==================================================================================================== ========================================= Pod describe ========================================= ==================================================================================================== Name: am-bb5f7795c-bzfpt Namespace: xlou Priority: 0 Node: gke-xlou-cdm-default-pool-33cc2627-wcz7/10.142.15.198 Start Time: Tue, 20 Sep 2022 21:16:43 +0000 Labels: app=am app.kubernetes.io/component=am app.kubernetes.io/instance=am app.kubernetes.io/name=am app.kubernetes.io/part-of=forgerock pod-template-hash=bb5f7795c skaffold.dev/profile=medium skaffold.dev/run-id=xlou tier=middle Annotations: cluster-autoscaler.kubernetes.io/safe-to-evict: true Status: Running IP: 10.0.1.14 IPs: IP: 10.0.1.14 Controlled By: ReplicaSet/am-bb5f7795c Init Containers: fbc-init: Container ID: containerd://036c089a4723d9a767ff12127c08d81e9c3909d3111bd5d53dd8a1e464d66dd9 Image: gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747 Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747 Port: Host Port: Command: /bin/bash -c if [ -d /fbc/config ]; then echo "Existing openam configuration found. Skipping copy" else echo "Copying docker image configuration files to the shared volume" cd /home/forgerock/openam cp -r .homeVersion * /fbc fi State: Terminated Reason: Completed Exit Code: 0 Started: Tue, 20 Sep 2022 21:16:50 +0000 Finished: Tue, 20 Sep 2022 21:16:50 +0000 Ready: True Restart Count: 0 Environment: Mounts: /fbc from fbc (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-cdgqn (ro) truststore-init: Container ID: containerd://31317ef7b18b0406c939f1e7c3cb8fa13aedb384fb2efec83e5ef5067c63ac61 Image: gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747 Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747 Port: Host Port: Command: /home/forgerock/import-pem-certs.sh State: Terminated Reason: Completed Exit Code: 0 Started: Tue, 20 Sep 2022 21:16:53 +0000 Finished: Tue, 20 Sep 2022 21:16:53 +0000 Ready: True Restart Count: 0 Environment: TRUSTSTORE_PATH: /truststore/amtruststore TRUSTSTORE_PASSWORD: changeit AM_PEM_TRUSTSTORE: /var/run/secrets/truststore/cacerts Mounts: /truststore from new-truststore (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-cdgqn (ro) /var/run/secrets/truststore from truststore (rw) Containers: openam: Container ID: containerd://eea470ab22aed59626ee219ddc106257ad532c91419b278f4da817085f516b05 Image: gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747 Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747 Port: 8080/TCP Host Port: 0/TCP Command: bash /home/forgerock/docker-entrypoint.sh State: Running Started: Tue, 20 Sep 2022 21:16:54 +0000 Ready: True Restart Count: 0 Limits: memory: 10Gi Requests: cpu: 11 memory: 10Gi Liveness: http-get http://:8080/am/json/health/live delay=30s timeout=5s period=30s #success=1 #failure=3 Readiness: http-get http://:8080/am/json/health/ready delay=20s timeout=5s period=10s #success=1 #failure=3 Startup: http-get http://:8080/am/json/health/live delay=0s timeout=1s period=10s #success=1 #failure=40 Environment Variables from: am-env-secrets Secret Optional: false platform-config ConfigMap Optional: false amster-env-secrets Secret Optional: false ds-env-secrets Secret Optional: false Environment: NAMESPACE: xlou (v1:metadata.namespace) AM_STORES_SSL_ENABLED: true TRUSTSTORE_PATH: /home/forgerock/amtruststore TRUSTSTORE_PASSWORD: changeit AM_STORES_USER_TYPE: LDAPv3ForForgeRockIAM Mounts: /home/forgerock/amtruststore from new-truststore (ro,path="amtruststore") /home/forgerock/openam from fbc (rw) /var/run/secrets/am from am-secrets (rw) /var/run/secrets/amster from amster-key (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-cdgqn (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: fbc: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: am-secrets: Type: Projected (a volume that contains injected data from multiple sources) SecretName: am-passwords SecretOptionalName: SecretName: am-keystore SecretOptionalName: amster-key: Type: Secret (a volume populated by a Secret) SecretName: amster Optional: false truststore: Type: Secret (a volume populated by a Secret) SecretName: truststore-pem Optional: false new-truststore: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: kube-api-access-cdgqn: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: Burstable Node-Selectors: Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 3m17s default-scheduler