lbroudoux / chuck-norris-streams Goto Github PK

In the main readme file

actual :

oc env dc/mysqldebezium MYSQL_ROOT_PASSWORD=password MYSQL_USER=chuck MYSQL_PASSWORD=password -n chuck-movie-rental

should be

oc set env dc/mysqldebezium MYSQL_ROOT_PASSWORD=password MYSQL_USER=chuck MYSQL_PASSWORD=password -n chuck-movie-rental

Greetings,

We are security researchers and we are looking for insecure coding patterns and configurations in the microservice architecture repositories. In your repository, we have found instances of hard-coded passwords. According to CWE, "A hard-coded password typically leads to a significant authentication failure that can be difficult for the system administrator to detect."

Hopefully, you agree and will fix it.

Source: https://github.com/lbroudoux/chuck-norris-streams/blob/master/chuck-norris-filter-camel/src/main/resources/application-dev.properties and https://github.com/lbroudoux/chuck-norris-streams/blob/master/chuck-norris-filter-camel/src/main/resources/application.properties

Greetings,

We are security researchers and we are looking for insecure coding patterns and configurations in the microservice architecture repositories. In your repository, we have found instances of improper exception handling.

According to CWE, stack traces due to exception handling should not be printed. See https://cwe.mitre.org/

Source: https://github.com/lbroudoux/chuck-norris-streams/blob/master/chuck-norris-filter-kstreams-quarkus/.mvn/wrapper/MavenWrapperDownloader.java

Fix: #5

I am interested to know if you agree with the findings. Any feedback is appreciated.

Thanks @lbroudoux for creating and describing this elaborate example. I am trying to get it running on my local minishift environment, but unfortunately I am running into an error when trying to create the Debezium Connect pod as described in cdc-config.md. When invoking the oc new-app strimzi-connect-s2i --name=debezium-connect -p CLUSTER_NAME=debezium -p KAFKA_CONNECT_BOOTSTRAP_SERVERS=my-cluster-kafka-bootstrap.amq-streams.svc.cluster.local:9092 command an error is returned:

unable to locate any images in image streams, templates loaded in accessible projects, template files, local docker images with name "strimzi-connect-s2i"

Apparently it's necessary to first create a template with name "strimzi-connect-s2i", but it's not clear where this template comes from. Can you please extend the description with how to create the "strimzi-connect-s2i" template that matches the requirements assumed later on in the description?