==================================================================================================== ========================================= Pod describe ========================================= ==================================================================================================== Name: ds-cts-1 Namespace: xlou Priority: 0 Service Account: default Node: gke-xlou-cdm-ds-0f601751-mc5d/10.142.0.43 Start Time: Wed, 17 Apr 2024 15:59:16 +0000 Labels: affinity=directory app=ds-cts app.kubernetes.io/component=directory app.kubernetes.io/instance=ds-cts app.kubernetes.io/name=ds app.kubernetes.io/part-of=forgerock controller-revision-hash=ds-cts-6859fbb7f9 statefulset.kubernetes.io/pod-name=ds-cts-1 tier=ds Annotations: Status: Running IP: 10.106.46.160 IPs: IP: 10.106.46.160 Controlled By: StatefulSet/ds-cts Init Containers: initialize: Container ID: containerd://261725e7bfbd6fc5131f45bff3ad6eab105b720cad4d1c0e0752bf053733bfef Image: gcr.io/engineeringpit/lodestar-images/ds-cts:xlou-7.6.0-db97906b8eff882e42d79d5b86aca43562470e8d Image ID: gcr.io/engineeringpit/lodestar-images/ds-cts@sha256:8f2825b8ab903d4e1234b81cb184a7024df93080a00dae590c47ec7e1ed65665 Port: Host Port: Command: /opt/opendj/scripts/init-and-restore.sh State: Terminated Reason: Completed Exit Code: 0 Started: Wed, 17 Apr 2024 15:59:29 +0000 Finished: Wed, 17 Apr 2024 15:59:39 +0000 Ready: True Restart Count: 0 Limits: memory: 14Gi Requests: cpu: 8 memory: 11Gi Environment Variables from: cloud-storage-credentials-cts Secret Optional: false Environment: DS_SET_UID_ADMIN_AND_MONITOR_PASSWORDS: true DS_UID_MONITOR_PASSWORD_FILE: /var/run/secrets/opendj-passwords/monitor.pw DS_UID_ADMIN_PASSWORD_FILE: /var/run/secrets/opendj-passwords/dirmanager.pw DSBACKUP_HOSTS: Optional: false DSBACKUP_DIRECTORY: Optional: false AUTORESTORE_FROM_DSBACKUP: Optional: false DISASTER_RECOVERY_ID: Optional: false Mounts: /opt/opendj/data from data (rw) /opt/opendj/pem-keys-directory/master-key from secrets (rw,path="master-key-pair-combined.pem") /opt/opendj/pem-keys-directory/ssl-key-pair from secrets (rw,path="ssl-key-pair-combined.pem") /opt/opendj/pem-trust-directory/cacerts.pem from truststore (rw,path="cacerts") /opt/opendj/secrets from secrets (rw) /var/run/secrets/cloud-credentials-cache/ from cloud-credentials-cache (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-zv54r (ro) /var/run/secrets/opendj from secrets (rw) /var/run/secrets/opendj-passwords from passwords (rw) Containers: ds: Container ID: containerd://c0e0005ac516c680b574ef3af281ed024c9b6326ec8db93ebcea7fa7bdf40438 Image: gcr.io/engineeringpit/lodestar-images/ds-cts:xlou-7.6.0-db97906b8eff882e42d79d5b86aca43562470e8d Image ID: gcr.io/engineeringpit/lodestar-images/ds-cts@sha256:8f2825b8ab903d4e1234b81cb184a7024df93080a00dae590c47ec7e1ed65665 Ports: 1389/TCP, 1636/TCP, 4444/TCP, 8989/TCP, 8080/TCP, 8443/TCP Host Ports: 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP Args: start-ds State: Running Started: Wed, 17 Apr 2024 15:59:40 +0000 Ready: True Restart Count: 0 Limits: memory: 14Gi Requests: cpu: 8 memory: 11Gi Environment Variables from: cloud-storage-credentials-cts Secret Optional: false Environment: NAMESPACE: xlou (v1:metadata.namespace) DSBACKUP_HOSTS: Optional: false DSBACKUP_DIRECTORY: Optional: false Mounts: /opt/opendj/data from data (rw) /opt/opendj/pem-keys-directory/master-key from secrets (rw,path="master-key-pair-combined.pem") /opt/opendj/pem-keys-directory/ssl-key-pair from secrets (rw,path="ssl-key-pair-combined.pem") /opt/opendj/pem-trust-directory/cacerts.pem from truststore (rw,path="cacerts") /opt/opendj/secrets from secrets (rw) /var/run/secrets/cloud-credentials-cache/ from cloud-credentials-cache (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-zv54r (ro) /var/run/secrets/opendj from secrets (rw) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: data: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: data-ds-cts-1 ReadOnly: false secrets: Type: Secret (a volume populated by a Secret) SecretName: ds Optional: false passwords: Type: Secret (a volume populated by a Secret) SecretName: ds-passwords Optional: false cloud-credentials-cache: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: truststore: Type: Secret (a volume populated by a Secret) SecretName: truststore-pem Optional: false kube-api-access-zv54r: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: Burstable Node-Selectors: Tolerations: WorkerDedicatedDS op=Exists kubernetes.io/arch:NoSchedule op=Exists node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 4m4s default-scheduler Successfully assigned xlou/ds-cts-1 to gke-xlou-cdm-ds-0f601751-mc5d Normal SuccessfulAttachVolume 3m56s attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-58c4a22d-f5a0-48bc-88c8-4292fbd394b8" Normal Pulling 3m54s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/ds-cts:xlou-7.6.0-db97906b8eff882e42d79d5b86aca43562470e8d" Normal Pulled 3m51s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/ds-cts:xlou-7.6.0-db97906b8eff882e42d79d5b86aca43562470e8d" in 3.843614168s (3.843619378s including waiting) Normal Created 3m51s kubelet Created container initialize Normal Started 3m51s kubelet Started container initialize Normal Pulling 3m40s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/ds-cts:xlou-7.6.0-db97906b8eff882e42d79d5b86aca43562470e8d" Normal Pulled 3m40s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/ds-cts:xlou-7.6.0-db97906b8eff882e42d79d5b86aca43562470e8d" in 223.293075ms (223.296758ms including waiting) Normal Created 3m40s kubelet Created container ds Normal Started 3m40s kubelet Started container ds ==================================================================================================== =========================================== Pod logs =========================================== ==================================================================================================== Initializing "data/changelogDb" from Docker image Initializing "data/import-tmp" from Docker image Upgrading configuration and data... * OpenDJ data has already been upgraded to version 7.6.0.db97906b8eff882e42d79d5b86aca43562470e8d Rebuilding degraded indexes for base DN "ou=tokens"... Server configured with: Group ID : default Server ID : ds-cts-1 Advertised listen address : ds-cts-1.ds-cts.xlou.svc.cluster.local Bootstrap replication server(s) : ds-cts-0.ds-cts.xlou.svc.cluster.local:8989,ds-cts-1.ds-cts.xlou.svc.cluster.local:8989 {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.354Z","category":"JVM","severity":"NOTICE","msgId":1058,"message":"ForgeRock Directory Services 7.6.0-20240412143511-db97906b8eff882e42d79d5b86aca43562470e8d (build 20240412144828, revision number db97906b8eff882e42d79d5b86aca43562470e8d) starting up"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.354Z","category":"JVM","severity":"NOTICE","msgId":2233,"message":"Installation Directory: /opt/opendj"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.354Z","category":"JVM","severity":"NOTICE","msgId":2235,"message":"Instance Directory: /opt/opendj"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.354Z","category":"JVM","severity":"NOTICE","msgId":2229,"message":"JVM Information: 21.0.2+13-LTS by Azul Systems, Inc., 64-bit architecture, 11274289152 bytes heap size"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.354Z","category":"JVM","severity":"NOTICE","msgId":2230,"message":"JVM Host: ds-cts-1.ds-cts.xlou.svc.cluster.local default/ds-cts-1, running Linux 5.15.133+ amd64, 15032385536 bytes physical memory size, number of processors available 30"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.354Z","category":"JVM","severity":"NOTICE","msgId":2231,"message":"JVM Arguments: \"-XX:+ExitOnOutOfMemoryError\", \"-XX:MaxRAMPercentage=75\", \"-XX:MaxTenuringThreshold=1\", \"-Djava.security.egd=file:/dev/urandom\", \"-Dorg.opends.server.scriptName=start-ds\""} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.555Z","category":"CORE","severity":"WARNING","msgId":1025,"message":"'External Access Log Publisher' is DEPRECATED for removal since 7.2.0. Its usage is highly discouraged"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:48.955Z","category":"BACKEND","severity":"NOTICE","msgId":608,"message":"The database backend amCts containing 5 entries has started"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.361Z","category":"SYNC.PURGE","severity":"INFORMATION","msgId":2210,"message":"The purge delay has been set to: 12 h"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.361Z","category":"SYNC.LIFECYCLE","severity":"NOTICE","msgId":2022,"message":"Replication server RS(ds-cts-1) started listening for new connections on address 0.0.0.0 port 8989"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.361Z","category":"SYNC.STATE","severity":"NOTICE","msgId":2204,"message":"Directory server DS(ds-cts-1) did not