The "Runtime" section of Hawtio is populated by information from the
java.lang:type=Runtime MBean [1]. Therefore, you can modify
etc/management.xml to disallow access to this MBean, e.g.:
<match domain="java.lang" key="type=Runtime">
<access method="*" roles="no-access"/>
</match>
Only users in the role "no-access" will be allowed to see the attributes of
this MBean. This will effectively hide the codec key from anybody using JMX
(including the web console).
Justin
[1]
https://docs.oracle.com/en/java/javase/11/docs/api/java.management/java/lang/management/RuntimeMXBean.html
On Fri, Jul 15, 2022 at 6:00 AM Vilius Šumskas <vilius.sums...@rivile.lt>
wrote:
> Hello,
>
> is there a way to hide Artemis codec key from Hawtio console and
> preferably other places reachable by developers and administrators?
>
> I already unset environment variable used to set the key on Artemis
> service startup, however property can be still seen by everyone who has
> access to Hawtio console -> Runtime.
>
> --
> Best Regards,
>
> Vilius Šumskas
> Rivile
> IT manager
> +370 614 75713
>
>
