These are chat archives for spring-cloud/spring-cloud

14th
Mar 2017
softmanu
@softmanu
Mar 14 2017 08:28

@dsyer @spencergibb

thanks for being to help out here..

few queries::
1.) how do we know about all the properties supported by zuul so far in the release train Camden.SR3 or before.. is there any centralised place or documentation available where this is maintained.? a consolidated list of all the properties used in zuul is needed.

2.) is there any auto-suggestion kind of thing so that on ctrl+space it should list out all the properties in zuul application.properties/bootstrap.properties file.?

Dave Syer
@dsyer
Mar 14 2017 08:38
There's a list of all config properties in the user guide (http://cloud.spring.io/spring-cloud-static/Camden.SR6/#_appendix_compendium_of_configuration_properties). The source for that is the @ConfigurationProperties though, so you can get the same information from the source code just as easily.
Autocompletion on properties and YAML files comes with the IDEs (STS, IJ, Netbeans) if you install the Spring Boot tooling
softmanu
@softmanu
Mar 14 2017 08:51

Hey Dave, thank u so much..

that is what I have been constantly looking for past few days..

couple of quick questions::
a.) is this Autocompletion feature supported by eclipse IDE..?

b.) In one of the comment made by yours, we know that the property "zuul.ignoredServices" is valid whereas a similar property with name "zuul.route.ignoredServices" is not valid in zuul.. so how to validate such property names which look similar but they actually are not correct..

Dave Syer
@dsyer
Mar 14 2017 08:53
STS is an Eclipse distro. Youc an install the plugins in a regular Eclipse if you prefer. Check the docs in spring.io/tools.
The tooling will show you errors
softmanu
@softmanu
Mar 14 2017 08:56
thanks dave.. got it..!! :smile: :+1:
Ziemowit
@Ziemowit
Mar 14 2017 11:59

Hi have a question (highly possible that stupid) but

If I add

eureka:
  instance:
    nonSecurePortEnabled: false
    securePortEnabled: true
    statusPageUrl: https://${eureka.hostname}/info
    healthCheckUrl: https://${eureka.hostname}/health
    homePageUrl: https://${eureka.hostname}/

to my eureka config. And my ServiceA communicates with ServiceB via @FeignClient usign Eureka to finding each other.

Is it enough to force HTTPS communication between services? Or it will be only HTTPS for communication Eureka - ServiceA and Eureka - ServiceB.

The reason why I am asking is to keep whole communication among services secure.

Dave Syer
@dsyer
Mar 14 2017 12:51
The feign client has a URL in it. IIRC that one has to be "https:..."
Ziemowit
@Ziemowit
Mar 14 2017 13:00
IIRC?
For now the annotation which I have is @FeignClient(name = "service2").
The service2 is the name used by eureka. So no urls used. The pure ids.
Ziemowit
@Ziemowit
Mar 14 2017 14:48
Because to be honest do not know what IIRC is :( (google did not help ;])
Bill Bauernschmidt
@wbauern
Mar 14 2017 15:09
@ryanjbaxter Could you point me to where I can find what specific exceptions will be retried when using RestTemplate configured to use Ribbon retries (ie. spring.cloud.loadbalancer.retry=true)? I'm hoping it is just for connection exceptions but I want to be sure.
Ziemowit
@Ziemowit
Mar 14 2017 19:17
Ok so as I understood. The configuration like above so base on eureka.instance.* makes secure only communication during discovery and nothing more.
To make communication secure AFTER discovery part I need to tinker with @FeignClient itself.
Am I right? :)
Dave Syer
@dsyer
Mar 14 2017 19:20
Don't know. I wouldn't expect you'd have to tinker.
Just some configuration.
Ziemowit
@Ziemowit
Mar 14 2017 19:20
Yes it was what I meant. Thank you.
Dave Syer
@dsyer
Mar 14 2017 19:22
Why would your instance home page be ${eureka.hostname} though?
That looks a bit strange
Ziemowit
@Ziemowit
Mar 14 2017 19:27

eeee it is taken from docs from chapter "Registering a Secure Application"
But it fact this part is not important now.

Just I would like to have sth like zuul as a gate to my all applications.
But still keep secure communication among components in case when someone will sneak into server where my components lives and communicates to each other.
That was my concern.

Dave Syer
@dsyer
Mar 14 2017 20:18
That's all good
I guess you didn't show how the hostname was defined
Marcin Grzejszczak
@marcingrzejszczak
Mar 14 2017 20:20
so I had a chat with Ziemowit and the problem is that from what he says when he uses Feign to call a service he gets http://some_ip/ url whereas he'd like to get https://some_ip
(I haven't read your conversation so maybe you got to the same point)
Dave Syer
@dsyer
Mar 14 2017 20:21
I haven't had time to check.
Marcin Grzejszczak
@marcingrzejszczak
Mar 14 2017 20:21
so he'll check it out when he has time
Dave Syer
@dsyer
Mar 14 2017 20:22
I remember that the client had to put the protocol in the declaration of the Feign interface
I might be mistaken
Ziemowit
@Ziemowit
Mar 14 2017 20:22
It is possible that all what I need to use is Ribbon.isSecure. WIll check it tomorrow. THank you guys!
Marcin Grzejszczak
@marcingrzejszczak
Mar 14 2017 20:23
np - ping us on your findings
cause maybe it's worth adding it to the docs