Successfully assigned xlou/am-bb5f7795c-bzfpt to gke-xlou-cdm-default-pool-33cc2627-wcz7 Normal Pulling 3m17s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747" Normal Pulled 3m11s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747" in 5.767172548s Normal Created 3m11s kubelet Created container fbc-init Normal Started 3m11s kubelet Started container fbc-init Normal Pulling 3m9s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747" Normal Pulling 3m8s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747" Normal Pulled 3m8s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747" in 226.632557ms Normal Started 3m8s kubelet Started container truststore-init Normal Created 3m8s kubelet Created container truststore-init Normal Pulled 3m7s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:3887eb83f22aeca4948dd94b2a06825bdf3cdb7b4a1b315a444de33c52604747" in 205.974562ms Normal Created 3m7s kubelet Created container openam Normal Started 3m7s kubelet Started container openam Warning Unhealthy 2m28s (x4 over 2m58s) kubelet Startup probe failed: Get "http://10.0.1.14:8080/am/json/health/live": dial tcp 10.0.1.14:8080: connect: connection refused Warning Unhealthy 117s (x3 over 2m17s) kubelet Startup probe failed: Get "http://10.0.1.14:8080/am/json/health/live": context deadline exceeded (Client.Timeout exceeded while awaiting headers) ==================================================================================================== =========================================== Pod logs =========================================== ==================================================================================================== Copying bootstrap files for legacy AMKeyProvider Waiting for User Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Trying ds-idrepo-1.ds-idrepo:8080/alive endpoint Trying ds-idrepo-2.ds-idrepo:8080/alive endpoint Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint User Store is responding Waiting for CTS to be available Trying ds-cts-0.ds-cts:8080/alive endpoint CTS is responding Waiting for Application Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Application Store is responding Waiting for Policy Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Policy Store is responding Waiting for UMA Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint UMA Store is responding Starting tomcat with opts: -server -Dcom.sun.services.debug.mergeall=on -Dcom.sun.identity.configuration.directory=/home/forgerock/openam -Dcom.iplanet.services.stats.state=off -Dcom.sun.identity.sm.sms_object_filebased_enabled=true -Dorg.forgerock.donotupgrade=true -DtomcatAccessLogDir=/proc/self/fd -DtomcatAccessLogFile=1 -XX:MaxRAMPercentage=75 -XX:InitialRAMPercentage=75 -XX:MaxTenuringThreshold=1 -Djava.security.egd=file:/dev/urandom -Dorg.forgerock.am.oauth2.consent.xui_path=/OAuth2_XUI -Dcom.forgerock.am.fileconfig.basepaths=/home/forgerock/base/config/services,/home/forgerock/cdk/config/services -Djavax.net.ssl.trustStore=/home/forgerock/amtruststore -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.ssl.trustStoreType=jks NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED 20-Sep-2022 21:17:41.788 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name: Apache Tomcat/9.0.65 20-Sep-2022 21:17:41.791 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built: Jul 14 2022 12:28:53 UTC 20-Sep-2022 21:17:41.791 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 9.0.65.0 20-Sep-2022 21:17:41.791 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name: Linux 20-Sep-2022 21:17:41.791 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version: 5.4.188+ 20-Sep-2022 21:17:41.791 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture: amd64 20-Sep-2022 21:17:41.792 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home: /usr/local/openjdk-11 20-Sep-2022 21:17:41.792 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version: 11.0.16+8 20-Sep-2022 21:17:41.792 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor: Oracle Corporation 20-Sep-2022 21:17:41.792 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE: /usr/local/tomcat 20-Sep-2022 21:17:41.792 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME: /usr/local/tomcat 20-Sep-2022 21:17:41.800 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED 20-Sep-2022 21:17:41.800 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED 20-Sep-2022 21:17:41.800 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util=ALL-UNNAMED 20-Sep-2022 21:17:41.800 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util.concurrent=ALL-UNNAMED 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.services.debug.mergeall=on 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.identity.configuration.directory=/home/forgerock/openam 20-Sep-2022 21:17:41.801 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.iplanet.services.stats.state=off 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.identity.sm.sms_object_filebased_enabled=true 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.forgerock.donotupgrade=true 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -DtomcatAccessLogDir=/proc/self/fd 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -DtomcatAccessLogFile=1 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:MaxRAMPercentage=75 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:InitialRAMPercentage=75 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:MaxTenuringThreshold=1 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.egd=file:/dev/urandom 20-Sep-2022 21:17:41.802 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.forgerock.am.oauth2.consent.xui_path=/OAuth2_XUI 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.forgerock.am.fileconfig.basepaths=/home/forgerock/base/config/services,/home/forgerock/cdk/config/services 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStore=/home/forgerock/amtruststore 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStorePassword=changeit 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStoreType=jks 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs= 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat 20-Sep-2022 21:17:41.803 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp 20-Sep-2022 21:17:41.807 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.2.35] using APR version [1.7.0]. 20-Sep-2022 21:17:41.807 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true], UDS [true]. 20-Sep-2022 21:17:41.807 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true] 20-Sep-2022 21:17:41.810 INFO [main] org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL successfully initialized [OpenSSL 1.1.1n 15 Mar 2022] 20-Sep-2022 21:17:42.035 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"] 20-Sep-2022 21:17:42.052 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8081"] 20-Sep-2022 21:17:42.053 INFO [main] org.apache.catalina.startup.Catalina.load Server initialization in [419] milliseconds 20-Sep-2022 21:17:42.095 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina] 20-Sep-2022 21:17:42.096 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/9.0.65] 20-Sep-2022 21:17:42.100 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deploying web application directory [/usr/local/tomcat/webapps/am] 20-Sep-2022 21:17:49.431 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time. Starting up OpenAM at Sep 20, 2022, 9:17:51 PM {"timestamp":"2022-09-20T21:17:55.004Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=ds-idrepo-2.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Host 'ds-idrepo-2.ds-idrepo' cannot be resolved","context":"default"} {"timestamp":"2022-09-20T21:17:55.263Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=ds-idrepo-2.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Host 'ds-idrepo-2.ds-idrepo' cannot be resolved","context":"default"} {"timestamp":"2022-09-20T21:17:55.336Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"org.forgerock.openam.plugins.PluginLifecycle","message":"PluginTools#upgradePlugins: Encountered plugin org.forgerock.openam.auth.nodes.CloudOnlyNodesPlugin not configured in SMS","context":"default"} {"timestamp":"2022-09-20T21:17:57.551Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringConfig","message":"JDMK runtime not found - Legacy Monitoring disabled","context":"default"} {"timestamp":"2022-09-20T21:17:57.564Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2022-09-20T21:17:57.621Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2022-09-20T21:17:59.774Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=UNUSED.IN.FBC, port=9999, protocol=LDAP (clear-text)))' is no longer operational: Connect Error: Host 'UNUSED.IN.FBC' cannot be resolved","context":"default"} {"timestamp":"2022-09-20T21:17:59.834Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.sm.ldap.LDAPEventManager","message":"LDAPEventManager: received all entries changed event from