Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-20350

API url in WFManager View hardcoded to HTTP, causing issues when Ambari running on HTTPS

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Critical
    • Resolution: Unresolved
    • 2.4.2
    • None
    • contrib

    Description

      Situation:
      Ambari is running on HTTPS and any WFManager API is called (submit a job, save a flow, etc).

      The browser complains:
      'https://xx.xx.xx:8443/gateway/hdc/ambari/#/main/views/WORKFLOW_MANAGER/1.0.0/WFM' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://localhost:11002/oozie/submitJob?app.path=/user/admin/shellwf.xml&ove…ig.rerunOnFailure=true&oozieparam.action=dryrun&resourceManager=useDefault'. This request has been blocked; the content must be served over HTTPS.

      The cause is that the Ember.ENV.API_URL value, which is used to generate the endpoint URIs is hardcoded to use the HTTP protocol:
      https://github.com/apache/ambari/blob/109bba17ec9d48a5061f2c261325a5b8c445f423/contrib/views/wfmanager/src/main/resources/ui/config/environment.js#L31

      Attachments

        Activity

          People

            Unassigned Unassigned
            orendain Edgar Orendain
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: