==================================================================================================== ========================================= Pod describe ========================================= ==================================================================================================== Name: am-7849cf7bdb-9sgs4 Namespace: xlou Priority: 0 Node: gke-xlou-cdm-default-pool-4f098948-tbmx/10.142.0.69 Start Time: Tue, 02 May 2023 02:43:51 +0000 Labels: app=am app.kubernetes.io/component=am app.kubernetes.io/instance=am app.kubernetes.io/name=am app.kubernetes.io/part-of=forgerock pod-template-hash=7849cf7bdb tier=middle Annotations: cluster-autoscaler.kubernetes.io/safe-to-evict: true Status: Running IP: 10.106.43.80 IPs: IP: 10.106.43.80 Controlled By: ReplicaSet/am-7849cf7bdb Init Containers: fbc-init: Container ID: containerd://2d2b0e0bf65849c4648fa25921790e312877ba88e359bb4aa399943dace1c4a8 Image: gcr.io/engineeringpit/lodestar-images/am:xlou Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:765dc783b1f6b9e19a100ced8eb318df743e813880286c1566229aa19a09a527 Port: Host Port: Command: /bin/bash -c if [ -d /fbc/config ]; then echo "Existing openam configuration found. Skipping copy" else echo "Copying docker image configuration files to the shared volume" cd /home/forgerock/openam cp -r .homeVersion * /fbc fi State: Terminated Reason: Completed Exit Code: 0 Started: Tue, 02 May 2023 02:43:52 +0000 Finished: Tue, 02 May 2023 02:43:52 +0000 Ready: True Restart Count: 0 Environment: Mounts: /fbc from fbc (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-nvw2r (ro) truststore-init: Container ID: containerd://429e42e24f77d280e568e3927bd266ea625e83eed11d066e02881a9345f4124d Image: gcr.io/engineeringpit/lodestar-images/am:xlou Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:765dc783b1f6b9e19a100ced8eb318df743e813880286c1566229aa19a09a527 Port: Host Port: Command: /home/forgerock/import-pem-certs.sh State: Terminated Reason: Completed Exit Code: 0 Started: Tue, 02 May 2023 02:43:53 +0000 Finished: Tue, 02 May 2023 02:43:53 +0000 Ready: True Restart Count: 0 Environment: TRUSTSTORE_PATH: /truststore/amtruststore TRUSTSTORE_PASSWORD: changeit AM_PEM_TRUSTSTORE: /var/run/secrets/truststore/cacerts Mounts: /truststore from new-truststore (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-nvw2r (ro) /var/run/secrets/truststore from truststore (rw) Containers: openam: Container ID: containerd://5a6c9af155bda9a054185bd9c7f304ad62de67eaa175bb770ae4ef1a2ef914c3 Image: gcr.io/engineeringpit/lodestar-images/am:xlou Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:765dc783b1f6b9e19a100ced8eb318df743e813880286c1566229aa19a09a527 Port: 8080/TCP Host Port: 0/TCP Command: bash /home/forgerock/docker-entrypoint.sh State: Running Started: Tue, 02 May 2023 02:43:54 +0000 Ready: True Restart Count: 0 Limits: memory: 10Gi Requests: cpu: 11 memory: 10Gi Liveness: http-get http://:8080/am/json/health/live delay=30s timeout=5s period=30s #success=1 #failure=3 Readiness: http-get http://:8080/am/json/health/ready delay=20s timeout=5s period=10s #success=1 #failure=3 Startup: http-get http://:8080/am/json/health/live delay=0s timeout=1s period=10s #success=1 #failure=40 Environment Variables from: am-env-secrets Secret Optional: false platform-config ConfigMap Optional: false amster-env-secrets Secret Optional: false ds-env-secrets Secret Optional: false Environment: NAMESPACE: xlou (v1:metadata.namespace) AM_STORES_SSL_ENABLED: true TRUSTSTORE_PATH: /home/forgerock/amtruststore TRUSTSTORE_PASSWORD: changeit AM_STORES_USER_TYPE: LDAPv3ForForgeRockIAM Mounts: /home/forgerock/amtruststore from new-truststore (ro,path="amtruststore") /home/forgerock/openam from fbc (rw) /var/run/secrets/am from am-secrets (rw) /var/run/secrets/amster from amster-key (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-nvw2r (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: fbc: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: am-secrets: Type: Projected (a volume that contains injected data from multiple sources) SecretName: am-passwords SecretOptionalName: SecretName: am-keystore SecretOptionalName: amster-key: Type: Secret (a volume populated by a Secret) SecretName: amster Optional: false truststore: Type: Secret (a volume populated by a Secret) SecretName: truststore-pem Optional: false new-truststore: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: kube-api-access-nvw2r: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: Burstable Node-Selectors: Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: ==================================================================================================== =========================================== Pod logs =========================================== ==================================================================================================== Copying /opt/java/openjdk/lib/security/cacerts to /truststore/amtruststore Found (1) certificates in /var/run/secrets/truststore/cacerts Importing (1) certificates into /truststore/amtruststore Certificate was added to keystore Import complete! {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-14399369","9c07e618-b256-47d8-8b64-50f735b2c4da-2251070"],"userId":"id=f15d2e41-7f7b-4d98-ac9d-33b5562e7687,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14399369","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189652"} {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-2251070","9c07e618-b256-47d8-8b64-50f735b2c4da-14399198"],"userId":"id=a3c06d5d-baa4-438a-b23c-820703d31d6a,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14399198","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189662"} {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-14399104","9c07e618-b256-47d8-8b64-50f735b2c4da-2251070"],"userId":"id=c14dd269-460c-4dfb-8a30-850cadc8afc7,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14399104","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189654"} {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-14399006","9c07e618-b256-47d8-8b64-50f735b2c4da-2251070"],"userId":"id=28acf085-d3f2-4982-a722-9e54ce595d7b,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14399006","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189666"} {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-14398268","9c07e618-b256-47d8-8b64-50f735b2c4da-2251070","9c07e618-b256-47d8-8b64-50f735b2c4da-14399176"],"userId":"id=2f130116-40f0-44ae-bddd-dc79bfce0620,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14399176","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189663"} {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-14398984","9c07e618-b256-47d8-8b64-50f735b2c4da-2251070"],"userId":"id=40c0cee5-69d9-46ec-af85-710135e8cb02,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14398984","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189664"} {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-14399424","9c07e618-b256-47d8-8b64-50f735b2c4da-2251070"],"userId":"id=43347e8e-1ea9-4425-91ec-2275354e85cc,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14399424","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189657"} {"timestamp":"2023-05-02T04:40:07.641Z","eventName":"AM-SESSION-IDLE_TIMED_OUT","transactionId":"9c07e618-b256-47d8-8b64-50f735b2c4da-0","trackingIds":["9c07e618-b256-47d8-8b64-50f735b2c4da-14399172","9c07e618-b256-47d8-8b64-50f735b2c4da-2251070"],"userId":"id=8408e8f1-0d0e-4fe0-b536-e400045fc29c,ou=user,ou=am-config","runAs":"","objectId":"9c07e618-b256-47d8-8b64-50f735b2c4da-14399172","operation":"DELETE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"9c07e618-b256-47d8-8b64-50f735b2c4da-26189658"} Copying docker image configuration files to the shared volume