==================================================================================================== ========================================= Pod describe ========================================= ==================================================================================================== Name: ds-idrepo-0 Namespace: xlou-rcs Priority: 0 Node: gke-xlou-bsln-ds-d187bb31-0h19/10.142.0.101 Start Time: Sun, 05 Feb 2023 17:15:08 +0000 Labels: affinity=directory app=ds-idrepo app.kubernetes.io/component=directory app.kubernetes.io/instance=ds-idrepo app.kubernetes.io/name=ds app.kubernetes.io/part-of=forgerock controller-revision-hash=ds-idrepo-747777bbb5 statefulset.kubernetes.io/pod-name=ds-idrepo-0 tier=ds Annotations: sidecar.istio.io/inject: false Status: Running IP: 10.56.54.8 IPs: IP: 10.56.54.8 Controlled By: StatefulSet/ds-idrepo Init Containers: initialize: Container ID: containerd://470a9b25fffa4ea2a472754746d55dff54e35619e9c09a763d1a0a013044e8c0 Image: gcr.io/engineeringpit/lodestar-images/ds-idrepo:xlou-rcs Image ID: gcr.io/engineeringpit/lodestar-images/ds-idrepo@sha256:aa47e0ea66fbd3f31f42aafdfe71f2ca9536a58a2a7178d2b1947371dad9ab6d Port: Host Port: Command: /opt/opendj/scripts/init-and-restore.sh State: Terminated Reason: Completed Exit Code: 0 Started: Sun, 05 Feb 2023 17:15:16 +0000 Finished: Sun, 05 Feb 2023 17:15:34 +0000 Ready: True Restart Count: 0 Limits: memory: 1Gi Requests: cpu: 250m memory: 512Mi Environment Variables from: cloud-storage-credentials-idrepo Secret Optional: false Environment: DS_SET_UID_ADMIN_AND_MONITOR_PASSWORDS: true DS_UID_MONITOR_PASSWORD_FILE: /var/run/secrets/opendj-passwords/monitor.pw DS_UID_ADMIN_PASSWORD_FILE: /var/run/secrets/opendj-passwords/dirmanager.pw DSBACKUP_HOSTS: Optional: false DSBACKUP_DIRECTORY: Optional: false AUTORESTORE_FROM_DSBACKUP: Optional: false Mounts: /opt/opendj/data from data (rw) /opt/opendj/pem-keys-directory/master-key from secrets (rw,path="master-key-pair-combined.pem") /opt/opendj/pem-keys-directory/ssl-key-pair from secrets (rw,path="ssl-key-pair-combined.pem") /opt/opendj/pem-trust-directory/cacerts.pem from truststore (rw,path="cacerts") /opt/opendj/secrets from secrets (rw) /var/run/secrets/cloud-credentials-cache/ from cloud-credentials-cache (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-8j5p2 (ro) /var/run/secrets/opendj from secrets (rw) /var/run/secrets/opendj-passwords from passwords (rw) Containers: ds: Container ID: containerd://4c1f05decfd51e4ea7127bff79850afb5b03fa3a4dee76962f1042e69b07dd1d Image: gcr.io/engineeringpit/lodestar-images/ds-idrepo:xlou-rcs Image ID: gcr.io/engineeringpit/lodestar-images/ds-idrepo@sha256:aa47e0ea66fbd3f31f42aafdfe71f2ca9536a58a2a7178d2b1947371dad9ab6d Ports: 1389/TCP, 1636/TCP, 4444/TCP, 8989/TCP, 8080/TCP, 8443/TCP Host Ports: 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP Args: start-ds State: Running Started: Sun, 05 Feb 2023 17:15:34 +0000 Ready: True Restart Count: 0 Limits: cpu: 4 memory: 4Gi Requests: cpu: 4 memory: 4Gi Environment Variables from: cloud-storage-credentials-idrepo Secret Optional: false Environment: NAMESPACE: xlou-rcs (v1:metadata.namespace) DSBACKUP_HOSTS: Optional: false DSBACKUP_DIRECTORY: Optional: false Mounts: /opt/opendj/data from data (rw) /opt/opendj/pem-keys-directory/master-key from secrets (rw,path="master-key-pair-combined.pem") /opt/opendj/pem-keys-directory/ssl-key-pair from secrets (rw,path="ssl-key-pair-combined.pem") /opt/opendj/pem-trust-directory/cacerts.pem from truststore (rw,path="cacerts") /opt/opendj/secrets from secrets (rw) /var/run/secrets/cloud-credentials-cache/ from cloud-credentials-cache (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-8j5p2 (ro) /var/run/secrets/opendj from secrets (rw) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: data: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: data-ds-idrepo-0 ReadOnly: false secrets: Type: Secret (a volume populated by a Secret) SecretName: ds Optional: false passwords: Type: Secret (a volume populated by a Secret) SecretName: ds-passwords Optional: false cloud-credentials-cache: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: SizeLimit: truststore: Type: Secret (a volume populated by a Secret) SecretName: truststore-pem Optional: false kube-api-access-8j5p2: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: Burstable Node-Selectors: Tolerations: WorkerDedicatedDS op=Exists node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 75s default-scheduler Successfully assigned xlou-rcs/ds-idrepo-0 to gke-xlou-bsln-ds-d187bb31-0h19 Normal SuccessfulAttachVolume 70s attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-201a724d-6e53-4024-9972-4f0922678b7c" Normal Pulling 68s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/ds-idrepo:xlou-rcs" Normal Pulled 67s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/ds-idrepo:xlou-rcs" in 951.412777ms Normal Created 67s kubelet Created container initialize Normal Started 67s kubelet Started container initialize Normal Pulling 49s kubelet Pulling image "gcr.io/engineeringpit/lodestar-images/ds-idrepo:xlou-rcs" Normal Pulled 49s kubelet Successfully pulled image "gcr.io/engineeringpit/lodestar-images/ds-idrepo:xlou-rcs" in 207.864986ms Normal Created 49s kubelet Created container ds Normal Started 49s kubelet Started container ds ==================================================================================================== =========================================== Pod logs =========================================== ==================================================================================================== Initializing "data/changelogDb" from Docker image Initializing "data/import-tmp" from Docker image Upgrading configuration and data... * OpenDJ data has already been upgraded to version 7.3.0.35060cde0333c76dfba29a4e88896b885a0deba7 Rebuilding degraded indexes for base DN "ou=tokens"... Rebuilding degraded indexes for base DN "ou=identities"... Rebuilding degraded indexes for base DN "ou=am-config"... Rebuilding degraded indexes for base DN "dc=openidm,dc=forgerock,dc=io"... Server configured with: Group ID : default Server ID : ds-idrepo-0 Advertised listen address : ds-idrepo-0.ds-idrepo.xlou-rcs.svc.cluster.local Bootstrap replication server(s) : ds-idrepo-0.ds-idrepo.xlou-rcs.svc.cluster.local:8989,ds-idrepo-1.ds-idrepo.xlou-rcs.svc.cluster.local:8989 {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.044Z","category":"CORE","severity":"NOTICE","msgId":134,"message":"ForgeRock Directory Services 7.3.0-20230127121641-35060cde0333c76dfba29a4e88896b885a0deba7 (build 20230127141714, revision number 35060cde0333c76dfba29a4e88896b885a0deba7) starting up"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.044Z","category":"JVM","severity":"NOTICE","msgId":21,"message":"Installation Directory: /opt/opendj"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.044Z","category":"JVM","severity":"NOTICE","msgId":23,"message":"Instance Directory: /opt/opendj"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.044Z","category":"JVM","severity":"NOTICE","msgId":17,"message":"JVM Information: 17.0.6+10-LTS by Azul Systems, Inc., 64-bit architecture, 3221225472 bytes heap size"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.044Z","category":"JVM","severity":"NOTICE","msgId":20,"message":"JVM Host: ds-idrepo-0.ds-idrepo.xlou-rcs.svc.cluster.local default/ds-idrepo-0, running Linux 5.10.147+ amd64, unknown physical memory size, number of processors available 4"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.044Z","category":"JVM","severity":"NOTICE","msgId":19,"message":"JVM Arguments: \"-XX:+UseG1GC\", \"-XX:MaxRAMPercentage=75\", \"-XX:MaxTenuringThreshold=1\", \"-Djava.security.egd=file:/dev/urandom\", \"-Dorg.opends.server.scriptName=start-ds\""} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.644Z","category":"BACKEND","severity":"NOTICE","msgId":513,"message":"The database backend amCts containing 5 entries has started"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:49.644Z","category":"BACKEND","severity":"NOTICE","msgId":513,"message":"The database backend idmRepo containing 42 entries has started"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.045Z","category":"BACKEND","severity":"NOTICE","msgId":513,"message":"The database backend cfgStore containing 115 entries has started"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.045Z","category":"BACKEND","severity":"NOTICE","msgId":513,"message":"The database backend amIdentityStore containing 21 entries has started"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.245Z","category":"SYNC","severity":"NOTICE","msgId":204,"message":"Replication server RS(ds-idrepo-0) started listening for new connections on address 0.0.0.0 port 8989"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.445Z","category":"BACKEND","severity":"NOTICE","msgId":515,"message":"Exported 42 entries and skipped 0 in 0 seconds (average rate 2625.0/sec)"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.445Z","category":"SYNC","severity":"INFORMATION","msgId":207,"message":"Replication server RS(ds-idrepo-0) has accepted a connection from directory server DS(ds-idrepo-0) for domain \"dc=openidm,dc=forgerock,dc=io\" at /10.56.54.8:54812"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"SYNC","severity":"NOTICE","msgId":62,"message":"Directory server DS(ds-idrepo-0) has connected to replication server RS(ds-idrepo-0) for domain \"dc=openidm,dc=forgerock,dc=io\" at 10.56.54.8:8989 