You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs-source/content/faq/boot-identity-not-valid.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: "Boot Identity Not Valid"
2
+
title: "Boot identity not valid"
3
3
date: 2020-03-02T08:08:19-04:01
4
4
draft: false
5
5
weight: 20
@@ -13,6 +13,6 @@ When you see these kinds of errors, it means that the user name and password pro
13
13
have also indicated that the WebLogic domain directory's security configuration files have changed in an incompatible way between when the operator scanned
14
14
the domain directory, which occurs during the "introspection" phase, and when the server instance attempted to start. There is now a separate validation for that condition described in the [domain secret mismatch FAQ entry](../domain-secret-mismatch/).
15
15
16
-
Check that the user name and password credentials stored in the Kubernetes secret referenced by `weblogicCredentialsSecret` contain the expected values for an account with administrative privilege for the WebLogic domain.
16
+
Check that the user name and password credentials stored in the Kubernetes secret referenced by `weblogicCredentialsSecret` contain the expected values for an account with administrative privilege for the WebLogic domain.
17
17
Then [stop all WebLogic server instances](https://oracle.github.io/weblogic-kubernetes-operator/userguide/managing-domains/domain-lifecycle/startup/#starting-and-stopping-servers)
18
18
in the domain before restarting so that the operator will repeat its introspection and generate the corrected "boot.properites" files.
Copy file name to clipboardExpand all lines: docs-source/content/faq/domain-secret-mismatch.md
+9-10Lines changed: 9 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,13 +1,13 @@
1
1
---
2
-
title: "Domain Secret Mismatch"
2
+
title: "Domain secret mismatch"
3
3
date: 2020-03-02T08:08:19-04:00
4
4
draft: false
5
5
weight: 21
6
6
---
7
7
8
8
> One or more WebLogic Server instances in my domain will not start and the domain resource `status` or the pod log report errors like this:
9
9
>
10
-
> ***Domain secret mismatch. The domain secret in 'DOMAIN_HOME/security/SerializedSystemIni.dat' where DOMAIN_HOME='$DOMAIN_HOME' does not match the domain secret found by the introspector job. WebLogic requires that all WebLogic servers in the same domain share the same domain secret.***
10
+
> ***Domain secret mismatch. The domain secret in 'DOMAIN_HOME/security/SerializedSystemIni.dat' where DOMAIN_HOME='$DOMAIN_HOME' does not match the domain secret found by the introspector job. WebLogic requires that all WebLogic Servers in the same domain share the same domain secret.***
11
11
12
12
When you see these kinds of errors, it means that the WebLogic domain directory's security configuration files have changed in an incompatible way between when the operator scanned
13
13
the domain directory, which occurs during the "introspection" phase, and when the server instance attempted to start.
@@ -27,13 +27,13 @@ generated during introspection will now be invalid.
27
27
28
28
This can happen in a variety of ways, depending on the [model selected](https://oracle.github.io/weblogic-kubernetes-operator/userguide/managing-domains/choosing-a-model/):
29
29
30
-
### Domain in a Docker image
30
+
####Domain in a Docker image
31
31
32
-
####1. Rolling to an image containing new or unrelated domain directory
32
+
#####Rolling to an image containing new or unrelated domain directory
33
33
34
34
The error occurs while rolling pods to have containers based on a new Docker image that contains an entirely new or unrelated domain directory.
35
35
36
-
The problem is that WebLogic cannot support server instances being part of the same WebLogic domain if the server instances do
36
+
The problem is that WebLogic cannot support server instances being part of the same WebLogic domain if the server instances do
37
37
not all share the same domain-specific encryption key. Additionally, operator introspection
38
38
currently happens only when starting servers following a total shutdown. Therefore, the "boot.properites" files generated from
39
39
introspecting the image containing the original domain directory will be invalid when used with a container started with
@@ -43,9 +43,9 @@ The solution is to follow either the recommended [CI/CD guidelines](https://orac
43
43
with consistent domain-specific encryption keys and bootstrapping security details, or to [perform a total shutdown](https://oracle.github.io/weblogic-kubernetes-operator/userguide/managing-domains/domain-lifecycle/startup/#starting-and-stopping-servers) of the domain so
44
44
that introspection reoccurs as servers are restarted.
45
45
46
-
####2. Full domain shutdown and restart
46
+
#####Full domain shutdown and restart
47
47
48
-
The error occurs while starting servers after a full domain shutdown.
48
+
The error occurs while starting servers after a full domain shutdown.
49
49
50
50
If your development model generates new Docker images
51
51
with new and unrelated domain directories and then tags those images with the same tag, then different Kubernetes worker nodes
@@ -54,9 +54,9 @@ may have different images under the same tag in their individual, local Docker r
54
54
The simplest solution is to set `imagePullPolicy` to `Always`; however, the better solution would be to design your development
55
55
pipeline to generate new Docker image tags on every build and to never reuse an existing tag.
56
56
57
-
### Domain on a persistent volume
57
+
####Domain on a persistent volume
58
58
59
-
####1. Completely replacing the domain directory
59
+
#####Completely replacing the domain directory
60
60
61
61
The error occurs while starting servers when the domain directory change was made while other servers were still running.
62
62
@@ -67,4 +67,3 @@ the previous contents of the domain directory. When starting servers again, the
67
67
of the domain directory. However, you may want to preserve the domain directory security configuration including the domain-specific
68
68
encryption key and, in that case, you should follow a similar pattern as is described in the [CI/CD guidelines](https://oracle.github.io/weblogic-kubernetes-operator/userguide/cicd/) for the domain
69
69
in a Docker image model to preserve the original security-related domain directory files.
0 commit comments