search

oracle / weblogic-deploy-tooling

WebLogic Deploy Tooling
https://oracle.github.io/weblogic-deploy-tooling/
Universal Permissive License v1.0
151 stars 89 forks source link

ISSUE with update domain #1128

Closed belfo closed 2 years ago

belfo commented 2 years ago

Dear,

after last issue with update i moved to version 2.2.0 but i still have one issue:

Issue Log for updateDomain version 2.2.0 running WebLogic version 12.2.1.4.0.210930 offline mode:
SEVERE Messages:
1. WLSDPLY-09015: updateDomain deployment failed: Unable to create(WSIdentityAsserter, xx.xxx.xx.security.providers.identity.assertion.IdentityAsserter, AuthenticationProvider) in offline mode at location /SecurityConfiguration/base_domain/Realm/myrealm : null
@com.oracle.cie.domain.aspect.AbstractConfigAspect.getAspectClass(AbstractConfigAspect.java:126)

The creation of the domain works. but if i do a change (like a new auxilary image) it fail with this error. No change to the SecurityProvider. The model specify it as:

SecurityConfiguration:
  Realm:
    myrealm:
        WSIdentityAsserter:
          xx.xxx.xx.security.providers.identity.assertion.IdentityAsserter:
        DefaultAuthenticator:
          DefaultAuthenticator:
            ControlFlag: OPTIONAL
        DefaultIdentityAsserter:
          DefaultIdentityAsserter:
robertpatrick commented 2 years ago

@belfo, please provide the complete WDT log file and model file associated with this update.

CarolynRountree commented 2 years ago

Custom Security Providers need to have a special schema file to do WLST in offline. Please see https://oracle.github.io/weblogic-deploy-tooling/samples/securityproviders-model/#custom-security-providers

belfo commented 2 years ago

Custom Security Providers need to have a special schema file to do WLST in offline. Please see https://oracle.github.io/weblogic-deploy-tooling/samples/securityproviders-model/#custom-security-providers

That's the case, i add following env:

- name: WLSDEPLOY_PROPERTIES
      value: >-
        -Dfmwconfig.alternateTypesDirectory=$(DOMAIN_HOME)/wlsdeploy/custom/mbean
        -Dfmwconfig.alternateSchemaDirectory=$(DOMAIN_HOME)/wlsdeploy/custom/schema

and it works for createDomain

belfo commented 2 years ago

@belfo, please provide the complete WDT log file and model file associated with this update.

I had to reproduce it, and it only happen if i update the auxiliary image. If i only update restart/introspection version no real issue. The log generated by the introspector is:

