==================================================================================================== ========================================= Pod describe ========================================= ==================================================================================================== Name: am-6fd554f8f7-hvvkw Namespace: xlou Priority: 0 Service Account: default Node: gke-xlou-cdm-default-pool-1b0769c8-nhlf/10.142.0.110 Start Time: Thu, 18 Apr 2024 23:35:53 +0000 Labels: app=am app.kubernetes.io/component=am app.kubernetes.io/instance=am app.kubernetes.io/name=am app.kubernetes.io/part-of=forgerock pod-template-hash=6fd554f8f7 tier=middle Annotations: cluster-autoscaler.kubernetes.io/safe-to-evict: true kubectl.kubernetes.io/restartedAt: 2024-04-18T23:35:12Z Status: Running IP: 10.106.42.15 IPs: IP: 10.106.42.15 Controlled By: ReplicaSet/am-6fd554f8f7 Init Containers: fbc-init: Container ID: containerd://d43d703cbadc972a34ead8d7e06eba898c9b772cfc84ab81aeb463c846a29cbc Image: gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:76de7e7a4ba215dd6fdb36fd27d3058596e8ddf7c03e2b3bf0a73db55ec4a538 Port: Host Port: Command: /bin/bash -c if [ -d /fbc/config ]; then echo "Existing openam configuration found. Skipping copy" else echo "Copying docker image configuration files to the shared volume" cd /home/forgerock/openam cp -r .homeVersion * /fbc fi State: Terminated Reason: Completed Exit Code: 0 Started: Thu, 18 Apr 2024 23:35:54 +0000 Finished: Thu, 18 Apr 2024 23:35:54 +0000 Ready: True Restart Count: 0 Environment: Mounts: /fbc from fbc (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-pzfrm (ro) truststore-init: Container ID: containerd://7befdaa3ae41e5e05f9001b2b96fca8123f592725184643dd938712eca4ad6a3 Image: gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:76de7e7a4ba215dd6fdb36fd27d3058596e8ddf7c03e2b3bf0a73db55ec4a538 Port: Host Port: Command: /home/forgerock/import-pem-certs.sh State: Terminated Reason: Completed Exit Code: 0 Started: Thu, 18 Apr 2024 23:35:55 +0000 Finished: Thu, 18 Apr 2024 23:35:56 +0000 Ready: True Restart Count: 0 Environment: TRUSTSTORE_PATH: /truststore/amtruststore TRUSTSTORE_PASSWORD: changeit AM_PEM_TRUSTSTORE: /var/run/secrets/truststore/cacerts AM_PEM_TRUSTSTORE_DS: /var/run/secrets/truststore/ca.crt Mounts: /truststore from new-truststore (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-pzfrm (ro) /var/run/secrets/truststore from truststore (rw) Containers: openam: Container ID: containerd://dbebe5234116971ef58f6d4e5c2455ea8887f5187fd6dc6d36cae12cbc051b2b Image: gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:76de7e7a4ba215dd6fdb36fd27d3058596e8ddf7c03e2b3bf0a73db55ec4a538 Port: 8080/TCP Host Port: 0/TCP Command: bash /home/forgerock/docker-entrypoint.sh State: Running Started: Thu, 18 Apr 2024 23:35:56 +0000 Ready: True Restart Count: 0 Limits: memory: 10Gi Requests: cpu: 11 memory: 10Gi Liveness: http-get http://:8080/am/json/health/live delay=30s timeout=5s period=30s #success=1 #failure=3 Readiness: http-get http://:8080/am/json/health/ready delay=20s timeout=5s period=10s #success=1 #failure=3 Startup: http-get http://:8080/am/json/health/live delay=0s timeout=1s period=10s #success=1 #failure=40 Environment Variables from: am-env-secrets Secret Optional: false platform-config ConfigMap Optional: false amster-env-secrets Secret Optional: false ds-env-secrets Secret Optional: false Environment: NAMESPACE: xlou (v1:metadata.namespace) AM_STORES_SSL_ENABLED: true TRUSTSTORE_PATH: /home/forgerock/amtruststore TRUSTSTORE_PASSWORD: changeit AM_STORES_USER_TYPE: LDAPv3ForForgeRockIAM Mounts: /home/forgerock/amtruststore from new-truststore (ro,path="amtruststore") /home/forgerock/logging from am-logback (rw) /home/forgerock/openam from fbc (rw) /var/run/secrets/am from am-secrets (rw) /var/run/secrets/amster from amster-key (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-pzfrm (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: fbc: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: am-secrets: Type: Projected (a volume that contains injected data from multiple sources) SecretName: am-passwords SecretOptionalName: SecretName: am-keystore SecretOptionalName: amster-key: Type: Secret (a volume populated by a Secret) SecretName: amster Optional: false truststore: Type: Projected (a volume that contains injected data from multiple sources) SecretName: truststore-pem SecretOptionalName: SecretName: ds-ssl-keypair SecretOptionalName: new-truststore: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: am-logback: Type: ConfigMap (a volume populated by a ConfigMap) Name: am-logback Optional: false kube-api-access-pzfrm: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: Burstable Node-Selectors: Tolerations: kubernetes.io/arch:NoSchedule op=Exists node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 4m6s default-scheduler Successfully assigned xlou/am-6fd554f8f7-hvvkw to gke-xlou-cdm-default-pool-1b0769c8-nhlf Normal Pulling 4m6s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog" Normal Pulled 4m5s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog" in 572.246673ms (572.2533ms including waiting) Normal Created 4m5s kubelet Created container fbc-init Normal Started 4m5s kubelet Started container fbc-init Normal Pulling 4m4s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog" Normal