==================================================================================================== ========================================= Pod describe ========================================= ==================================================================================================== Name: am-7849cf7bdb-n56wq Namespace: xlou Priority: 0 Node: gke-xlou-cdm-default-pool-cab466d1-0gz0/10.142.0.17 Start Time: Tue, 16 May 2023 12:36:42 +0000 Labels: app=am app.kubernetes.io/component=am app.kubernetes.io/instance=am app.kubernetes.io/name=am app.kubernetes.io/part-of=forgerock pod-template-hash=7849cf7bdb tier=middle Annotations: cluster-autoscaler.kubernetes.io/safe-to-evict: true Status: Running IP: 10.106.40.27 IPs: IP: 10.106.40.27 Controlled By: ReplicaSet/am-7849cf7bdb Init Containers: fbc-init: Container ID: containerd://0d07a3431eababa48cae282d3555f39d7748dd5b69d21b1893e7597472df7511 Image: gcr.io/engineeringpit/lodestar-images/am:xlou Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:f764146f79be00223018f4bec94204ae0e7118be8780d9066beb408fc0eec119 Port: Host Port: Command: /bin/bash -c if [ -d /fbc/config ]; then echo "Existing openam configuration found. Skipping copy" else echo "Copying docker image configuration files to the shared volume" cd /home/forgerock/openam cp -r .homeVersion * /fbc fi State: Terminated Reason: Completed Exit Code: 0 Started: Tue, 16 May 2023 12:36:43 +0000 Finished: Tue, 16 May 2023 12:36:43 +0000 Ready: True Restart Count: 0 Environment: Mounts: /fbc from fbc (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-fjg85 (ro) truststore-init: Container ID: containerd://b9d3bc6b9799079df77547a8b4cbb1f7c5b04d9806bbb632a855740796715834 Image: gcr.io/engineeringpit/lodestar-images/am:xlou Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:f764146f79be00223018f4bec94204ae0e7118be8780d9066beb408fc0eec119 Port: Host Port: Command: /home/forgerock/import-pem-certs.sh State: Terminated Reason: Completed Exit Code: 0 Started: Tue, 16 May 2023 12:36:44 +0000 Finished: Tue, 16 May 2023 12:36:44 +0000 Ready: True Restart Count: 0 Environment: TRUSTSTORE_PATH: /truststore/amtruststore TRUSTSTORE_PASSWORD: changeit AM_PEM_TRUSTSTORE: /var/run/secrets/truststore/cacerts Mounts: /truststore from new-truststore (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-fjg85 (ro) /var/run/secrets/truststore from truststore (rw) Containers: openam: Container ID: containerd://22656e4a398ea7654805f75e12cdf0f166482111a238566a9033ce26757f167a Image: gcr.io/engineeringpit/lodestar-images/am:xlou Image ID: gcr.io/engineeringpit/lodestar-images/am@sha256:f764146f79be00223018f4bec94204ae0e7118be8780d9066beb408fc0eec119 Port: 8080/TCP Host Port: 0/TCP Command: bash /home/forgerock/docker-entrypoint.sh State: Running Started: Tue, 16 May 2023 12:36:45 +0000 Ready: True Restart Count: 0 Limits: memory: 10Gi Requests: cpu: 11 memory: 10Gi Liveness: http-get http://:8080/am/json/health/live delay=30s timeout=5s period=30s #success=1 #failure=3 Readiness: http-get http://:8080/am/json/health/ready delay=20s timeout=5s period=10s #success=1 #failure=3 Startup: http-get http://:8080/am/json/health/live delay=0s timeout=1s period=10s #success=1 #failure=40 Environment Variables from: am-env-secrets Secret Optional: false platform-config ConfigMap Optional: false amster-env-secrets Secret Optional: false ds-env-secrets Secret Optional: false Environment: NAMESPACE: xlou (v1:metadata.namespace) AM_STORES_SSL_ENABLED: true TRUSTSTORE_PATH: /home/forgerock/amtruststore TRUSTSTORE_PASSWORD: changeit AM_STORES_USER_TYPE: LDAPv3ForForgeRockIAM Mounts: /home/forgerock/amtruststore from new-truststore (ro,path="amtruststore") /home/forgerock/openam from fbc (rw) /var/run/secrets/am from am-secrets (rw) /var/run/secrets/amster from amster-key (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-fjg85 (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: fbc: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: am-secrets: Type: Projected (a volume that contains injected data from multiple sources) SecretName: am-passwords SecretOptionalName: SecretName: am-keystore SecretOptionalName: amster-key: Type: Secret (a volume populated by a Secret) SecretName: amster Optional: false truststore: Type: Secret (a volume populated by a Secret) SecretName: truststore-pem Optional: false new-truststore: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: kube-api-access-fjg85: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: Burstable Node-Selectors: Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 