HXSecurity / DongTai

Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.
https://dongtai.io
Apache License 2.0
1.24k stars 145 forks source link

[Bug]: Helm deployment failure #917

Closed Changego closed 2 years ago

Changego commented 2 years ago

Preflight Checklist

Version

1.8.3

Installation Type

Official Kubernetes

Service Name

Deploy(DongTai-deploy)

Describe the details of the bug and the steps to reproduce it

Hello, Helm deployment failure, please help to analyze

Helm parameter helm install -- create-namespace-n dongtai --set accessType=NodePort -- values. /values.yaml dongtai-iast dongtai/dongtai-iast

values.yaml

# Default values for dongtai.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

# dongtai config
# appNamespace: dongtai-iast
skipMysql: true 
skipRedis: true
accessType: ClusterIP 
imageVersion: latest

mysql:
  host: mariadb-dddd.ddd
  port: 3306
  name: dongtai_webapi
  user: root
  password: ddddd!

redis:
  host: redis-dddd.ddd
  port: 6379
  password: ddddd!
  db: 0

enginUrl: http://dongtai-engine-svc:80

apiServer: http://dongtai-openapi-svc:80

csrfTrustOrigins: .example.com
secretKey: vbjlvbxfvazjfprywuxgyclmvhtmselddsefxxlcixovmqfpgy
smtp:
  server: smtp_server
  user: smtp_user
  password: smtp_password
  from_addr: from_addr
  ssl: False
  cc_addr: cc_addr

aliyun_oss:
  access_key: LTAI5t7pu9WUT2DcbknfNiaD
  access_key_secret: ZoEOSi7KfayQ7JalvJVHa37fdZ4XFY

sca:
  base_url: https://iast.uuu.com
storageClassName:
  name: managed-nfs-storage  

Additional Information

image image

Logs

# dongtai-server
/bin/bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
启动uwsgi服务
config file not exist. stop running
config file not exist. stop running

[uWSGI] getting INI configuration from /opt/dongtai/dongtai_conf/conf/uwsgi.ini
[uwsgi-static] added mapping for /upload => /opt/dongtai/static
*** Starting uWSGI 2.0.19.1 (64bit) on [Wed Aug 17 14:59:14 2022] ***
compiled with version: 10.2.1 20210110 on 05 August 2022 10:52:21
os: Linux-3.10.0-1160.el7.x86_64 #1 SMP Mon Oct 19 16:18:59 UTC 2020
nodename: dongtai-server-fcc995575-j4vsn
machine: x86_64
clock source: unix
detected number of CPU cores: 8
current working directory: /opt/dongtai
detected binary path: /usr/local/bin/uwsgi
!!! no internal routing support, rebuild with pcre support !!!
uWSGI running as root, you can use --uid/--gid/--chroot options
*** WARNING: you are running uWSGI as root !!! (use the --uid flag) *** 
chdir() to /opt/dongtai
your memory page size is 4096 bytes
detected max file descriptor number: 1048576
building mime-types dictionary from file /etc/mime.types...1476 entry found
lock engine: pthread robust mutexes
thunder lock: disabled (you can enable it with --thunder-lock)
Listen queue size is greater than the system max net.core.somaxconn (128).

# dongtai-engine-task
/bin/bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
/bin/bash: /opt/dongtai/webapi/docker/entrypoint.sh: No such file or directory

# dongtai-engine
/bin/bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8)
/bin/bash: /opt/dongtai/webapi/docker/entrypoint.sh: No such file or directory
tscuite commented 2 years ago

The remote helm warehouse is not synchronized, you can use the local file first and fix it as soon as possible

Changego commented 2 years ago

Hello,Has it been fixed?

tscuite commented 2 years ago

ok! You can now enter the deploy/kubernetes/helm directory and execute cd deploy/kubernetes/helm helm install -n default name .

tscuite commented 2 years ago

Cloud synced

Changego commented 2 years ago

Hi. Are you sure it's fixed?

I reverse install and clean up the image. A fresh install

helm install --create-namespace -n dongtai --set accessType=NodePort dongtai-iast dongtai/dongtai-iast --values ./values.yaml

It still seems to be unresolved.