Pulled 4m4s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog" in 200.13509ms (200.140734ms including waiting) Normal Created 4m4s kubelet Created container truststore-init Normal Started 4m4s kubelet Started container truststore-init Normal Pulling 4m3s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog" Normal Pulled 4m3s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou-Apr12-affinityAll-noauditlog" in 206.589367ms (206.60106ms including waiting) Normal Created 4m3s kubelet Created container openam Normal Started 4m3s kubelet Started container openam Warning Unhealthy 3m45s (x2 over 3m55s) kubelet Startup probe failed: Get "http://10.106.42.15:8080/am/json/health/live": context deadline exceeded (Client.Timeout exceeded while awaiting headers) ==================================================================================================== =========================================== Pod logs =========================================== ==================================================================================================== Copying bootstrap files for legacy AMKeyProvider Waiting for User Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint User Store is responding Waiting for CTS to be available Trying ds-cts-0.ds-cts:8080/alive endpoint CTS is responding Waiting for Application Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Application Store is responding Waiting for Policy Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Policy Store is responding Waiting for UMA Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint UMA Store is responding Starting tomcat with opts: -server -Dcom.sun.services.debug.mergeall=on -Dcom.sun.identity.configuration.directory=/home/forgerock/openam -Dcom.iplanet.services.stats.state=off -Dcom.sun.identity.sm.sms_object_filebased_enabled=true -Dorg.forgerock.donotupgrade=true -DtomcatAccessLogDir=/proc/self/fd -DtomcatAccessLogFile=1 --add-opens java.xml/com.sun.org.apache.xerces.internal.dom=ALL-UNNAMED -XX:MaxRAMPercentage=75 -XX:InitialRAMPercentage=75 -XX:MaxTenuringThreshold=1 -Djava.security.egd=file:/dev/urandom -Dorg.forgerock.am.oauth2.consent.xui_path=/OAuth2_XUI -Dcom.forgerock.am.fileconfig.basepaths=/home/forgerock/base/config/services,/home/forgerock/cdk/config/services -Djavax.net.ssl.trustStore=/home/forgerock/amtruststore -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.ssl.trustStoreType=jks NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED 18-Apr-2024 23:35:58.506 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name: Apache Tomcat/9.0.87 18-Apr-2024 23:35:58.509 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built: Mar 11 2024 10:12:34 UTC 18-Apr-2024 23:35:58.509 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 9.0.87.0 18-Apr-2024 23:35:58.509 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name: Linux 18-Apr-2024 23:35:58.509 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version: 5.15.133+ 18-Apr-2024 23:35:58.510 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture: amd64 18-Apr-2024 23:35:58.510 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home: /opt/java/openjdk 18-Apr-2024 23:35:58.510 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version: 17.0.10+7 18-Apr-2024 23:35:58.510 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor: Eclipse Adoptium 18-Apr-2024 23:35:58.510 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE: /usr/local/tomcat 18-Apr-2024 23:35:58.510 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME: /usr/local/tomcat 18-Apr-2024 23:35:58.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED 18-Apr-2024 23:35:58.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED 18-Apr-2024 23:35:58.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util=ALL-UNNAMED 18-Apr-2024 23:35:58.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util.concurrent=ALL-UNNAMED 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.services.debug.mergeall=on 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.identity.configuration.directory=/home/forgerock/openam 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.iplanet.services.stats.state=off 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.identity.sm.sms_object_filebased_enabled=true 18-Apr-2024 23:35:58.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.forgerock.donotupgrade=true 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -DtomcatAccessLogDir=/proc/self/fd 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -DtomcatAccessLogFile=1 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.xml/com.sun.org.apache.xerces.internal.dom=ALL-UNNAMED 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:MaxRAMPercentage=75 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:InitialRAMPercentage=75 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:MaxTenuringThreshold=1 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.egd=file:/dev/urandom 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.forgerock.am.oauth2.consent.xui_path=/OAuth2_XUI 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.forgerock.am.fileconfig.basepaths=/home/forgerock/base/config/services,/home/forgerock/cdk/config/services 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStore=/home/forgerock/amtruststore 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStorePassword=changeit 18-Apr-2024 23:35:58.