2m45s default-scheduler Successfully assigned xlou/am-7849cf7bdb-n56wq to gke-xlou-cdm-default-pool-cab466d1-0gz0 Normal Pulling 2m44s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou" Normal Pulled 2m44s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou" in 201.144465ms Normal Created 2m44s kubelet Created container fbc-init Normal Started 2m44s kubelet Started container fbc-init Normal Pulling 2m44s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou" Normal Pulled 2m43s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou" in 226.99247ms Normal Created 2m43s kubelet Created container truststore-init Normal Started 2m43s kubelet Started container truststore-init Normal Pulling 2m43s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/am:xlou" Normal Pulled 2m42s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/am:xlou" in 202.822442ms Normal Created 2m42s kubelet Created container openam Normal Started 2m42s kubelet Started container openam Warning Unhealthy 2m24s (x2 over 2m34s) kubelet Startup probe failed: Get "http://10.106.40.27:8080/am/json/health/live": context deadline exceeded (Client.Timeout exceeded while awaiting headers) ==================================================================================================== =========================================== Pod logs =========================================== ==================================================================================================== Copying bootstrap files for legacy AMKeyProvider Waiting for User Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint User Store is responding Waiting for CTS to be available Trying ds-cts-0.ds-cts:8080/alive endpoint CTS is responding Waiting for Application Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Application Store is responding Waiting for Policy Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint Policy Store is responding Waiting for UMA Store to be available Trying ds-idrepo-0.ds-idrepo:8080/alive endpoint UMA Store is responding Starting tomcat with opts: -server -Dcom.sun.services.debug.mergeall=on -Dcom.sun.identity.configuration.directory=/home/forgerock/openam -Dcom.iplanet.services.stats.state=off -Dcom.sun.identity.sm.sms_object_filebased_enabled=true -Dorg.forgerock.donotupgrade=true -DtomcatAccessLogDir=/proc/self/fd -DtomcatAccessLogFile=1 -XX:MaxRAMPercentage=75 -XX:InitialRAMPercentage=75 -XX:MaxTenuringThreshold=1 -Djava.security.egd=file:/dev/urandom -Dorg.forgerock.am.oauth2.consent.xui_path=/OAuth2_XUI -Dcom.forgerock.am.fileconfig.basepaths=/home/forgerock/base/config/services,/home/forgerock/cdk/config/services -Djavax.net.ssl.trustStore=/home/forgerock/amtruststore -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.ssl.trustStoreType=jks NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED 16-May-2023 12:36:47.504 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name: Apache Tomcat/9.0.75 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built: May 4 2023 13:04:05 UTC 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 9.0.75.0 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name: Linux 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version: 5.10.162+ 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture: amd64 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home: /opt/java/openjdk 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version: 11.0.19+7 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor: Eclipse Adoptium 16-May-2023 12:36:47.507 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE: /usr/local/tomcat 16-May-2023 12:36:47.508 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME: /usr/local/tomcat 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util=ALL-UNNAMED 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util.concurrent=ALL-UNNAMED 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager 16-May-2023 12:36:47.516 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.services.debug.mergeall=on 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.identity.configuration.directory=/home/forgerock/openam 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.iplanet.services.stats.state=off 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.sun.identity.sm.sms_object_filebased_enabled=true 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.forgerock.donotupgrade=true 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -DtomcatAccessLogDir=/proc/self/fd 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -DtomcatAccessLogFile=1 