find a generation ID for domain 'uid=monitor'. A new generation ID will be computed by exporting the first 1 entries in the domain"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"SYNC.CONNECTIONS","severity":"INFORMATION","msgId":2023,"message":"Replication server RS(ds-cts-1) has connected to replication server RS(ds-cts-0) for domain \"uid=monitor\" at ds-cts-0.ds-cts.xlou.svc.cluster.local/10.106.40.138:8989"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"SYNC.CONNECTIONS","severity":"INFORMATION","msgId":2025,"message":"Replication server RS(ds-cts-1) has accepted a connection from directory server DS(ds-cts-1) for domain \"uid=monitor\" at /10.106.46.160:45456"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"SYNC.CONNECTIONS","severity":"NOTICE","msgId":2026,"message":"Directory server DS(ds-cts-1) has connected to replication server RS(ds-cts-1) for domain \"uid=monitor\" at 10.106.46.160:8989 with generation ID 12671"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"SYNC.STATE","severity":"NOTICE","msgId":2204,"message":"Directory server DS(ds-cts-1) did not find a generation ID for domain 'ou=tokens'. A new generation ID will be computed by exporting the first 5 entries in the domain"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"BACKEND","severity":"NOTICE","msgId":610,"message":"Exported 5 entries and skipped 0 in 0 seconds (average rate 416.7/sec)"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"SYNC.CONNECTIONS","severity":"INFORMATION","msgId":2023,"message":"Replication server RS(ds-cts-1) has connected to replication server RS(ds-cts-0) for domain \"ou=tokens\" at ds-cts-0.ds-cts.xlou.svc.cluster.local/10.106.40.138:8989"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"SYNC.CONNECTIONS","severity":"INFORMATION","msgId":2025,"message":"Replication server RS(ds-cts-1) has accepted a connection from directory server DS(ds-cts-1) for domain \"ou=tokens\" at /10.106.46.160:45472"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.561Z","category":"SYNC.CONNECTIONS","severity":"NOTICE","msgId":2026,"message":"Directory server DS(ds-cts-1) has connected to replication server RS(ds-cts-1) for domain \"ou=tokens\" at 10.106.46.160:8989 with generation ID 69125"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"CORE","severity":"NOTICE","msgId":1409,"message":"Registered 0 static groups, 0 dynamic groups and 0 virtual static groups. The static group cache is using 0 bytes of memory"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"PROTOCOL.LDAP","severity":"NOTICE","msgId":1845,"message":"Started listening for new connections on Administration Connector 0.0.0.0:4444"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"PROTOCOL.LDAP","severity":"NOTICE","msgId":1845,"message":"Started listening for new connections on LDAP 0.0.0.0:1389"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"PROTOCOL.HTTP","severity":"NOTICE","msgId":1845,"message":"Started listening for new connections on HTTP 0.0.0.0:8080"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"PROTOCOL.HTTP","severity":"NOTICE","msgId":1845,"message":"Started listening for new connections on HTTPS 0.0.0.0:8443"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"PROTOCOL.LDAP","severity":"NOTICE","msgId":1845,"message":"Started listening for new connections on LDAPS 0.0.0.0:1636"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"CORE","severity":"NOTICE","msgId":1059,"message":"The Directory Server has started successfully"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T15:59:49.761Z","category":"CORE","severity":"NOTICE","msgId":1061,"message":"The Directory Server has sent an alert notification generated by class org.opends.server.core.DirectoryServer (alert type org.opends.server.DirectoryServerStarted, alert ID org.opends.messages.server-1059): The Directory Server has started successfully"} {"_id":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-57","timestamp":"2024-04-17T16:00:14.638Z","eventName":"DJ-HTTP","transactionId":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-52","client":{"ip":"10.106.41.131","port":55198},"server":{"ip":"10.106.46.160","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-cts-1.ds-cts.xlou.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.106.46.160:8080"],"user-agent":["Prometheus/2.44.