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStoreType=jks 18-Apr-2024 23:35:58.519 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs= 18-Apr-2024 23:35:58.519 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat 18-Apr-2024 23:35:58.519 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat 18-Apr-2024 23:35:58.519 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp 18-Apr-2024 23:35:58.522 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.3.0] using APR version [1.7.0]. 18-Apr-2024 23:35:58.522 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true], UDS [true]. 18-Apr-2024 23:35:58.522 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true] 18-Apr-2024 23:35:58.525 INFO [main] org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL successfully initialized [OpenSSL 3.0.2 15 Mar 2022] 18-Apr-2024 23:35:58.694 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"] 18-Apr-2024 23:35:58.709 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8081"] 18-Apr-2024 23:35:58.710 INFO [main] org.apache.catalina.startup.Catalina.load Server initialization in [333] milliseconds 18-Apr-2024 23:35:58.736 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina] 18-Apr-2024 23:35:58.736 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/9.0.87] 18-Apr-2024 23:35:58.741 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deploying web application directory [/usr/local/tomcat/webapps/am] 18-Apr-2024 23:36:05.826 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time. Starting up OpenAM at Apr 18, 2024, 11:36:07 PM {"timestamp":"2024-04-18T23:36:11.302Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"org.forgerock.openam.plugins.PluginLifecycle","message":"PluginTools#upgradePlugins: Encountered plugin org.forgerock.openam.auth.nodes.CloudOnlyNodesPlugin not configured in SMS","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:12.287Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.sm.ldap.LDAPEventManager","message":"LDAPEventManager: received all entries changed event from EventService","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:12.362Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLDAPObject: got notifications, all objects changed","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:12.372Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.sm.ldap.LDAPEventManager","message":"LDAPEventManager: received all entries changed event from EventService","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:12.427Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLDAPObject: got notifications, all objects changed","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:12.470Z","level":"WARN","thread":"Thread-3","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-10"},"logger":"PROTOCOL.LDAP_CLIENT","message":"Connection factory 'org.forgerock.openam.ldap.MonitoredLdapClient@73f2cef1' is no longer operational: Connect Error: Host 'UNUSED.IN.FBC' cannot be resolved","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-10"} {"timestamp":"2024-04-18T23:36:12.480Z","level":"WARN","thread":"Thread-3","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-10"},"logger":"org.forgerock.openam.services.push.PushNotificationService","message":"No Push Notification Service Config found for realm /","context":"default","exception":"java.util.NoSuchElementException: No value present\n\tat java.base/java.util.Optional.get(Optional.java:143)\n\tat org.forgerock.openam.services.push.PushNotificationServiceConfigHelperFactory.getConfigHelperFor(PushNotificationServiceConfigHelperFactory.java:58)\n\tat org.forgerock.openam.services.push.PushNotificationService.getConfigHelper(PushNotificationService.java:322)\n\tat org.forgerock.openam.services.push.PushNotificationService.updatePreferences(PushNotificationService.java:284)\n\tat org.forgerock.openam.services.push.PushNotificationService.init(PushNotificationService.java:199)\n\tat org.forgerock.openam.services.push.PushNotificationServiceSetupListener$1.run(PushNotificationServiceSetupListener.java:46)\n\tat java.base/java.lang.Thread.run(Thread.java:840)\n","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-10"} {"timestamp":"2024-04-18T23:36:12.481Z","level":"WARN","thread":"Thread-3","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-10"},"logger":"org.forgerock.openam.services.push.PushNotificationService","message":"No Push Notification Delegate configured for realm /","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-10"} {"timestamp":"2024-04-18T23:36:12.498Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringConfig","message":"JDMK runtime not found - Legacy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:12.508Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:13.528Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:13.571Z","level":"WARN","thread":"RADIUS-RadiusServerManager","logger":"org.forgerock.openam.radius.server.config.RadiusServerManager","message":"RADIUS service is not enabled.","context":"default","transactionId":null} {"timestamp":"2024-04-18T23:36:15.326Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.iplanet.services.naming.WebtopNaming","message":"WebtopNaming.configMonitoring: start generating ssoserverinfo\n Start time = 2024-04-18 