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:MaxRAMPercentage=75 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:InitialRAMPercentage=75 16-May-2023 12:36:47.517 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:MaxTenuringThreshold=1 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.egd=file:/dev/urandom 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.forgerock.am.oauth2.consent.xui_path=/OAuth2_XUI 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcom.forgerock.am.fileconfig.basepaths=/home/forgerock/base/config/services,/home/forgerock/cdk/config/services 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStore=/home/forgerock/amtruststore 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStorePassword=changeit 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djavax.net.ssl.trustStoreType=jks 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs= 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat 16-May-2023 12:36:47.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp 16-May-2023 12:36:47.521 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.2.36] using APR version [1.7.0]. 16-May-2023 12:36:47.521 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true], UDS [true]. 16-May-2023 12:36:47.521 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true] 16-May-2023 12:36:47.524 INFO [main] org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL successfully initialized [OpenSSL 3.0.2 15 Mar 2022] 16-May-2023 12:36:47.721 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"] 16-May-2023 12:36:47.737 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8081"] 16-May-2023 12:36:47.737 INFO [main] org.apache.catalina.startup.Catalina.load Server initialization in [379] milliseconds 16-May-2023 12:36:47.777 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina] 16-May-2023 12:36:47.778 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/9.0.75] 16-May-2023 12:36:47.782 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deploying web application directory [/usr/local/tomcat/webapps/am] 16-May-2023 12:36:54.425 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time. WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.google.inject.assistedinject.FactoryProvider2 (file:/usr/local/tomcat/webapps/am/WEB-INF/lib/guice-assistedinject-4.2.3.jar) to constructor java.lang.invoke.MethodHandles$Lookup(java.lang.Class,int) WARNING: Please consider reporting this to the maintainers of com.google.inject.assistedinject.FactoryProvider2 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Starting up OpenAM at May 16, 2023, 12:36:56 PM {"timestamp":"2023-05-16T12:36:59.955Z","level":"WARN","thread":"LDAP SDK Default AsyncRx I/O Thread (0)","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'ConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=ds-idrepo-2.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Connection refused","context":"default"} {"timestamp":"2023-05-16T12:37:00.171Z","level":"WARN","thread":"LDAP SDK Default AsyncRx I/O Thread (1)","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'ConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=ds-idrepo-2.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Connect Error: Connection refused","context":"default"} {"timestamp":"2023-05-16T12:37:00.253Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"org.forgerock.openam.plugins.PluginLifecycle","message":"PluginTools#upgradePlugins: Encountered plugin org.forgerock.openam.auth.nodes.CloudOnlyNodesPlugin not configured in SMS","context":"default"} {"timestamp":"2023-05-16T12:37:02.084Z","level":"WARN","thread":"RADIUS-RadiusServerManager","logger":"org.forgerock.openam.radius.server.config.RadiusServerManager","message":"RADIUS service is not enabled.","context":"default"} {"timestamp":"2023-05-16T12:37:02.442Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringConfig","message":"JDMK runtime not found - Legacy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:37:02.447Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:37:02.718Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:37:04.739Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'ConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=10, blocked=0, ldapClient=LdapClient(host=UNUSED.IN.FBC, port=9999, protocol=LDAP (clear-text)))' is no longer operational: Connect Error: Host 'UNUSED.IN.FBC' cannot be resolved","context":"default"} {"timestamp":"2023-05-16T12:37:04.793Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.sm.ldap.LDAPEventManager","message":"LDAPEventManager: received all entries changed event from EventService","context":"default"} {"timestamp":"2023-05-16T12:37:04.841Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLDAPObject: got notifications, all objects changed","context":"default"} {"timestamp":"2023-05-16T12:37:05.481Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.sm.ldap.LDAPEventManager","message":"LDAPEventManager: received all entries changed event from EventService","context":"default"} {"timestamp":"2023-05-16T12:37:05.503Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLDAPObject: got notifications, all objects changed","context":"default"} {"timestamp":"2023-05-16T12:37:06.122Z","level":"WARN","thread":"Thread-4","logger":"org.forgerock.openam.services.push.PushNotificationService","message":"No Push Notification Service Config found for realm /","context":"default","exception":"java.util.NoSuchElementException: No value present\n\tat java.base/java.util.Optional.get(Optional.java:148)\n\tat org.forgerock.openam.services.push.PushNotificationServiceConfigHelperFactory.getConfigHelperFor(PushNotificationServiceConfigHelperFactory.java:58)\n\tat org.forgerock.openam.services.push.PushNotificationService.getConfigHelper(PushNotificationService.java:280)\n\tat org.forgerock.openam.services.push.PushNotificationService.updatePreferences(PushNotificationService.java:242)\n\tat org.forgerock.openam.services.push.PushNotificationService.init(PushNotificationService.java:157)\n\tat org.forgerock.openam.services.push.PushNotificationServiceSetupListener$1.run(PushNotificationServiceSetupListener.java:48)\n\tat java.base/java.lang.Thread.run(Thread.java:829)\n"} {"timestamp":"2023-05-16T12:37:06.123Z","level":"WARN","thread":"Thread-4","logger":"org.forgerock.openam.services.push.PushNotificationService","message":"No Push Notification Delegate configured for realm /","context":"default"} {"timestamp":"2023-05-16T12:37:06.350Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.iplanet.services.naming.WebtopNaming","message":"WebtopNaming.configMonitoring: start generating ssoserverinfo\n Start time = 2023-05-16 12:37:06","context":"default"} {"timestamp":"2023-05-16T12:37:06.353Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring HTML port not enabled in configuration or JDMK not present.","context":"default"} {"timestamp":"2023-05-16T12:37:06.354Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring SNMP port not enabled or JDMK not present.","context":"default"} {"timestamp":"2023-05-16T12:37:06.354Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringAdapters","message":"Agent.startAgent:Monitoring RMI port not enabled.","context":"default"} {"timestamp":"2023-05-16T12:37:06.378Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLdapObject:entryExists: LdapSmsEntryUid{dn='ou=default,ou=OrganizationConfig,ou=1.0,ou=sunFMCOTConfigService,ou=services,ou=am-config', dataStoreId=DataStoreId{id='application-store'}} does not exist","context":"default"} {"timestamp":"2023-05-16T12:37:06.385Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.sm.ldap.SMSLdapObject","message":"SMSLdapObject:entryExists: LdapSmsEntryUid{dn='ou=default,ou=OrganizationConfig,ou=1.0,ou=sunFMWSFederationMetadataService,ou=services,ou=am-config', dataStoreId=DataStoreId{id='application-store'}} does not exist","context":"default"} {"timestamp":"2023-05-16T12:37:06.392Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:37:06.398Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: DB password is null","context":"default"} {"timestamp":"2023-05-16T12:37:06.398Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: Logfile prefix string is null","context":"default"} {"timestamp":"2023-05-16T12:37:06.399Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.log.s1is.LogConfigReader","message":"LogConfigReader: Filter class is null","context":"default"} {"timestamp":"2023-05-16T12:37:06.405Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:37:06.426Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:37:06.430Z","level":"WARN","thread":"main","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-0"},"logger":"com.sun.identity.monitoring.FederationMonitoringSetupImpl","message":"JDMK runtime not found - Federation SNMP disabled","context":"default"} 16-May-2023 12:37:09.665 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deployment of web application directory [/usr/local/tomcat/webapps/am] has finished in [21,881] ms 16-May-2023 12:37:09.670 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"] 16-May-2023 12:37:09.680 