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":98,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T16:00:18.181Z","category":"SYNC.CONNECTIONS","severity":"INFORMATION","msgId":2024,"message":"Replication server RS(ds-cts-1) has accepted a connection from replication server RS(ds-cts-2) for domain \"uid=monitor\" at /10.106.46.4:38292"} {"eventName":"DJ-SERVER","timestamp":"2024-04-17T16:00:18.381Z","category":"SYNC.CONNECTIONS","severity":"INFORMATION","msgId":2024,"message":"Replication server RS(ds-cts-1) has accepted a connection from replication server RS(ds-cts-2) for domain \"ou=tokens\" at /10.106.46.4:38304"} {"_id":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-64","timestamp":"2024-04-17T16:00:44.607Z","eventName":"DJ-HTTP","transactionId":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-59","client":{"ip":"10.106.41.131","port":55198},"server":{"ip":"10.106.46.160","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-cts-1.ds-cts.xlou.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.106.46.160:8080"],"user-agent":["Prometheus/2.44.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":25,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"_id":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-71","timestamp":"2024-04-17T16:01:14.606Z","eventName":"DJ-HTTP","transactionId":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-66","client":{"ip":"10.106.41.131","port":55198},"server":{"ip":"10.106.46.160","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-cts-1.ds-cts.xlou.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.106.46.160:8080"],"user-agent":["Prometheus/2.44.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":23,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"_id":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-119","timestamp":"2024-04-17T16:01:44.606Z","eventName":"DJ-HTTP","transactionId":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-114","client":{"ip":"10.106.41.131","port":55198},"server":{"ip":"10.106.46.160","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-cts-1.ds-cts.xlou.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.106.46.160:8080"],"user-agent":["Prometheus/2.44.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":19,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"_id":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-156","timestamp":"2024-04-17T16:02:14.606Z","eventName":"DJ-HTTP","transactionId":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-151","client":{"ip":"10.106.41.131","port":55198},"server":{"ip":"10.106.46.160","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-cts-1.ds-cts.xlou.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.106.46.160:8080"],"user-agent":["Prometheus/2.44.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":19,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"_id":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-191","timestamp":"2024-04-17T16:02:44.606Z","eventName":"DJ-HTTP","transactionId":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-186","client":{"ip":"10.106.41.131","port":55198},"server":{"ip":"10.106.46.160","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-cts-1.ds-cts.xlou.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.106.46.160:8080"],"user-agent":["Prometheus/2.44.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":17,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"_id":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-254","timestamp":"2024-04-17T16:03:14.606Z","eventName":"DJ-HTTP","transactionId":"c465f8fe-f9a5-4a66-8187-8a61ffa5c1b9-249","client":{"ip":"10.106.41.131","port":55198},"server":{"ip":"10.106.46.160","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-cts-1.ds-cts.xlou.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.106.46.160:8080"],"user-agent":["Prometheus/2.44.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":20,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} Initializing "data/db" from Docker image Initializing "data/changelogDb" from Docker image Initializing "data/import-tmp" from Docker image Initializing "data/locks" from Docker image Initializing "data/var" from Docker image Upgrading configuration and data... * OpenDJ data has already been upgraded to version 7.6.0.db97906b8eff882e42d79d5b86aca43562470e8d Rebuilding degraded indexes for base DN "ou=tokens"... Updating the "uid=admin" password Updating the "uid=monitor" password Initialization completed AUTORESTORE_FROM_DSBACKUP is missing or not set to true. Skipping restore