==================================================================================================== ========================================= Pod describe ========================================= ==================================================================================================== Name: am-5d5df7bfb9-r57vt Namespace: xlou Priority: 0 Node: gke-xlou-cdm-default-pool-33cc2627-h8j7/10.142.0.18 Start Time: Sun, 07 Aug 2022 02:28:25 +0000 Labels: app=am app.kubernetes.io/component=am app.kubernetes.io/instance=am app.kubernetes.io/name=am app.kubernetes.io/part-of=forgerock pod-template-hash=5d5df7bfb9 skaffold.dev/profile=medium skaffold.dev/run-id=xlou tier=middle Annotations: cluster-autoscaler.kubernetes.io/safe-to-evict: true Status: Running IP: 10.0.0.65 IPs: IP: 10.0.0.65 Controlled By: ReplicaSet/am-5d5df7bfb9 Init Containers: fbc-init: Container ID: containerd://c8caa2671c869f8957cb525b23836e7b127884716e3a8e21de7a777ad65522dd Image: gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4 Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4 Port: Host Port: Command: /bin/bash -c if [ -d /fbc/config ]; then echo "Existing openam configuration found. Skipping copy" else echo "Copying docker image configuration files to the shared volume" cd /home/forgerock/openam cp -r .homeVersion * /fbc fi State: Terminated Reason: Completed Exit Code: 0 Started: Sun, 07 Aug 2022 02:28:26 +0000 Finished: Sun, 07 Aug 2022 02:28:26 +0000 Ready: True Restart Count: 0 Environment: Mounts: /fbc from fbc (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-rkm4t (ro) truststore-init: Container ID: containerd://c7ae8cd91b76056e928ad4b8d67b8fd0f3d3edea9d758729183442e213c11073 Image: gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4 Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4 Port: Host Port: Command: /home/forgerock/import-pem-certs.sh State: Terminated Reason: Completed Exit Code: 0 Started: Sun, 07 Aug 2022 02:28:27 +0000 Finished: Sun, 07 Aug 2022 02:28:27 +0000 Ready: True Restart Count: 0 Environment: TRUSTSTORE_PATH: /truststore/amtruststore TRUSTSTORE_PASSWORD: changeit AM_PEM_TRUSTSTORE: /var/run/secrets/truststore/cacerts Mounts: /truststore from new-truststore (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-rkm4t (ro) /var/run/secrets/truststore from truststore (rw) Containers: openam: Container ID: containerd://2be89187dd74582f8371d24e1f59cfb8ad63d7fd10cf94463bb7e79cf1a6fdb1 Image: gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4 Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4 Port: 8080/TCP Host Port: 0/TCP Command: bash /home/forgerock/docker-entrypoint.sh State: Running Started: Sun, 07 Aug 2022 07:25:08 +0000 Last State: Terminated Reason: OOMKilled Exit Code: 137 Started: Sun, 07 Aug 2022 06:59:19 +0000 Finished: Sun, 07 Aug 2022 07:25:08 +0000 Ready: True Restart Count: 2 Limits: memory: 10Gi Requests: cpu: 11 memory: 10Gi Liveness: http-get http://:8080/am/json/health/live delay=30s timeout=5s period=30s #success=1 #failure=3 Readiness: http-get http://:8080/am/json/health/ready delay=20s timeout=5s period=10s #success=1 #failure=3 Startup: http-get http://:8080/am/json/health/live delay=0s timeout=1s period=10s #success=1 #failure=40 Environment Variables from: am-env-secrets Secret Optional: false platform-config ConfigMap Optional: false amster-env-secrets Secret Optional: false ds-env-secrets Secret Optional: false Environment: NAMESPACE: xlou (v1:metadata.namespace) AM_STORES_SSL_ENABLED: true TRUSTSTORE_PATH: /home/forgerock/amtruststore TRUSTSTORE_PASSWORD: changeit AM_STORES_USER_TYPE: LDAPv3ForForgeRockIAM Mounts: /home/forgerock/amtruststore from new-truststore (ro,path="amtruststore") /home/forgerock/openam from fbc (rw) /var/run/secrets/am from am-secrets (rw) /var/run/secrets/amster from amster-key (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-rkm4t (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: fbc: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: am-secrets: Type: Projected (a volume that contains injected data from multiple sources) SecretName: am-passwords SecretOptionalName: SecretName: am-keystore SecretOptionalName: amster-key: Type: Secret (a volume populated by a Secret) SecretName: amster Optional: false truststore: Type: Secret (a volume populated by a Secret) SecretName: truststore-pem Optional: false new-truststore: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: kube-api-access-rkm4t: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: Burstable Node-Selectors: Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Pulled 55m kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4" in 233.568517ms Normal Pulling 29m (x3 over 5h26m) kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4" Normal Created 29m (x3 over 5h26m) kubelet Created container openam Normal Started 29m (x3 over 5h26m) kubelet Started container openam Normal Pulled 29m kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou@sha256:e2be3b24f724e416b86384b94cb9d1636008c6b3248a5b6f65e5a88ac6c555b4" in 356.0582ms Warning Unhealthy 28m (x8 over 5h24m) kubelet Startup probe failed: Get "http://10.0.0.65:8080/am/json/health/live": context deadline exceeded (Client.Timeout exceeded while awaiting headers) ==================================================================================================== =========================================== Pod logs =========================================== ==================================================================================================== Copying docker image configuration files to the shared volume Copying /usr/local/openjdk-11/lib/security/cacerts to /truststore/amtruststore Found (1) certificates in /var/run/secrets/truststore/cacerts Importing (1) certificates into /truststore/amtruststore Certificate was added to keystore Import complete! 10.0.0.1 - - [07/Aug/2022:07:51:45 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:51:55 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:51:55 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:52:05 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 0ms 10.0.6.22 - - [07/Aug/2022:07:52:08 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 350712 37ms 10.0.0.1 - - [07/Aug/2022:07:52:15 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:52:25 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:52:25 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:52:35 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.6.22 - - [07/Aug/2022:07:52:38 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 350703 31ms 10.0.0.1 - - [07/Aug/2022:07:52:45 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:52:55 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 2ms 10.0.0.1 - - [07/Aug/2022:07:52:55 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 2ms 10.0.0.1 - - [07/Aug/2022:07:53:05 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.6.22 - - [07/Aug/2022:07:53:09 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 350704 57ms 10.0.0.1 - - [07/Aug/2022:07:53:15 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:53:25 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 0ms 10.0.0.1 - - [07/Aug/2022:07:53:25 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:53:35 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.6.22 - - [07/Aug/2022:07:53:38 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 350721 30ms 10.0.0.1 - - [07/Aug/2022:07:53:45 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 0ms 10.0.0.1 - - [07/Aug/2022:07:53:55 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.0.1 - - [07/Aug/2022:07:53:55 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 2ms 10.0.0.1 - - [07/Aug/2022:07:54:05 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms 10.0.6.22 - - [07/Aug/2022:07:54:08 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 350690 30ms 10.0.0.1 - - [07/Aug/2022:07:54:15 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 1ms