`@[2022-05-20T07:50:05.033485701Z][utils.sh:712][FINE] Auxiliary Image: AUXILIARY_IMAGE_PATHS is '/auxiliary'.
@[2022-05-20T07:50:05.042489444Z][utils.sh:714][FINE] Auxiliary Image: AUXILIARY_IMAGE_PATH is '/auxiliary'.
@[2022-05-20T07:50:05.054031659Z][utils_base.sh:147][FINE] id = 'uid=1000(oracle) gid=1000(oracle) groups=1000(oracle)'
@[2022-05-20T07:50:05.070527772Z][utils.sh:742][FINE] Auxiliary Image: Contents of '/auxiliary/auxiliaryImageLogs/operator-aux-container1.out':
@[2022-05-20T07:50:01.%NZ][auxImage.sh:13][FINE] Auxiliary Image: About to execute command 'cp -R $AUXILIARY_IMAGE_PATH/* $AUXILIARY_IMAGE_TARGET_PATH' in container image='registry-host:5000/pdp-generic:v158'.  AUXILIARY_IMAGE_PATH is '/auxiliary' and AUXILIARY_IMAGE_TARGET_PATH is '/tmpAuxiliaryImage'.
@[2022-05-20T07:50:01.%NZ][auxImage.sh:13][FINE] id = 'uid=1000(oracle) gid=1000(oracle) groups=1000(oracle)'
@[2022-05-20T07:50:01.%NZ][auxImage.sh:13][FINE] Directory trace for /auxiliary=/auxiliary (before)
  ls -ld /auxiliary/*:
    drwxr-xr-x    1 oracle   oracle        4096 May 18 08:58 /auxiliary/models
    drwxr-x---    6 oracle   oracle        4096 May 18 08:58 /auxiliary/weblogic-deploy
  ls -ld /auxiliary:
    drwxr-xr-x    1 oracle   oracle        4096 May 18 08:58 /auxiliary
  ls -ld /:
    drwxr-xr-x    1 root     root          4096 May 20 07:50 /
@[2022-05-20T07:50:01.%NZ][auxImage.sh:13][FINE] Auxiliary Image: About to execute AUXILIARY_IMAGE_COMMAND='cp -R $AUXILIARY_IMAGE_PATH/* $AUXILIARY_IMAGE_TARGET_PATH' .
@[2022-05-20T07:50:02.%NZ][auxImage.sh:13][FINE] Auxiliary Image: Command 'cp -R $AUXILIARY_IMAGE_PATH/* $AUXILIARY_IMAGE_TARGET_PATH' executed successfully. Output -> ''.
@[2022-05-20T07:50:05.079122648Z][utils.sh:744][FINE] Auxiliary Image: End of '/auxiliary/auxiliaryImageLogs/operator-aux-container1.out' contents
@[2022-05-20T07:50:05.089676089Z][utils.sh:742][FINE] Auxiliary Image: Contents of '/auxiliary/auxiliaryImageLogs/operator-aux-container2.out':
@[2022-05-20T07:50:03.%NZ][auxImage.sh:13][FINE] Auxiliary Image: About to execute command 'cp -R $AUXILIARY_IMAGE_PATH/* $AUXILIARY_IMAGE_TARGET_PATH' in container image='registry-host:5000/pdp-config:v7'.  AUXILIARY_IMAGE_PATH is '/auxiliary' and AUXILIARY_IMAGE_TARGET_PATH is '/tmpAuxiliaryImage'.
@[2022-05-20T07:50:03.%NZ][auxImage.sh:13][FINE] id = 'uid=1000(oracle) gid=1000(oracle) groups=1000(oracle)'
@[2022-05-20T07:50:03.%NZ][auxImage.sh:13][FINE] Directory trace for /auxiliary=/auxiliary (before)
  ls -ld /auxiliary/*:
    drwxr-xr-x    1 oracle   oracle        4096 May 20 07:42 /auxiliary/models
  ls -ld /auxiliary:
    drwxr-xr-x    1 oracle   oracle        4096 May 20 07:42 /auxiliary
  ls -ld /:
    drwxr-xr-x    1 root     root          4096 May 20 07:50 /
@[2022-05-20T07:50:03.%NZ][auxImage.sh:13][FINE] Auxiliary Image: About to execute AUXILIARY_IMAGE_COMMAND='cp -R $AUXILIARY_IMAGE_PATH/* $AUXILIARY_IMAGE_TARGET_PATH' .
@[2022-05-20T07:50:03.%NZ][auxImage.sh:13][FINE] Auxiliary Image: Command 'cp -R $AUXILIARY_IMAGE_PATH/* $AUXILIARY_IMAGE_TARGET_PATH' executed successfully. Output -> ''.
@[2022-05-20T07:50:05.098386648Z][utils.sh:744][FINE] Auxiliary Image: End of '/auxiliary/auxiliaryImageLogs/operator-aux-container2.out' contents
@[2022-05-20T07:50:05.118356872Z][utils_base.sh:147][FINE] id = 'uid=1000(oracle) gid=1000(oracle) groups=1000(oracle)'
@[2022-05-20T07:50:05.125806276Z][utils_base.sh:155][FINE] Directory trace for LOG_HOME=LOG_HOME (before)
  ls -ld LOG_HOME/*:
    ls: cannot access 'LOG_HOME/*': No such file or directory
  ls -ld LOG_HOME:
    ls: cannot access 'LOG_HOME': No such file or directory
  ls -ld .:
    drwxr-xr-x 1 oracle oracle 4096 Apr  4 09:34 .
@[2022-05-20T07:50:05.509145055Z][introspectDomain.sh:115][FINE] Introspecting domain 'pdp-host', log location: '/tmp/introspector_script.out'
@[2022-05-20T07:50:05.518288696Z][utils_base.sh:147][FINE] id = 'uid=1000(oracle) gid=1000(oracle) groups=1000(oracle)'
@[2022-05-20T07:50:05.527830567Z][utils_base.sh:155][FINE] Directory trace for LOG_HOME=LOG_HOME (after)
  ls -ld LOG_HOME/*:
    ls: cannot access 'LOG_HOME/*': No such file or directory
  ls -ld LOG_HOME:
    ls: cannot access 'LOG_HOME': No such file or directory
  ls -ld .:
    drwxr-xr-x 1 oracle oracle 4096 Apr  4 09:34 .
@[2022-05-20T07:50:05.545226924Z][utils.sh:76][FINE] Env vars before:
    DOMAIN_UID='pdp-host'
    NAMESPACE='admin-ns'
    SERVER_NAME=''
    SERVICE_NAME=''
    ADMIN_NAME='admin-server'
    AS_SERVICE_NAME='pdp-host-admin-server'
    ADMIN_PORT='7100'
    ADMIN_PORT_SECURE=''
    USER_MEM_ARGS='-Djava.security.egd=file:/dev/./urandom  -Xms512m -Xmx1g -XX:MaxMetaspaceSize=1g -XX:MaxRAM=1g'
    JAVA_OPTIONS='-Dweblogic.StdoutDebugEnabled=true  -DUseSunHttpHandler=true  -Dsun.net.inetaddr.ttl=60  -Dsun.net.inetaddr.negative.ttl=5  -Dsun.net.client.defaultConnectTimeout=60000  -Dsun.net.client.defaultReadTimeout=60000  -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2  -Dweblogic.security.SSL.protocolVersion=TLS1  -Djava.util.logging.config.file=/u01/domains/base_domain/wlsdeploy/custom/_application_files/log4j2/logging.properties -Dlog4j.configurationFile=file:///u01/domains/base_domain/wlsdeploy/custom/_application_files/log4j2/log4j2.xml  -Djavax.net.ssl.trustStore=/u01/domains/base_domain/wlsdeploy/custom/certs/transport-truststore.jks -Dconfig.path.prefix=/u01/domains/base_domain/wlsdeploy/custom/_application_files -Doracle.jdbc.timezoneAsRegion=false -Dweblogic.rjvm.allowUnknownHost=true -Dweblogic.security.crypto.verifyPriorDigest=true  -Dweblogic.security.crypto.generatePriorDigest=true -Djava.rmi.server.hostname=pdp-host -Dcom.sun.management.jmxremote  -Dcom.sun.management.jmxremote.local.only=false -Dcom.sun.management.jmxremote.port=7105 -Dcom.sun.management.jmxremote.rmi.port=7105 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false -Djdk.http.auth.tunneling.disabledSchemes='
    FAIL_BOOT_ON_SITUATIONAL_CONFIG_ERROR=''
    STARTUP_MODE=''
    DOMAIN_HOME='/u01/domains/base_domain'
    LOG_HOME=''
    SERVER_OUT_IN_POD_LOG='true'
    DATA_HOME=''
    KEEP_DEFAULT_DATA_HOME=''
    EXPERIMENTAL_LINK_SERVER_DEFAULT_DATA_DIR=''
    JAVA_HOME='/u01/jdk'
    ORACLE_HOME='/u01/oracle'
    WL_HOME=''
    MW_HOME=''
    NODEMGR_HOME='/u01/nodemanager'
    INTROSPECT_HOME='/u01/domains/base_domain'
    PATH='/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/u01/jdk/bin:/u01/oracle/oracle_common/common/bin:/u01/oracle/wlserver/common/bin:/u01/oracle'
    TRACE_TIMING=''
    OPERATOR_ENVVAR_NAMES='JAVA_OPTIONS,NODEMGR_JAVA_OPTIONS,WLSDEPLOY_PROPERTIES,USER_MEM_ARGS,CLASSPATH,NODE_MANAGER_MAX_WAIT,DOMAIN_UID,DOMAIN_HOME,NODEMGR_HOME,LOG_HOME,SERVER_OUT_IN_POD_LOG,ACCESS_LOG_IN_LOG_HOME,NAMESPACE,INTROSPECT_HOME,CREDENTIALS_SECRET_NAME,OPSS_KEY_SECRET_NAME,OPSS_WALLETFILE_SECRET_NAME,RUNTIME_ENCRYPTION_SECRET_NAME,WDT_DOMAIN_TYPE,DOMAIN_SOURCE_TYPE,ISTIO_ENABLED,ADMIN_CHANNEL_PORT_FORWARDING_ENABLED,ISTIO_READINESS_PORT,ISTIO_POD_NAMESPACE'
@[2022-05-20T07:50:05.555643517Z][utils_base.sh:147][FINE] id = 'uid=1000(oracle) gid=1000(oracle) groups=1000(oracle)'
@[2022-05-20T07:50:05.563078503Z][utils_base.sh:155][FINE] Directory trace for DOMAIN_HOME=DOMAIN_HOME (before)
  ls -ld DOMAIN_HOME/*:
    ls: cannot access 'DOMAIN_HOME/*': No such file or directory
  ls -ld DOMAIN_HOME:
    ls: cannot access 'DOMAIN_HOME': No such file or directory
  ls -ld .:
    drwxr-xr-x 1 oracle oracle 4096 Apr  4 09:34 .
@[2022-05-20T07:50:05.580147980Z][utils_base.sh:155][FINE] Directory trace for DATA_HOME=DATA_HOME (before)
  ls -ld DATA_HOME/*:
    ls: cannot access 'DATA_HOME/*': No such file or directory
  ls -ld DATA_HOME:
    ls: cannot access 'DATA_HOME': No such file or directory
  ls -ld .:
    drwxr-xr-x 1 oracle oracle 4096 Apr  4 09:34 .
@[2022-05-20T07:50:05.601385674Z][utils_base.sh:208][FINE] WDT_MODEL_HOME='/auxiliary/models'
@[2022-05-20T07:50:05.609773980Z][utils_base.sh:208][FINE] WDT_INSTALL_HOME='/auxiliary/weblogic-deploy'
@[2022-05-20T07:50:05.617074860Z][introspectDomain.sh:167][FINE] Beginning Model In Image
/usr/bin/gzip
/usr/bin/tar
/usr/bin/unzip
@[2022-05-20T07:50:05.628673030Z][modelInImage.sh:317][FINE] Entering createWLDomain
@[2022-05-20T07:50:05.635724086Z][modelInImage.sh:426][FINE] Entering checkDirNotExistsOrEmpty
@[2022-05-20T07:50:05.644256660Z][modelInImage.sh:440][FINE] Exiting checkDirNotExistsOrEmpty
@[2022-05-20T07:50:05.653794304Z][modelInImage.sh:426][FINE] Entering checkDirNotExistsOrEmpty
@[2022-05-20T07:50:05.668242575Z][modelInImage.sh:440][FINE] Exiting checkDirNotExistsOrEmpty
@[2022-05-20T07:50:05.677841126Z][modelInImage.sh:446][FINE] Entering checkModelDirectoryExtensions
@[2022-05-20T07:50:05.691494687Z][modelInImage.sh:467][FINE] Exiting checkModelDirectoryExtensions
@[2022-05-20T07:50:05.700831912Z][modelInImage.sh:473][FINE] Entering checkWDTVersion
@[2022-05-20T07:50:05.734006240Z][modelInImage.sh:497][FINE] Exiting checkWDTVersion
@[2022-05-20T07:50:05.752475962Z][modelInImage.sh:365][FINE] current version 9999.9999.9999.9999
@[2022-05-20T07:50:05.763717748Z][modelInImage.sh:508][FINE] Entering getSecretsAndEnvMD5
@[2022-05-20T07:50:05.784784351Z][modelInImage.sh:536][FINE] Found secrets and env: md5=e1733592cdd3562cbd6241a34145c191
@[2022-05-20T07:50:05.792751458Z][modelInImage.sh:538][FINE] Exiting getSecretsAndEnvMD5
@[2022-05-20T07:50:05.801586225Z][modelInImage.sh:370][FINE] Checking changes in secrets and jdk path
@[2022-05-20T07:50:05.814964484Z][modelInImage.sh:395][FINE] Building WDT parameters and MD5s
@[2022-05-20T07:50:05.822777592Z][modelInImage.sh:180][FINE] Entering setupInventoryList
@[2022-05-20T07:50:06.118948663Z][modelInImage.sh:276][FINE] Exiting setupInventoryList
@[2022-05-20T07:50:06.126113896Z][modelInImage.sh:122][FINE] Entering checkExistInventory
@[2022-05-20T07:50:06.132855565Z][modelInImage.sh:124][FINE] Checking wdt artifacts in image
@[2022-05-20T07:50:06.141478892Z][modelInImage.sh:130][FINE] WDT artifacts in image changed: create domain again
@[2022-05-20T07:50:06.148513473Z][modelInImage.sh:135][FINE] Checking wdt artifacts in config map
@[2022-05-20T07:50:06.155240611Z][modelInImage.sh:157][FINE] Exiting checkExistInventory
@[2022-05-20T07:50:06.162483605Z][modelInImage.sh:410][FINE] Need to create domain WLS
@[2022-05-20T07:50:06.169428909Z][modelInImage.sh:548][FINE] Entering createModelDomain
@[2022-05-20T07:50:06.176342043Z][modelInImage.sh:695][FINE] Entering createPrimordialDomain
@[2022-05-20T07:50:06.183765851Z][modelInImage.sh:701][FINE] Checking if security info has been changed
@[2022-05-20T07:50:06.190339075Z][modelInImage.sh:836][FINE] Entering generateMergedModel
@[2022-05-20T07:50:06.197354219Z][modelInImage.sh:846][FINE] About to call '/auxiliary/weblogic-deploy/bin/validateModel.sh  -oracle_home /u01/oracle -model_file /auxiliary/models/model.yaml -archive_file /auxiliary/models/wlsdeploy-config.zip,/auxiliary/models/wlsdeploy.zip -variable_file /u01/_k8s_generated_props.properties -domain_type WLS'.
@[2022-05-20T07:50:09.898632799Z][modelInImage.sh:860][FINE] Exiting generateMergedModel
@[2022-05-20T07:50:09.908705088Z][modelInImage.sh:1166][FINE] Entering encrypt_wdtmodel decrypt
@[2022-05-20T07:50:11.511253319Z][modelInImage.sh:1189][FINE] Exiting encrypt_wdtmodel decrypt
@[2022-05-20T07:50:11.533548966Z][modelInImage.sh:628][FINE] Entering diff_model
@[2022-05-20T07:50:15.268109742Z][modelInImage.sh:687][FINE] Exiting diff_model
@[2022-05-20T07:50:15.278047474Z][modelInImage.sh:731][FINE] createPrimordialDomain: model diff return code list (can be empty): 
@[2022-05-20T07:50:15.291199478Z][modelInImage.sh:826][FINE] Exiting createPrimordialDomain
@[2022-05-20T07:50:15.299122565Z][modelInImage.sh:559][FINE] Using existing primordial domain
@[2022-05-20T07:50:15.316224380Z][modelInImage.sh:1200][FINE] Entering encrypt_decrypt_domain_secret decrypt
@[2022-05-20T07:50:16.637957982Z][modelInImage.sh:1238][FINE] Exiting encrypt_decrypt_domain_secret
@[2022-05-20T07:50:16.647085807Z][modelInImage.sh:969][FINE] Entering wdtUpdateModelDomain
@[2022-05-20T07:50:16.655261764Z][modelInImage.sh:984][FINE] About to call '/auxiliary/weblogic-deploy/bin/updateDomain.sh  -oracle_home /u01/oracle -domain_home /u01/domains/base_domain -model_file /auxiliary/models/model.yaml -archive_file /auxiliary/models/wlsdeploy-config.zip,/auxiliary/models/wlsdeploy.zip -variable_file /u01/_k8s_generated_props.properties -domain_type WLS '.
@[2022-05-20T07:50:34.522193656Z][modelInImage.sh:994][SEVERE] WDT Update Domain command Failed:
JDK version is 1.8.0_211-b12
JAVA_HOME = /u01/jdk
WLST_EXT_CLASSPATH = /auxiliary/weblogic-deploy/lib/weblogic-deploy-core.jar
CLASSPATH = /auxiliary/weblogic-deploy/lib/weblogic-deploy-core.jar
WLST_PROPERTIES = -Dcom.oracle.cie.script.throwException=true -Djava.util.logging.config.class=oracle.weblogic.deploy.logging.WLSDeployLoggingConfig -Dfmwconfig.alternateTypesDirectory=/u01/domains/base_domain/wlsdeploy/custom/mbean -Dfmwconfig.alternateSchemaDirectory=/u01/domains/base_domain/wlsdeploy/custom/schema -Djava.security.egd=file:/dev/./urandom
/u01/oracle/oracle_common/common/bin/wlst.sh /auxiliary/weblogic-deploy/lib/python/update.py -oracle_home /u01/oracle -domain_home /u01/domains/base_domain -model_file /auxiliary/models/model.yaml -archive_file /auxiliary/models/wlsdeploy-config.zip,/auxiliary/models/wlsdeploy.zip -variable_file /u01/_k8s_generated_props.properties -domain_type WLS

Initializing WebLogic Scripting Tool (WLST) ...

Jython scans all the jar files it can find at first startup. Depending on the system, this process may take a few minutes to complete, and WLST may not return a prompt right away.

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

####<May 20, 2022 7:50:28 AM> <INFO> <WebLogicDeployToolingVersion> <logVersionInfo> <WLSDPLY-01750> <The WebLogic Deploy Tooling updateDomain version is 2.2.0:.b3de93d:May 02, 2022 20:21 UTC>
####<May 20, 2022 7:50:28 AM> <INFO> <ModelContext> <__copy_from_args> <WLSDPLY-01050> <WebLogic version for aliases is 12.2.1.4.0.210930>
####<May 20, 2022 7:50:28 AM> <INFO> <filter_helper> <_apply_filter> <WLSDPLY-20033> <Applying filter with name "update_mii_filter">
####<May 20, 2022 7:50:28 AM> <INFO> <cla_helper> <persist_model> <WLSDPLY-01650> <Saving the model to file /u01/domains/base_domain/wlsdeploy/domain_model.json>
####<May 20, 2022 7:50:29 AM> <INFO> <update> <__update_offline> <WLSDPLY-09010> <Reading domain from /u01/domains/base_domain...>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyHelper> <create_placeholder_named_elements> <WLSDPLY-19403> <Creating placeholder for ServerTemplate cluster-1-template>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyHelper> <create_placeholder_named_elements> <WLSDPLY-19403> <Creating placeholder for JDBCSystemResource DataSource AUTHZ>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyHelper> <create_placeholder_named_elements> <WLSDPLY-19403> <Creating placeholder for JDBCSystemResource DataSource ID>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyHelper> <create_placeholder_named_elements> <WLSDPLY-19403> <Creating placeholder for JDBCSystemResource DataSource PDP>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyHelper> <create_placeholder_named_elements> <WLSDPLY-19403> <Creating placeholder for JDBCSystemResource DataSource REF>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyUpdater> <_add_named_elements> <WLSDPLY-09605> <Adding Cluster cluster-1>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyUpdater> <_add_model_elements> <WLSDPLY-09602> <Adding DynamicServers to Cluster cluster-1>
####<May 20, 2022 7:50:32 AM> <INFO> <TopologyUpdater> <_add_named_elements> <WLSDPLY-09608> <Updating ServerTemplate cluster-1-template>
####<May 20, 2022 7:50:33 AM> <INFO> <TopologyUpdater> <_add_model_elements> <WLSDPLY-09602> <Adding Log to ServerTemplate cluster-1-template>
####<May 20, 2022 7:50:33 AM> <INFO> <TopologyUpdater> <_add_model_elements> <WLSDPLY-09604> <Updating SSL for ServerTemplate cluster-1-template>
####<May 20, 2022 7:50:33 AM> <INFO> <TopologyUpdater> <_add_named_elements> <WLSDPLY-09608> <Updating Server admin-server>
####<May 20, 2022 7:50:33 AM> <INFO> <TopologyUpdater> <_add_model_elements> <WLSDPLY-09604> <Updating Log for Server admin-server>
####<May 20, 2022 7:50:34 AM> <INFO> <TopologyHelper> <clear_jdbc_placeholder_targeting> <WLSDPLY-19404> <Clearing targets for JDBCSystemResource placeholder DataSource AUTHZ>
####<May 20, 2022 7:50:34 AM> <INFO> <TopologyHelper> <clear_jdbc_placeholder_targeting> <WLSDPLY-19404> <Clearing targets for JDBCSystemResource placeholder DataSource ID>
####<May 20, 2022 7:50:34 AM> <INFO> <TopologyHelper> <clear_jdbc_placeholder_targeting> <WLSDPLY-19404> <Clearing targets for JDBCSystemResource placeholder DataSource PDP>
####<May 20, 2022 7:50:34 AM> <INFO> <TopologyHelper> <clear_jdbc_placeholder_targeting> <WLSDPLY-19404> <Clearing targets for JDBCSystemResource placeholder DataSource REF>
####<May 20, 2022 7:50:34 AM> <INFO> <Creator> <_create_mbean> <WLSDPLY-20013> <Updating SecurityConfiguration>
####<May 20, 2022 7:50:34 AM> <INFO> <SecurityProviderCreator> <_delete_existing_providers> <WLSDPLY-12135> <Removing Security provider DefaultAuthenticator with Provider type AuthenticationProvider at location /SecurityConfiguration/base_domain/Realm/myrealm>
####<May 20, 2022 7:50:34 AM> <INFO> <SecurityProviderCreator> <_delete_existing_providers> <WLSDPLY-12135> <Removing Security provider DefaultIdentityAsserter with Provider type AuthenticationProvider at location /SecurityConfiguration/base_domain/Realm/myrealm>
####<May 20, 2022 7:50:34 AM> <INFO> <CustomFolderHelper> <update_security_folder> <WLSDPLY-12124> <Updating AuthenticationProvider "IdentityAsserterV2" (xx.xxx.xxx.xxx.client.j2ee.weblogic.IdentityAsserterV2) at location topology:/SecurityConfiguration/Realm/myrealm>
####<May 20, 2022 7:50:34 AM> <INFO> <CustomFolderHelper> <update_security_folder> <WLSDPLY-12124> <Updating AuthenticationProvider "WSIdentityAsserter" (xx.xxx.xx.security.providers.identity.assertion.IdentityAsserter) at location topology:/SecurityConfiguration/Realm/myrealm>
####<May 20, 2022 7:50:34 AM> <SEVERE> <update> <main> <WLSDPLY-09015> <updateDomain deployment failed: Unable to create(IdentityAsserter, xx.xxx.xx.security.providers.identity.assertion.IdentityAsserter, AuthenticationProvider) in offline mode at location /SecurityConfiguration/base_domain/Realm/myrealm : null
 @com.oracle.cie.domain.aspect.AbstractConfigAspect.getAspectClass(AbstractConfigAspect.java:126)>

Issue Log for updateDomain version 2.2.0 running WebLogic version 12.2.1.4.0.210930 offline mode:

SEVERE Messages:

        1. WLSDPLY-09015: updateDomain deployment failed: Unable to create(IdentityAsserter, xx.xxx.xx.security.providers.identity.assertion.IdentityAsserter, AuthenticationProvider) in offline mode at location /SecurityConfiguration/base_domain/Realm/myrealm : null
 @com.oracle.cie.domain.aspect.AbstractConfigAspect.getAspectClass(AbstractConfigAspect.java:126)

Total:       WARNING :     0    SEVERE :     1

updateDomain.sh failed (exit code = 2)
robertpatrick commented 2 years ago

@belfo My concern is that at this point, we have no idea if this is really a WDT issue or an operator introspector issue. Is it possible to reproduce the issue with WDT outside of your Kubernetes environment? If not, we will try to get to this when we can but it may be awhile before we can get the right person to look at this in the operator context...

belfo commented 2 years ago

@robertpatrick i can't test without the operator, my setup is full based on K8S. I will test with the latest operator version, as i still use the one from December.

belfo commented 2 years ago

Latest operator don't change the result. Still the same issue.

Could be that the update don't load the WLSDEPLOY_PROPERTIES ? As i got this result on create only if this is not set

robertpatrick commented 2 years ago

@belfo In WDT, the updateDomain.sh and createDomain.sh scripts are virtually identical so I feel confident that updateDomain.sh is honoring WLSDEPLOY_PROPERTIES in the same exact way that createDomain.sh is.

It could be that the WebLogic operator is doing something different between the two scenarios and I have asked the operator team to take a look...

ankedia commented 2 years ago

@belfo What's the latest version of the operator that you are using? Is it possible to run this with a debug image of the operator that will print out the value of WLSDEPLOY_PROPERTIES env variable? I can either push the debug operator image to OCIR or provide it as a tar file that you can load with "docker load -i" command.

robertpatrick commented 2 years ago

@belfo We believe that we have identified the issue in operator and have created an internal JIRA (OWLS-99654) to track the work. Are you willing to test the fix once the work is complete so that we make sure that the next operator release resolves your problem?

belfo commented 2 years ago

@belfo We believe that we have identified the issue in operator and have created an internal JIRA (OWLS-99654) to track the work. Are you willing to test the fix once the work is complete so that we make sure that the next operator release resolves your problem?

yes, i could test.

ankedia commented 2 years ago

@belfo I have pushed operator image phx.ocir.io/weblogick8s/weblogic-kubernetes-operator:issue_1128_fix with the fix to OCIR. Please let us know if you can't pull this image, I can provide the image as a tar file.

belfo commented 2 years ago

Hello @ankedia i tested the image.

I run few test. and the issue is not reproductible. so it works Thanks

ankedia commented 2 years ago

Thanks @belfo for the verification. The fix will be available in the next operator 3.4.x release.