23:36:15","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.329Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring HTML port not enabled in configuration or JDMK not present.","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.330Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring SNMP port not enabled or JDMK not present.","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.330Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring RMI port not enabled.","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.333Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"PROTOCOL.LDAP_CLIENT","message":"Connection factory 'org.forgerock.openam.ldap.MonitoredLdapClient@319b5cac' is no longer operational: Connect Error: Host 'UNUSED.IN.FBC' cannot be resolved","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.347Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLdapObject:entryExists: LdapSmsEntryUid{dn='ou=default,ou=OrganizationConfig,ou=1.0,ou=sunFMCOTConfigService,ou=services,ou=am-config', dataStoreId=DataStoreId{id='application-store'}} does not exist","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.353Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLdapObject:entryExists: LdapSmsEntryUid{dn='ou=default,ou=OrganizationConfig,ou=1.0,ou=sunFMWSFederationMetadataService,ou=services,ou=am-config', dataStoreId=DataStoreId{id='application-store'}} does not exist","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.357Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.360Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: DB password is null","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.360Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: Logfile prefix string is null","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.360Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: Filter class is null","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.364Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.379Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} {"timestamp":"2024-04-18T23:36:15.382Z","level":"WARN","thread":"main","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"},"logger":"com.sun.identity.monitoring.FederationMonitoringSetupImpl","message":"JDMK runtime not found - Federation SNMP disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-0"} 18-Apr-2024 23:36:18.138 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deployment of web application directory [/usr/local/tomcat/webapps/am] has finished in [19,396] ms 18-Apr-2024 23:36:18.141 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"] 18-Apr-2024 23:36:18.149 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8081"] 18-Apr-2024 23:36:18.151 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [19440] milliseconds {"timestamp":"2024-04-18T23:36:18.280Z","level":"WARN","thread":"http-nio-8081-exec-1","logger":"org.forgerock.openam.core.rest.docs.api.ApiDocsService","message":"API Descriptor has changed - regenerating docs","context":"default","transactionId":null} 10.106.42.1 - - [18/Apr/2024:23:36:19 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 877ms 10.106.42.1 - - [18/Apr/2024:23:36:19 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 877ms 10.106.41.131 - - [18/Apr/2024:23:36:19 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199915 920ms 10.106.42.1 - - [18/Apr/2024:23:36:23 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:36:23 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.42.1 - - [18/Apr/2024:23:36:33 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.42.1 - - [18/Apr/2024:23:36:43 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.41.131 - - [18/Apr/2024:23:36:46 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199883 27ms 10.106.42.1 - - [18/Apr/2024:23:36:53 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:36:53 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.42.1 - - [18/Apr/2024:23:37:03 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.42.1 - - [18/Apr/2024:23:37:13 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.41.131 - - [18/Apr/2024:23:37:16 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199875 25ms 10.106.42.1 - - [18/Apr/2024:23:37:23 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 2ms 10.106.42.1 - - [18/Apr/2024:23:37:23 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:37:33 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.42.1 - - [18/Apr/2024:23:37:43 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.41.131 - - [18/Apr/2024:23:37:46 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199884 25ms 10.106.42.1 - - [18/Apr/2024:23:37:53 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:37:53 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:38:03 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:38:13 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.41.131 - - [18/Apr/2024:23:38:16 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199867 25ms 10.106.42.1 - - [18/Apr/2024:23:38:23 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 2ms 10.106.42.1 - - [18/Apr/2024:23:38:23 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:38:33 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:38:43 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.41.131 - - [18/Apr/2024:23:38:46 