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8081"] 16-May-2023 12:37:09.683 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [21945] milliseconds {"timestamp":"2023-05-16T12:37:09.878Z","level":"WARN","thread":"http-nio-8081-exec-1","logger":"org.forgerock.openam.core.rest.docs.api.ApiDocsService","message":"API Descriptor has changed - regenerating docs","context":"default"} {"timestamp":"2023-05-16T12:37:14.641Z","level":"WARN","thread":"LDAP SDK Default AsyncRx I/O Thread (0)","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'org.forgerock.openam.ldap.MonitoredLdapClient@2b8df618' is no longer operational: Connect Error: Connection refused","context":"default"} 10.106.40.1 - - [16/May/2023:12:37:10 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 670ms 10.106.40.1 - - [16/May/2023:12:37:10 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 670ms 10.106.43.6 - - [16/May/2023:12:37:10 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199832 744ms 10.106.40.1 - - [16/May/2023:12:37:12 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.40.1 - - [16/May/2023:12:37:12 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 6ms 10.106.40.1 - - [16/May/2023:12:37:22 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 5ms 10.106.40.1 - - [16/May/2023:12:37:32 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.43.6 - - [16/May/2023:12:37:36 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199924 23ms 10.106.40.1 - - [16/May/2023:12:37:42 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.40.1 - - [16/May/2023:12:37:42 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 5ms 10.106.40.1 - - [16/May/2023:12:37:52 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.40.1 - - [16/May/2023:12:38:02 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.43.6 - - [16/May/2023:12:38:06 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199931 20ms 10.106.40.1 - - [16/May/2023:12:38:12 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.40.1 - - [16/May/2023:12:38:12 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 5ms 10.106.40.1 - - [16/May/2023:12:38:22 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.40.1 - - [16/May/2023:12:38:32 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.43.6 - - [16/May/2023:12:38:36 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 199903 20ms 10.106.40.1 - - [16/May/2023:12:38:42 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.40.1 - - [16/May/2023:12:38:42 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.40.1 - - [16/May/2023:12:38:52 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms {"timestamp":"2023-05-16T12:39:05.026Z","level":"WARN","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"org.forgerock.openam.core.realms.impl.DefaultRealmLookup","message":"DefaultRealms:lookup Unable to find Org name for: authenticate","context":"default"} {"timestamp":"2023-05-16T12:39:05.027Z","level":"DEBUG","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"org.forgerock.openam.cors.CorsFilter","message":"handling non-CORS request","context":"default"} {"timestamp":"2023-05-16T12:39:05.027Z","level":"DEBUG","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"org.forgerock.openam.cors.CorsFilter","message":"handling non-CORS request","context":"default"} {"timestamp":"2023-05-16T12:39:05.088Z","level":"WARN","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"com.sun.identity.authentication.config.AMAuthLevelManager","message":"No auth level for module OpenIdConnect","context":"default"} {"timestamp":"2023-05-16T12:39:05.100Z","level":"WARN","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"com.sun.identity.authentication.config.AMAuthLevelManager","message":"No auth level for module AuthenticatorPushRegistration","context":"default"} {"timestamp":"2023-05-16T12:39:05.111Z","level":"WARN","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"com.sun.identity.authentication.config.AMAuthLevelManager","message":"No auth level for module PersistentCookie","context":"default"} {"timestamp":"2023-05-16T12:39:05.234Z","level":"WARN","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:39:05.313Z","level":"WARN","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"com.sun.identity.idm.plugins.internal.AgentsRepo","message":"AgentsRepo.getAgentGroupConfig: Unable to get Agent Group Config due to The instance agentgroup does not exist","context":"default"} {"timestamp":"2023-05-16T12:39:05.371Z","eventName":"AM-LOGIN-MODULE-COMPLETED","transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92","trackingIds":["151c3613-68b9-4c41-b576-fa322c36b397-95"],"userId":"id=amadmin,ou=user,ou=am-config","principal":["amadmin"],"entries":[{"moduleId":"DataStore","info":{"authControlFlag":"REQUIRED","moduleClass":"DataStore","ipAddress":"10.106.41.135","authLevel":"0"}}],"result":"SUCCESSFUL","realm":"/","component":"Authentication","source":"audit","topic":"authentication","level":"INFO","_eventId":"151c3613-68b9-4c41-b576-fa322c36b397-97"} {"timestamp":"2023-05-16T12:39:05.535Z","level":"WARN","thread":"http-nio-8081-exec-9","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92"},"logger":"com.sun.identity.monitoring.MonitoringServicesImpl","message":"JDMK runtime not found - Policy Monitoring disabled","context":"default"} {"timestamp":"2023-05-16T12:39:05.530Z","eventName":"AM-SESSION-CREATED","transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92","trackingIds":["151c3613-68b9-4c41-b576-fa322c36b397-95"],"userId":"id=amadmin,ou=user,ou=am-config","runAs":"id=amadmin,ou=user,ou=am-config","objectId":"151c3613-68b9-4c41-b576-fa322c36b397-95","operation":"CREATE","realm":"/","component":"Session","source":"audit","topic":"activity","level":"INFO","_eventId":"151c3613-68b9-4c41-b576-fa322c36b397-102"} {"timestamp":"2023-05-16T12:39:05.549Z","eventName":"AM-LOGIN-COMPLETED","transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92","trackingIds":["151c3613-68b9-4c41-b576-fa322c36b397-95"],"userId":"id=amadmin,ou=user,ou=am-config","principal":["amadmin"],"entries":[{"moduleId":"DataStore","info":{"ipAddress":"10.106.41.135","authLevel":"0"}}],"result":"SUCCESSFUL","realm":"/","component":"Authentication","source":"audit","topic":"authentication","level":"INFO","_eventId":"151c3613-68b9-4c41-b576-fa322c36b397-106"} {"timestamp":"2023-05-16T12:39:05.569Z","eventName":"AM-ACCESS-OUTCOME","transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-92","trackingIds":["151c3613-68b9-4c41-b576-fa322c36b397-95"],"userId":"id=amadmin,ou=user,ou=am-config","client":{"ip":"10.106.41.135","port":57150},"http":{"request":{"secure":true,"method":"POST","path":"https://xlou.iam.xlou-cdm.engineeringpit.com/am/json/authenticate","headers":{"accept":["*/*"],"accept-api-version":["protocol=1.0,resource=2.0"],"content-type":["application/json"],"host":["xlou.iam.xlou-cdm.engineeringpit.com"],"user-agent":["python-requests/2.28.2"],"x-forwarded-for":["35.212.145.225"],"x-forwarded-host":["xlou.iam.xlou-cdm.engineeringpit.com"],"x-forwarded-port":["443"],"x-forwarded-proto":["https"],"x-real-ip":["35.212.145.225"],"x-request-id":["2bbf463219de30e09a2afdf2cecdf475"],"x-scheme":["https"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":601,"elapsedTimeUnits":"MILLISECONDS"},"realm":"/","component":"Authentication","source":"audit","topic":"access","level":"INFO","_eventId":"151c3613-68b9-4c41-b576-fa322c36b397-112"} {"timestamp":"2023-05-16T12:39:05.804Z","level":"DEBUG","thread":"http-nio-8081-exec-10","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-113"},"logger":"org.forgerock.openam.cors.CorsFilter","message":"handling non-CORS request","context":"default"} {"timestamp":"2023-05-16T12:39:05.804Z","level":"DEBUG","thread":"http-nio-8081-exec-10","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-113"},"logger":"org.forgerock.openam.cors.CorsFilter","message":"handling non-CORS request","context":"default"} {"timestamp":"2023-05-16T12:39:05.846Z","eventName":"AM-ACCESS-OUTCOME","transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-113","trackingIds":["151c3613-68b9-4c41-b576-fa322c36b397-95"],"userId":"id=amadmin,ou=user,ou=am-config","client":{"ip":"10.106.41.135","port":57154},"server":{"ip":"10.106.40.27","port":8081},"http":{"request":{"secure":true,"method":"POST","path":"https://xlou.iam.xlou-cdm.engineeringpit.com/am/json/realms/root/sessions","headers":{"accept":["*/*"],"accept-api-version":["protocol=2.1,resource=3.0"],"content-type":["application/json"],"host":["xlou.iam.xlou-cdm.engineeringpit.com"],"user-agent":["python-requests/2.28.2"],"x-forwarded-for":["35.212.145.225"],"x-forwarded-host":["xlou.iam.xlou-cdm.engineeringpit.com"],"x-forwarded-port":["443"],"x-forwarded-proto":["https"],"x-real-ip":["35.212.145.225"],"x-request-id":["fbf3d824823c793ff4170e0ac5612468"],"x-scheme":["https"]}}},"request":{"protocol":"CREST","operation":"ACTION","detail":{"action":"getSessionInfo"}},"response":{"status":"SUCCESSFUL","statusCode":"","elapsedTime":45,"elapsedTimeUnits":"MILLISECONDS"},"realm":"/","component":"Session","source":"audit","topic":"access","level":"INFO","_eventId":"151c3613-68b9-4c41-b576-fa322c36b397-117"} {"timestamp":"2023-05-16T12:39:06.092Z","level":"WARN","thread":"http-nio-8081-exec-1","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-118"},"logger":"org.forgerock.openam.core.realms.impl.DefaultRealmLookup","message":"DefaultRealms:lookup Unable to find Org name for: serverinfo","context":"default"} {"timestamp":"2023-05-16T12:39:06.092Z","level":"DEBUG","thread":"http-nio-8081-exec-1","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-118"},"logger":"org.forgerock.openam.cors.CorsFilter","message":"handling non-CORS request","context":"default"} {"timestamp":"2023-05-16T12:39:06.092Z","level":"DEBUG","thread":"http-nio-8081-exec-1","mdc":{"transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-118"},"logger":"org.forgerock.openam.cors.CorsFilter","message":"handling non-CORS request","context":"default"} {"timestamp":"2023-05-16T12:39:06.098Z","eventName":"AM-ACCESS-OUTCOME","transactionId":"151c3613-68b9-4c41-b576-fa322c36b397-118","trackingIds":["151c3613-68b9-4c41-b576-fa322c36b397-95"],"userId":"id=amadmin,ou=user,ou=am-config","client":{"ip":"10.106.41.135","port":57158},"server":{"ip":"10.106.40.27","port":8081},"http":{"request":{"secure":true,"method":"GET","path":"https://xlou.iam.xlou-cdm.engineeringpit.com/am/json/serverinfo/version","headers":{"accept":["*/*"],"accept-api-version":["protocol=2.1"],"host":["xlou.iam.xlou-cdm.engineeringpit.com"],"user-agent":["python-requests/2.28.2"],"x-forwarded-for":["35.212.145.225"],"x-forwarded-host":["xlou.iam.xlou-cdm.engineeringpit.com"],"x-forwarded-port":["443"],"x-forwarded-proto":["https"],"x-real-ip":["35.212.145.225"],"x-request-id":["91398662c250a3e9d252b767c7ebbfba"],"x-scheme":["https"]}}},"request":{"protocol":"CREST","operation":"READ"},"response":{"status":"SUCCESSFUL","statusCode":"","elapsedTime":12,"elapsedTimeUnits":"MILLISECONDS","detail":{"revision":"-1829840620"}},"realm":"/","component":"Server Info","source":"audit","topic":"access","level":"INFO","_eventId":"151c3613-68b9-4c41-b576-fa322c36b397-122"} 10.106.40.1 - - [16/May/2023:12:39:02 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms 10.106.41.135 - - [16/May/2023:12:39:05 +0000] "POST /am/json/authenticate?realm=/ HTTP/1.1" 200 167 609ms 10.106.41.135 - - [16/May/2023:12:39:05 +0000] "POST /am/json/realms/root/sessions?_action=getSessionInfo HTTP/1.1" 200 288 55ms 10.106.41.135 - - [16/May/2023:12:39:06 +0000] "GET /am/json/serverinfo/version HTTP/1.1" 200 272 19ms 10.106.43.6 - - [16/May/2023:12:39:06 +0000] "GET /am/json/metrics/prometheus HTTP/1.1" 200 356558 51ms {"timestamp":"2023-05-16T12:39:15.279Z","level":"WARN","thread":"LDAP SDK Default AsyncRx I/O Thread (2)","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'ConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=14, blocked=0, ldapClient=LdapClient(host=ds-idrepo-2.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Invalid Credentials","context":"default"} {"timestamp":"2023-05-16T12:39:15.280Z","level":"WARN","thread":"LDAP SDK Default AsyncRx I/O Thread (0)","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'ConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=14, blocked=0, ldapClient=LdapClient(host=ds-idrepo-1.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Invalid Credentials","context":"default"} {"timestamp":"2023-05-16T12:39:15.289Z","level":"WARN","thread":"LDAP SDK Default AsyncRx I/O Thread (1)","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'ConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=2, blocked=0, ldapClient=LdapClient(host=ds-idrepo-2.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Invalid Credentials","context":"default"} {"timestamp":"2023-05-16T12:39:15.290Z","level":"WARN","thread":"LDAP SDK Default AsyncRx I/O Thread (2)","logger":"org.forgerock.opendj.ldap.LoadBalancer","message":"Connection factory 'ConnectionPool(size=0[in:0 + out:0 + pending:0], maxSize=2, blocked=0, ldapClient=LdapClient(host=ds-idrepo-1.ds-idrepo, port=1636, protocol=LDAPS))' is no longer operational: Invalid Credentials","context":"default"} 10.106.40.1 - - [16/May/2023:12:39:12 +0000] "GET /am/json/health/live HTTP/1.1" 200 - 3ms 10.106.40.1 - - [16/May/2023:12:39:12 +0000] "GET /am/json/health/ready HTTP/1.1" 200 - 4ms Copying docker image configuration files to the shared volume Copying /opt/java/openjdk/lib/security/cacerts to /truststore/amtruststore Found (1) certificates in am_combined_truststore Importing (1) certificates into /truststore/amtruststore Certificate was added to keystore Import complete!