Page History

• Simultaneous tests intermittently exhibited false failures.
• Problem was tracked down to s14 having only 50% CPU utilization.
• Using top showed a mongo-express container process was taking up CPU.
• Investigating the process name uncovered that the resource heavy process is a bit-coin mining trojan.
• Mongo Express is made with a version of PHP that is susceptible to malware attacks.
• Shut down and removed mongo express container.  CPU utilization on the system went back to normal (<5%).
• We will need a way to securely login to high risk microservices from the Internet.  For example:
  • docker registry
  • Mongo Express
  • etc.

• Selenium Grid successfully moved to z15.
• Selenium Grid successfully updated to the latest package versions.
• Validated by running tests against the QA environment grid.

OAuth2

• RFC 7519: JSON Web Token
• jwt.io : Site to decode or encode JSON Web Tokens.
• JWT has an expiration time.