EventService","context":"default"} {"timestamp":"2022-09-20T21:17:59.884Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLDAPObject: got notifications, all objects changed","context":"default"} {"timestamp":"2022-09-20T21:18:00.583Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.sm.ldap.LDAPEventManager","message":"LDAPEventManager: received all entries changed event from EventService","context":"default"} {"timestamp":"2022-09-20T21:18:00.600Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLDAPObject: got notifications, all objects changed","context":"default"} {"timestamp":"2022-09-20T21:18:00.837Z","level":"WARN","thread":"RADIUS-RadiusServerManager","logger":"org.forgerock.openam.radius.server.config.RadiusServerManager","message":"RADIUS service is not enabled.","context":"default"} {"timestamp":"2022-09-20T21:18:01.066Z","level":"WARN","thread":"Thread-5","logger":"org.forgerock.openam.services.push.PushNotificationService","message":"No Push Notification Service Config found for realm /","context":"default","exception":"java.util.NoSuchElementException: No value present\n\tat java.base/java.util.Optional.get(Optional.java:148)\n\tat org.forgerock.openam.services.push.PushNotificationServiceConfigHelperFactory.getConfigHelperFor(PushNotificationServiceConfigHelperFactory.java:58)\n\tat org.forgerock.openam.services.push.PushNotificationService.getConfigHelper(PushNotificationService.java:280)\n\tat org.forgerock.openam.services.push.PushNotificationService.updatePreferences(PushNotificationService.java:242)\n\tat org.forgerock.openam.services.push.PushNotificationService.init(PushNotificationService.java:157)\n\tat org.forgerock.openam.services.push.PushNotificationServiceSetupListener$1.run(PushNotificationServiceSetupListener.java:48)\n\tat java.base/java.lang.Thread.run(Thread.java:829)\n"} {"timestamp":"2022-09-20T21:18:01.067Z","level":"WARN","thread":"Thread-5","logger":"org.forgerock.openam.services.push.PushNotificationService","message":"No Push Notification Delegate configured for realm /","context":"default"} {"timestamp":"2022-09-20T21:18:01.325Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.iplanet.services.naming.WebtopNaming","message":"WebtopNaming.configMonitoring: start generating ssoserverinfo\n Start time = 2022-09-20 21:18:01","context":"default"} {"timestamp":"2022-09-20T21:18:01.329Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring HTML port not enabled in configuration or JDMK not present.","context":"default"} {"timestamp":"2022-09-20T21:18:01.329Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring SNMP port not enabled or JDMK not present.","context":"default"} {"timestamp":"2022-09-20T21:18:01.330Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring RMI port not enabled.","context":"default"} {"timestamp":"2022-09-20T21:18:01.355Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLdapObject:entryExists: LdapSmsEntryUid{dn='ou=default,ou=OrganizationConfig,ou=1.0,ou=sunFMCOTConfigService,ou=services,ou=am-config', dataStoreId=DataStoreId{id='application-store'}} does not exist","context":"default"} {"timestamp":"2022-09-20T21:18:01.364Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLdapObject:entryExists: LdapSmsEntryUid{dn='ou=default,ou=OrganizationConfig,ou=1.0,ou=sunFMWSFederationMetadataService,ou=services,ou=am-config', dataStoreId=DataStoreId{id='application-store'}} does not exist","context":"default"} {"timestamp":"2022-09-20T21:18:01.372Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2022-09-20T21:18:01.376Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: DB password is null","context":"default"} {"timestamp":"2022-09-20T21:18:01.376Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: Logfile prefix string is null","context":"default"} {"timestamp":"2022-09-20T21:18:01.376Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: Filter class is null","context":"default"} {"timestamp":"2022-09-20T21:18:01.381Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2022-09-20T21:18:01.399Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2022-09-20T21:18:01.402Z","level":"WARN","thread":"main","mdc":{"transactionId":"9cfd95d4-9c68-413b-b33f-8a8d864daaa2-1"},"logger":"com.sun.identity.monitoring.FederationMonitoringSetupImpl","message":"JDMK runtime not found - Federation SNMP disabled","context":"default"} 20-Sep-2022 21:18:04.388 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deployment of web application directory [/usr/local/tomcat/webapps/am] has finished in [22,286] ms 20-Sep-2022 21:18:04.393 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"] 20-Sep-2022 21:18:04.402 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8081"] 20-Sep-2022 21:18:04.404 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [22351] milliseconds {"timestamp":"2022-09-20T21:18:04.578Z","level":"WARN","thread":"http-nio-8080-exec-1","logger":"org.forgerock.openam.core.rest.docs.api.ApiDocsService","message":"API Descriptor has changed - regenerating docs","context":"default"} {"timestamp":"2022-09-20T21:18:04.963Z","level":"WARN","thread":"LDAP SDK Default Scheduler","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=ds-idrepo-1.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Host 'ds-idrepo-1.ds-idrepo' cannot be resolved","context":"default"} {"timestamp":"2022-09-20T21:18:05.263Z","level":"WARN","thread":"LDAP SDK Default Scheduler","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=ds-idrepo-1.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Host 'ds-idrepo-1.ds-idrepo' cannot be resolved","context":"default"} {"timestamp":"2022-09-20T21:18:06.320Z","level":"WARN","thread":"LDAP SDK Default Scheduler","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=66, blocked=0, ldapClient=LdapClient(host=ds-cts-2.ds-cts, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Host 'ds-cts-2.ds-cts' cannot be resolved","context":"default"} {"timestamp":"2022-09-20T21:18:09.752Z","level":"WARN","thread":"LDAP SDK Default Scheduler","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=2, blocked=0, ldapClient=LdapClient(host=ds-idrepo-1.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Host 'ds-idrepo-1.ds-idrepo' cannot be resolved","context":"default"} {"timestamp":"2022-09-20T21:18:09.752Z","level":"WARN","thread":"LDAP SDK Default Scheduler","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'CachedConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=2, blocked=0, ldapClient=LdapClient(host=ds-idrepo-2.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Host 'ds-idrepo-2.ds-idrepo' cannot be resolved","context":"default"} 10.0.1.1 - - [20/Sep/2022:21:18:05 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 759ms 10.0.1.1 - - [20/Sep/2022:21:18:05 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 759ms 10.0.1.1 - - [20/Sep/2022:21:18:05 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 759ms 10.0.4.6 - - [20/Sep/2022:21:18:05 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199039 815ms 10.0.1.1 - - [20/Sep/2022:21:18:13 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 4ms 10.0.1.1 - - [20/Sep/2022:21:18:23 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 7ms 10.0.4.6 - - [20/Sep/2022:21:18:26 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199041 35ms 10.0.4.50 - - [20/Sep/2022:21:18:28 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.1.1 - - [20/Sep/2022:21:18:33 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.1.1 - - [20/Sep/2022:21:18:43 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.0.1.1 - - [20/Sep/2022:21:18:43 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.1.1 - - [20/Sep/2022:21:18:53 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.4.6 - - [20/Sep/2022:21:18:56 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199055 26ms 10.0.1.1 - - [20/Sep/2022:21:19:03 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.1.1 - - [20/Sep/2022:21:19:13 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.0.1.1 - - [20/Sep/2022:21:19:13 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.1.1 - - [20/Sep/2022:21:19:23 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.4.6 - - [20/Sep/2022:21:19:26 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199052 25ms 10.0.1.4 - - [20/Sep/2022:21:19:29 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.1.1 - - [20/Sep/2022:21:19:33 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 5ms 10.0.1.1 - - [20/Sep/2022:21:19:43 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.0.1.1 - - [20/Sep/2022:21:19:43 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.0.1.1 - - [20/Sep/2022:21:19:53 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 5ms Copying docker image configuration files to the shared volume Copying /usr/local/openjdk-11/lib/security/cacerts to /truststore/amtruststore Found (1) certificates in /var/run/secrets/truststore/cacerts Importing (1) certificates into /truststore/amtruststore Certificate was added to keystore Import complete!