague to cover all situations, hence the message there is something wrong with your bearer token signature which is correct, but vague.

There seems to several schools of thought on how to resolve issues like this, one is to use an raw ip address which will always resolve to the same value. Thus avoid problems like this. This suffers from if the Keycloak server is moved to another machine there are lots of values to change.

My solution is to define an alias value in the hosts/dns server for the address of the eycloak server and always use that value in the support files. Hence if the Keycloak server is ever moved to another address, there is only one value to change.

Source https://stackoverflow.com/questions/71353307

QUESTION

Making request to Spring Boot Admin server from custom view?

Asked 2022-Jan-26 at 18:15

I'm trying to add a custom view with some administrative utilities to Spring Boot Admin. The idea is to implement these as endpoints in Springboot Admin and call these endpoints from my custom view, but I don't know how to make a call to the server itself.

When a custom view has parent: 'instances' it will get an axios client for connecting to the current instance, but since the view I'm building isn't tied to a specific instance it doesn't have this. I'm aware I can install axios as a dependency, but I'd like to avoid that if possible to reduce build times. Since SBA itself depends on axios it seems I shouldn't have to install it myself.

Based on this sample, this is what I have right now:

index.js

...

ANSWER

Answered 2022-Jan-26 at 16:02

Based on the code given, it looks like you don't have axios initialized to how you want to use it.

You're calling it via this.axios but it's not in your component i.e

Source https://stackoverflow.com/questions/70866271

QUESTION

Spring Boot Admin Server and Client in the same application

Asked 2022-Jan-12 at 12:03

I am using spring boot 2.5.1 with Java 11.

I am trying to create a SpringBoot Admin Server and Client in the same application, however when I start it, I get the following error in the console.

Ref: https://github.com/codecentric/spring-boot-admin

Error

Failed to register application as Application(name=PowWow, managementUrl=http://localhost:8085/actuator, healthUrl=http://localhost:8085/actuator/health, serviceUrl=http://localhost:8085/) at spring-boot-admin ([http://localhost:8085/instances]): 401 : [no body]. Further attempts are logged on DEBUG level

I have the following code in the Spring Boot application:

pom.xml

...

ANSWER

Answered 2022-Jan-12 at 12:03

I resolved this by adding /actuator/** to the following:

Source https://stackoverflow.com/questions/70667786

QUESTION

When running spring-boot container on kubernetes active processor count is set with host CPU, not k8s cpu limit for container

Asked 2022-Jan-10 at 16:34

We run spring-boot containers created using bootBuildImage gradle task on kubernetes. We provide both CPU limits and memory limits to the pods at startup in k8s. We use:

spring-boot version 2.6.2
docker image built with gradle spring-boot plugin bootBuildImage task
spring-boot-admin to administrate our spring-boot based deployments
JDK 11 (to enable blockhound)
32 CPUs hosts in GCP GKE
In dev we limit our container to 1 CPU and 1Gig of memory

We noticed that all our spring-boot based containers are provisioned (ie nb of threads) as if running on 32 CPUs instances.

Docker startup logs show

Setting Active Processor Count to 32

[...]

Picked up JAVA_TOOL_OPTIONS: [...] -XX:ActiveProcessorCount=32

In spring-boot-admin with see web servers (netty for reactive, undertow for servlet) are provisioned with thread pools as if the application was running on 32 CPUs allocated container even if the container was limited with 1 CPU by k8s. OTH the allocated memory to the JVM is correct.

How can we make sure the active CPU count reflects the k8s CPU limitation ?

Thanks in advance

...

ANSWER

Answered 2022-Jan-08 at 13:55

Based on the output you included, it looks like you're using buildpacks (i.e. ./mvnw spring-boot:build-image or ./gradlew bootBuildImage or pack build).

In that case, you can set the env variable JAVA_TOOL_OPTIONS with -XX:ActiveProcessorCount=x to override the default calculation. The default calculation will pull the total number of processors (as reported by Go's runtime.NumCPU() function).

Side note. What you are asking seems reasonable, so I opened an issue to see if we can enable it to detect the limited CPU count.

Source https://stackoverflow.com/questions/70623349

QUESTION

How to solve java.lang.UnsupportedClassVersionError error? Where can I found the right JRE version?

Asked 2021-Nov-14 at 00:00

I am working on a Java application (a Spring Boot application). On my Ubuntu development machine I have used this JDK version:

...