with generation ID 555879"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"SYNC","severity":"INFORMATION","msgId":207,"message":"Replication server RS(ds-idrepo-0) has accepted a connection from directory server DS(ds-idrepo-0) for domain \"uid=monitor\" at /10.56.54.8:54832"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"SYNC","severity":"NOTICE","msgId":62,"message":"Directory server DS(ds-idrepo-0) has connected to replication server RS(ds-idrepo-0) for domain \"uid=monitor\" at 10.56.54.8:8989 with generation ID 48"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"BACKEND","severity":"NOTICE","msgId":515,"message":"Exported 115 entries and skipped 0 in 0 seconds (average rate 8846.2/sec)"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"SYNC","severity":"INFORMATION","msgId":207,"message":"Replication server RS(ds-idrepo-0) has accepted a connection from directory server DS(ds-idrepo-0) for domain \"ou=am-config\" at /10.56.54.8:54860"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"SYNC","severity":"NOTICE","msgId":62,"message":"Directory server DS(ds-idrepo-0) has connected to replication server RS(ds-idrepo-0) for domain \"ou=am-config\" at 10.56.54.8:8989 with generation ID 2338230"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"BACKEND","severity":"NOTICE","msgId":515,"message":"Exported 21 entries and skipped 0 in 0 seconds (average rate 10500.0/sec)"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"SYNC","severity":"INFORMATION","msgId":207,"message":"Replication server RS(ds-idrepo-0) has accepted a connection from directory server DS(ds-idrepo-0) for domain \"ou=identities\" at /10.56.54.8:54882"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"SYNC","severity":"NOTICE","msgId":62,"message":"Directory server DS(ds-idrepo-0) has connected to replication server RS(ds-idrepo-0) for domain \"ou=identities\" at 10.56.54.8:8989 with generation ID 253127"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.646Z","category":"BACKEND","severity":"NOTICE","msgId":515,"message":"Exported 5 entries and skipped 0 in 0 seconds (average rate 5000.0/sec)"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"SYNC","severity":"INFORMATION","msgId":207,"message":"Replication server RS(ds-idrepo-0) has accepted a connection from directory server DS(ds-idrepo-0) for domain \"ou=tokens\" at /10.56.54.8:54914"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"SYNC","severity":"NOTICE","msgId":62,"message":"Directory server DS(ds-idrepo-0) has connected to replication server RS(ds-idrepo-0) for domain \"ou=tokens\" at 10.56.54.8:8989 with generation ID 69125"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"CORE","severity":"NOTICE","msgId":818,"message":"Registered 0 static groups, 0 dynamic groups and 0 virtual static groups. The static group cache is using 0 bytes of memory"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"PROTOCOL","severity":"NOTICE","msgId":276,"message":"Started listening for new connections on Administration Connector 0.0.0.0:4444"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"PROTOCOL","severity":"NOTICE","msgId":276,"message":"Started listening for new connections on LDAP 0.0.0.0:1389"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"PROTOCOL","severity":"NOTICE","msgId":276,"message":"Started listening for new connections on HTTP 0.0.0.0:8080"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"PROTOCOL","severity":"NOTICE","msgId":276,"message":"Started listening for new connections on HTTPS 0.0.0.0:8443"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"PROTOCOL","severity":"NOTICE","msgId":276,"message":"Started listening for new connections on LDAPS 0.0.0.0:1636"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"CORE","severity":"NOTICE","msgId":135,"message":"The Directory Server has started successfully"} {"eventName":"DJ-SERVER","timestamp":"2023-02-05T17:15:50.846Z","category":"CORE","severity":"NOTICE","msgId":139,"message":"The Directory Server has sent an alert notification generated by class org.opends.server.core.DirectoryServer (alert type org.opends.server.DirectoryServerStarted, alert ID org.opends.messages.core-135): The Directory Server has started successfully"} {"_id":"f7e77142-290c-40b0-916e-92eb7ff023ec-3","timestamp":"2023-02-05T17:15:51.106Z","eventName":"DJ-HTTP","transactionId":"f7e77142-290c-40b0-916e-92eb7ff023ec-2","client":{"ip":"10.56.49.25","port":53724},"server":{"ip":"10.56.54.8","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-idrepo-0.ds-idrepo.xlou-rcs.svc.cluster.local:8080/alive","headers":{"accept":["*/*"],"host":["ds-idrepo-0.ds-idrepo:8080"],"user-agent":["curl/7.74.0"]}}},"response":{"status":"FAILED","statusCode":"404","elapsedTime":28,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"_id":"f7e77142-290c-40b0-916e-92eb7ff023ec-7","timestamp":"2023-02-05T17:15:56.150Z","eventName":"DJ-HTTP","transactionId":"f7e77142-290c-40b0-916e-92eb7ff023ec-6","client":{"ip":"10.56.49.25","port":45750},"server":{"ip":"10.56.54.8","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-idrepo-0.ds-idrepo.xlou-rcs.svc.cluster.local:8080/alive","headers":{"accept":["*/*"],"host":["ds-idrepo-0.ds-idrepo:8080"],"user-agent":["curl/7.74.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":10,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} {"_id":"f7e77142-290c-40b0-916e-92eb7ff023ec-29","timestamp":"2023-02-05T17:16:11.933Z","eventName":"DJ-HTTP","transactionId":"f7e77142-290c-40b0-916e-92eb7ff023ec-28","client":{"ip":"10.56.49.4","port":51670},"server":{"ip":"10.56.54.8","port":8080},"http":{"request":{"secure":false,"method":"GET","path":"http://ds-idrepo-0.ds-idrepo.xlou-rcs.svc.cluster.local:8080/metrics/prometheus","headers":{"accept":["application/openmetrics-text;version=1.0.0,application/openmetrics-text;version=0.0.1;q=0.75,text/plain;version=0.0.4;q=0.5,*/*;q=0.1"],"host":["10.56.54.8:8080"],"user-agent":["Prometheus/2.41.0"]}}},"response":{"status":"SUCCESSFUL","statusCode":"200","elapsedTime":121,"elapsedTimeUnits":"MILLISECONDS"},"source":"audit","topic":"http-access","level":"INFO"} Initializing "data/db" from Docker image Initializing "data/changelogDb" from Docker image Initializing "data/import-tmp" from Docker image Initializing "data/locks" from Docker image Initializing "data/var" from Docker image Upgrading configuration and data... * OpenDJ data has already been upgraded to version 7.3.0.35060cde0333c76dfba29a4e88896b885a0deba7 Rebuilding degraded indexes for base DN "ou=tokens"... Rebuilding degraded indexes for base DN "ou=identities"... category=BACKEND severity=WARNING seq=39 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-meta is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=40 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-groups is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=41 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-authzroles-managed-role is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=42 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-roles is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=43 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-organization-admin is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=44 msg=Due to changes in the configuration, index ou=identities_fr-idm-effectiveGroup is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=45 msg=Due to changes in the configuration, index ou=identities_fr-idm-effectiveApplications is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=46 msg=Due to changes in the configuration, index ou=identities_fr-idm-lastSync is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=47 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-inactive-date is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=48 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-active-date is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=49 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-application-member is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=50 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-organization-member is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=51 msg=Due to changes in the configuration, index ou=identities_fr-idm-uuid is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=52 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-manager is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=53 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-notifications is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=54 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-organization-owner is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=55 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-assignment-member is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=56 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-application-owner is currently operating in a degraded state and must be rebuilt before it can be used category=BACKEND severity=WARNING seq=57 msg=Due to changes in the configuration, index ou=identities_fr-idm-managed-user-authzroles-internal-role is currently operating in a degraded state and must be rebuilt before it can be used Rebuilding degraded indexes for base DN "ou=am-config"... Rebuilding degraded indexes for base DN "dc=openidm,dc=forgerock,dc=io"... Updating the "uid=admin" password Updating the "uid=monitor" password Initialization completed AUTORESTORE_FROM_DSBACKUP is missing or not set to true. Skipping restore