Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-20350

API url in WFManager View hardcoded to HTTP, causing issues when Ambari running on HTTPS

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: 2.4.2
    • Fix Version/s: None
    • Component/s: contrib
    • Labels:

      Description

      Situation:
      Ambari is running on HTTPS and any WFManager API is called (submit a job, save a flow, etc).

      The browser complains:
      'https://xx.xx.xx:8443/gateway/hdc/ambari/#/main/views/WORKFLOW_MANAGER/1.0.0/WFM' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://localhost:11002/oozie/submitJob?app.path=/user/admin/shellwf.xml&oveā€¦ig.rerunOnFailure=true&oozieparam.action=dryrun&resourceManager=useDefault'. This request has been blocked; the content must be served over HTTPS.

      The cause is that the Ember.ENV.API_URL value, which is used to generate the endpoint URIs is hardcoded to use the HTTP protocol:
      https://github.com/apache/ambari/blob/109bba17ec9d48a5061f2c261325a5b8c445f423/contrib/views/wfmanager/src/main/resources/ui/config/environment.js#L31

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              orendain Edgar Orendain
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: