====================================================================================================
=========================================   Pod describe   =========================================
====================================================================================================
Name:         am-7849cf7bdb-jcbb8
Namespace:    xlou
Priority:     0
Node:         gke-xlou-cdm-default-pool-cab466d1-0gz0/10.142.0.17
Start Time:   Thu, 18 May 2023 22:28:31 +0000
Labels:       app=am
              app.kubernetes.io/component=am
              app.kubernetes.io/instance=am
              app.kubernetes.io/name=am
              app.kubernetes.io/part-of=forgerock
              pod-template-hash=7849cf7bdb
              tier=middle
Annotations:  cluster-autoscaler.kubernetes.io/safe-to-evict: true
Status:       Running
IP:           10.106.40.39
IPs:
  IP:           10.106.40.39
Controlled By:  ReplicaSet/am-7849cf7bdb
Init Containers:
  fbc-init:
    Container ID:  containerd://48520bb60a51fa4116d7a2ade8ad2891f8a03606f0e8ba800fa7a3ba2617847c
    Image:         gcr.io/engineeringpit/lodestar-images/am:xlou
    Image ID:      gcr.io/engineeringpit/lodestar-images/am@sha256:d6f0735f48fed35cb18fae0298c8d9a9283657bde26c5e0d0bdaba38c2303c83
    Port:          <none>
    Host Port:     <none>
    Command:
      /bin/bash
      -c
      if [ -d /fbc/config ];
      then
        echo "Existing openam configuration found. Skipping copy"
      else
        echo "Copying docker image configuration files to the shared volume"
        cd /home/forgerock/openam
        cp -r .homeVersion * /fbc
      fi
      
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Thu, 18 May 2023 22:28:32 +0000
      Finished:     Thu, 18 May 2023 22:28:32 +0000
    Ready:          True
    Restart Count:  0
    Environment:    <none>
    Mounts:
      /fbc from fbc (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-72ln6 (ro)
  truststore-init:
    Container ID:  containerd://3f915e62995610308d309d2a4b43179baad5fca2782d472222410b1e23d4ddc7
    Image:         gcr.io/engineeringpit/lodestar-images/am:xlou
    Image ID:      gcr.io/engineeringpit/lodestar-images/am@sha256:d6f0735f48fed35cb18fae0298c8d9a9283657bde26c5e0d0bdaba38c2303c83
    Port:          <none>
    Host Port:     <none>
    Command:
      /home/forgerock/import-pem-certs.sh
    State:          Terminated
      Reason:       Completed
      Exit Code:    0
      Started:      Thu, 18 May 2023 22:28:33 +0000
      Finished:     Thu, 18 May 2023 22:28:34 +0000
    Ready:          True
    Restart Count:  0
    Environment:
      TRUSTSTORE_PATH:      /truststore/amtruststore
      TRUSTSTORE_PASSWORD:  changeit
      AM_PEM_TRUSTSTORE:    /var/run/secrets/truststore/cacerts
    Mounts:
      /truststore from new-truststore (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-72ln6 (ro)
      /var/run/secrets/truststore from truststore (rw)
Containers:
  openam:
    Container ID:  containerd://63e0ee2d07e42b64565fa90661bace4320eb6c3513a916c2db17ff2e03c8d07e
    Image:         gcr.io/engineeringpit/lodestar-images/am:xlou
    Image ID:      gcr.io/engineeringpit/lodestar-images/am@sha256:d6f0735f48fed35cb18fae0298c8d9a9283657bde26c5e0d0bdaba38c2303c83
    Port:          8080/TCP
    Host Port:     0/TCP
    Command:
      bash
      /home/forgerock/docker-entrypoint.sh
    State:          Running
      Started:      Thu, 18 May 2023 22:28:34 +0000
    Ready:          True
    Restart Count:  0
    Limits:
      memory:  10Gi
    Requests:
      cpu:      11
      memory:   10Gi
    Liveness:   http-get http://:8080/am/json/health/live delay=30s timeout=5s period=30s #success=1 #failure=3
    Readiness:  http-get http://:8080/am/json/health/ready delay=20s timeout=5s period=10s #success=1 #failure=3
    Startup:    http-get http://:8080/am/json/health/live delay=0s timeout=1s period=10s #success=1 #failure=40
    Environment Variables from:
      am-env-secrets      Secret     Optional: false
      platform-config     ConfigMap  Optional: false
      amster-env-secrets  Secret     Optional: false
      ds-env-secrets      Secret     Optional: false
    Environment:
      NAMESPACE:              xlou (v1:metadata.namespace)
      AM_STORES_SSL_ENABLED:  true
      TRUSTSTORE_PATH:        /home/forgerock/amtruststore
      TRUSTSTORE_PASSWORD:    changeit
      AM_STORES_USER_TYPE:    LDAPv3ForForgeRockIAM
    Mounts:
      /home/forgerock/amtruststore from new-truststore (ro,path="amtruststore")
      /home/forgerock/openam from fbc (rw)
      /var/run/secrets/am from am-secrets (rw)
      /var/run/secrets/amster from amster-key (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-72ln6 (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  fbc:
    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
    Medium:     
    SizeLimit:  <unset>
  am-secrets:
    Type:                Projected (a volume that contains injected data from multiple sources)
    SecretName:          am-passwords
    SecretOptionalName:  <nil>
    SecretName:          am-keystore
    SecretOptionalName:  <nil>
  amster-key:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  amster
    Optional:    false
  truststore:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  truststore-pem
    Optional:    false
  new-truststore:
    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
    Medium:     
    SizeLimit:  <unset>
  kube-api-access-72ln6:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   Burstable
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:                      <none>

====================================================================================================
===========================================   Pod logs   ===========================================
====================================================================================================
Copying docker image configuration files to the shared volume
Copying /opt/java/openjdk/lib/security/cacerts to /truststore/amtruststore
Found (1) certificates in /var/run/secrets/truststore/cacerts
Importing (1) certificates into /truststore/amtruststore
Certificate was added to keystore
Import complete!