ANSWER

Answered 2021-Nov-14 at 00:00

Traditional JREs no longer exist since Java 9 (although some vendors offer JRE-like packages). In order to get a Java runtime to run your application you can use the jlink tool, which also comes with JDK 17, like this for a modular application:

Source https://stackoverflow.com/questions/69957049

QUESTION

Getting 404 when access spring admin

Asked 2021-Jul-27 at 07:05

I have a very simple app:

This is my main class:

...

ANSWER

Answered 2021-Jul-27 at 07:05

The admin URL will be http://localhost:9090 not localhost:9090/admin

Source https://stackoverflow.com/questions/68533222

QUESTION

java.util.concurrent.TimeoutException: Did not observe any item or terminal signal within 10000ms in 'map' (and no fallback has been configured)

Asked 2021-May-29 at 09:49

I'm building the Spring Boot Admin code and getting the below error.

pom.xml

...

ANSWER

Answered 2021-May-04 at 08:45

I was able to solve this issue. Basically all your microservices should use below configuration. Here prefer-ip-address: true and fetch-registry: true is the key here.

Source https://stackoverflow.com/questions/67381065

QUESTION

Spring Cloud sleuth memory leak issue

Asked 2021-May-25 at 19:25

I am facing issue with spring cloud sleuth as it is leaking memory as I have gone through the dumps of my applications:

What does 13.05mb (40.3%) of Java Static org.springframework.cloud.sleuth.instrument.async.SleuthContextListener.CACHE

Spring Cloud Version: Hoxton.SR8 Spring Boot Version: 2.3.3.RELEASE

Please find the heapdump report below:

https://heaphero.io/my-heap-report.jsp?p=YXJjaGl2ZWQvMjAyMS8wNS8yNS8tLWhlYXBkdW1wLTE2MjE5MjE0MzYyNTMuaHByb2YtNS00Ni0xLmpzb24=

pls find the code repo below, which I am using in my appplication, Also on first run there is no memory leakage issue but on successive runs it shows the memory leakage issue as mentioned in the heapdump report

...

ANSWER

Answered 2021-May-25 at 19:25

You have a complete mix of versions. Why do you say that you're using Hoxton and Boot 2.3 if you're not using Hoxton, you're using Greenwich and Boot 2.1

Source https://stackoverflow.com/questions/67671805

QUESTION

SpringBoot Admin custom authentication flow when accessing client

Asked 2021-May-06 at 16:09

I have a number of applications reporting to a SpringBoot Admin application using SpringBoot Admin Client. One of our recent projects that's under construction is using a custom JWT/refresh token authentication flow and I want SpringBoot Admin to use that before hitting the actuator endpoints so I can secure those as well.

The flow works by sending credentials to /v1/auth/login, which will give the user a JWT token with expiration date and refresh token. The JWT is only valid for a short time after which it needs to be refreshed and is submitted with the request as a Bearer-token.

I found this this thread which is somewhat related, but I need to be able to see which endpoint it's trying to access since not all of the applications use the same kind of authentication.

Is there some way I can configure it to add the Authorization header with the correct headers given a URL or client name that matches a certain pattern? Preferably as part of some component that could keep JWT/expiry/refresh token as part of it's state, so I could refresh it when necessary.

...

ANSWER

Answered 2021-May-06 at 16:09

Wouldn't it be enough to have some identifier of application (e.g. app name) and based on that differentiate the auth?

Source https://stackoverflow.com/questions/67419133

QUESTION

GitHub Actions: Cache Maven .m2 repository on Windows environment C\:\\Users\runneradmin\\.m2\repository: Cannot stat: No such file or directory

Asked 2021-Mar-30 at 11:17

As the docs state in order to cache the Maven dependencies with GitHub Actions all we have to use is the actions/cache action like this:

...

ANSWER

Answered 2021-Mar-30 at 11:17

It seems that the path to the Maven repository isn't correctly initialized. As this issue describes the paths are written with \\ instead of / which GNU tar expects. The fix was already provided in Dec 2020, so it made it to the version v2.1.4. The last version v2.1.3 was released in November. But sadly there is a bug in pointing the v2 to the latest v2.1.4 (as normally expected by GitHub Actions users). Therefore to solve this issue, we need to explicitely specifiy the full actions/cache version v2.1.4 like this:

Source https://stackoverflow.com/questions/66870002

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install spring-boot-admin

[A quick guide](http://codecentric.github.io/spring-boot-admin/2.5.1/#getting-started) to get started can be found in our docs.
Please make sure you set $JAVA_HOME points to the correct JDK.
JDK >= 1.8