weixiang1862 / skywalking-x-arthas Goto Github PK

老师，你好
skywalking oap的版本是9.6.0 ， skywalking-agent的版本V9.0.0，使用k8s部署的，使用的skywalking helm的版本是v4.4.0.
以下是k8s集群中的skywalking服务

在UI的界面上可以显示arthas的窗口。arthas-tunnel-server 是部署在k8s集群外面的。

在arthas的窗口输入arthas-tunnel-server的ip:7777，点击 connect，就进入上图中那个黑色的窗口了，但窗口中没有显示其他信息了。
然后再点击 connect 就提示已连接。

查看了 arthas-tunnel-server 的日志，发现有报错。 感觉是arthas-tunnel-server部署在k8s集群外面，不能和k8s集群中的pod通信？

老师，这种问题有什么方式可以处理吗？谢谢！

请问下载的arthas-tunnel-server-3.7.1.jar是放到arthas目录下启动嘛？还是随便放到啥目录都可以？

环境

jdk11
skywalking 8.4.0
arthas 3.6.6

现象

执行 watch 命令后出现提示：Enhance error! exception: java.lang.UnsupportedOperationException: class redefinition failed: attempted to change the schema (add/remove fields)
error happens when enhancing class: class redefinition failed: attempted to change the schema (add/remove fields), check arthas log: arthas.log

预期

watch 命令执行成功

补充

参考下面两个 issue
when use skywalking agent ,arthas is can‘t work well apache/skywalking#4820
SkyWalking supports JDK11 HTTPCLIENT 遇到问题 apache/skywalking#10671

作者你好，我的arthas tunnel server跟java agent部署在不同的服务器上，我用skywalking ui链接时是这么配的：

tunnel server的日志：

java agent的日志：

skywalking UI页面返回200，但是没有显示，请问下可能是什么原因呢

我的skywalking版本是9.2.0，使用二进制文件部署的。jdk版本是 11.0.19
参考的方式是 https://github.com/weixiang1862/skywalking-x-arthas#quick-start 这个中的步骤。
oap-server正常启动了。
但是使用skywalking-x-arthas项目中的 dist/skywalking-webapp.jar 前端部署包，启动异常了。报错信息如下：

Exception in thread "main" org.yaml.snakeyaml.error.YAMLException: java.io.IOException: Stream closed
        at org.yaml.snakeyaml.reader.StreamReader.update(StreamReader.java:214)
        at org.yaml.snakeyaml.reader.StreamReader.ensureEnoughData(StreamReader.java:172)
        at org.yaml.snakeyaml.reader.StreamReader.ensureEnoughData(StreamReader.java:167)
        at org.yaml.snakeyaml.reader.StreamReader.peek(StreamReader.java:122)
        at org.yaml.snakeyaml.scanner.ScannerImpl.scanToNextToken(ScannerImpl.java:1204)
        at org.yaml.snakeyaml.scanner.ScannerImpl.fetchMoreTokens(ScannerImpl.java:320)
        at org.yaml.snakeyaml.scanner.ScannerImpl.checkToken(ScannerImpl.java:238)
        at org.yaml.snakeyaml.parser.ParserImpl$ParseImplicitDocumentStart.produce(ParserImpl.java:212)
        at org.yaml.snakeyaml.parser.ParserImpl.peekEvent(ParserImpl.java:162)
        at org.yaml.snakeyaml.parser.ParserImpl.checkEvent(ParserImpl.java:152)
        at org.yaml.snakeyaml.composer.Composer.getSingleNode(Composer.java:156)
        at org.yaml.snakeyaml.constructor.BaseConstructor.getSingleData(BaseConstructor.java:178)
        at org.yaml.snakeyaml.Yaml.loadFromReader(Yaml.java:493)
        at org.yaml.snakeyaml.Yaml.loadAs(Yaml.java:486)
        at org.apache.skywalking.oap.server.webapp.ApplicationStartUp.main(ApplicationStartUp.java:44)
Caused by: java.io.IOException: Stream closed
        at java.base/java.io.PushbackInputStream.ensureOpen(PushbackInputStream.java:75)
        at java.base/java.io.PushbackInputStream.read(PushbackInputStream.java:163)
        at org.yaml.snakeyaml.reader.UnicodeReader.init(UnicodeReader.java:85)
        at org.yaml.snakeyaml.reader.UnicodeReader.read(UnicodeReader.java:117)
        at org.yaml.snakeyaml.reader.StreamReader.update(StreamReader.java:179)
        ... 14 more

请问一下，这个需要怎么处理？

您好，Skywalking agent和arthas能同时应用于同一个java应用吗？
有冲突该怎么处理呢？

你好，我按照教程部署好之后，skywalking ui 不展示 arthas图标，请问是什么情况 skywalking 9.6 agent 9.0版本

Hello,

First of all, thank you for creating this plugin that integrates Arthas with Skywalking. While the plugin provides much-needed functionality and convenience, there are some security concerns that should be addressed:

• Sensitive Information Exposure: Arthas has the capability to access and modify the application's runtime data, which could include sensitive information. This doesn't align well with Skywalking's monitoring capabilities, leading to possible permissions not adhering to the principle of least privilege.

• Lack of Auditing: Accessing Arthas on a production server is a sensitive operation. If Skywalking's Web UI lacks proper authentication and authorization mechanisms, it could potentially allow unauthorized users to execute Arthas commands.

Recommended Security Measures:

• Principle of Least Privilege: Limit the Arthas commands and operations that can be executed via Skywalking. Alternatively, consider not enabling this feature in production environments.

It would be appreciated if these concerns could be taken into consideration for the plugin's future development.