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199873 24ms 10.106.42.1 - - [18/Apr/2024:23:38:53 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:38:53 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:39:03 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:39:13 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.41.131 - - [18/Apr/2024:23:39:16 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199904 24ms {"timestamp":"2024-04-18T23:39:25.944Z","level":"WARN","thread":"http-nio-8081-exec-4","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"},"logger":"org.forgerock.openam.core.realms.impl.DefaultRealmLookup","message":"DefaultRealms:lookup Unable to find Org name for: authenticate","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"} {"timestamp":"2024-04-18T23:39:25.993Z","level":"WARN","thread":"http-nio-8081-exec-4","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"},"logger":"com.sun.identity.authentication.config.AMAuthLevelManager","message":"No auth level for module OpenIdConnect","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"} {"timestamp":"2024-04-18T23:39:26.001Z","level":"WARN","thread":"http-nio-8081-exec-4","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"},"logger":"com.sun.identity.authentication.config.AMAuthLevelManager","message":"No auth level for module AuthenticatorPushRegistration","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"} {"timestamp":"2024-04-18T23:39:26.009Z","level":"WARN","thread":"http-nio-8081-exec-4","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"},"logger":"com.sun.identity.authentication.config.AMAuthLevelManager","message":"No auth level for module PersistentCookie","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"} {"timestamp":"2024-04-18T23:39:26.126Z","level":"WARN","thread":"http-nio-8081-exec-4","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"} {"timestamp":"2024-04-18T23:39:26.186Z","level":"WARN","thread":"http-nio-8081-exec-4","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"},"logger":"com.sun.identity.idm.plugins.internal.AgentsRepo","message":"AgentsRepo.getAgentGroupConfig: Unable to get Agent Group Config due to The instance agentgroup does not exist","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"} {"timestamp":"2024-04-18T23:39:26.364Z","level":"WARN","thread":"http-nio-8081-exec-4","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-131"} 10.106.42.1 - - [18/Apr/2024:23:39:23 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:39:23 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.44.133 - - [18/Apr/2024:23:39:26 +0000] "POST /am/json/authenticate?realm=/ HTTP/1.1" 200 167 516ms {"timestamp":"2024-04-18T23:39:29.387Z","level":"WARN","thread":"http-nio-8081-exec-5","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-145"},"logger":"org.forgerock.openam.core.realms.impl.DefaultRealmLookup","message":"DefaultRealms:lookup Unable to find Org name for: access_token","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-145"} {"timestamp":"2024-04-18T23:39:29.959Z","level":"WARN","thread":"http-nio-8081-exec-6","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-150"},"logger":"org.forgerock.openam.core.realms.impl.DefaultRealmLookup","message":"DefaultRealms:lookup Unable to find Org name for: introspect","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-150"} {"timestamp":"2024-04-18T23:39:30.370Z","level":"WARN","thread":"OpenDJ LDAP SDK Client Worker(1)","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-136"},"logger":"com.sun.identity.idm.IdRepoListener","message":"objectChanged called with an empty name","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-136"} {"timestamp":"2024-04-18T23:39:31.369Z","level":"WARN","thread":"OpenDJ LDAP SDK Client Worker(1)","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-136"},"logger":"com.sun.identity.idm.IdRepoListener","message":"objectChanged called with an empty name","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-136"} {"timestamp":"2024-04-18T23:39:32.369Z","level":"WARN","thread":"OpenDJ LDAP SDK Client Worker(1)","mdc":{"transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-136"},"logger":"com.sun.identity.idm.IdRepoListener","message":"objectChanged called with an empty name","context":"default","transactionId":"5ce92532-12b5-4e47-a7d6-b3bb3c9e255e-136"} 10.106.44.133 - - [18/Apr/2024:23:39:29 +0000] "POST /am/oauth2/access_token?realm=/ HTTP/1.1" 200 105 357ms 10.106.41.138 - - [18/Apr/2024:23:39:30 +0000] "POST /am/oauth2/introspect HTTP/1.1" 200 371 62ms 10.106.42.1 - - [18/Apr/2024:23:39:33 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.42.1 - - [18/Apr/2024:23:39:43 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms 10.106.41.131 - - [18/Apr/2024:23:39:46 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 357075 40ms 10.106.42.1 - - [18/Apr/2024:23:39:53 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 2ms 10.106.42.1 - - [18/Apr/2024:23:39:53 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 3ms Copying docker image configuration files to the shared volume Copying /opt/java/openjdk/lib/security/cacerts to /truststore/amtruststore Found (2) certificates in am_combined_truststore Importing (2) certificates into /truststore/amtruststore Certificate was added to keystore Certificate was added to keystore Import complete!