You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are scenarios where in a Kubernetes pod, the Instance Metadata Service (IMDS) does not exist. Because of this OKE Workload Provider will fail if FederationEndpoint is not set. The problem is, currently we don't have a way to pass in FederationEndpoint to the instantiation of OKE Workload Provider.
Environment Details:
Helidon MP : v4.1.x
JDK : 21
Information
The issue is manifested with this log:
2025-01-22 17:26:30.184 [main] WARN c.o.b.a.AbstractFederationClientAuthenticationDetailsProviderBuilder - Attempt 1 - Rest call to get region from metadata service failed
jakarta.ws.rs.ProcessingException: org.apache.http.conn.ConnectTimeoutException: Connect to 169.254.169.254:80 [/169.254.169.254] failed: Connection timed out
at org.glassfish.jersey.apache.connector.ApacheConnector.apply(ApacheConnector.java:533)
at org.glassfish.jersey.apache.connector.ApacheConnector.apply(ApacheConnector.java:540)
at org.glassfish.jersey.client.ClientRuntime.lambda$createRunnableForAsyncProcessing$6(ClientRuntime.java:185)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
...
...
2025-01-22 17:28:43.375 [main] INFO c.o.b.a.AbstractFederationClientAuthenticationDetailsProviderBuilder - Exiting retry 2 with wait time: 2117 millis
2025-01-22 17:29:35.996 [SIGTERM handler] DEBUG java.lang.Runtime - Runtime.exit() called with status: 143
java.lang.Throwable: Runtime.exit(143)
at java.base/java.lang.Shutdown.logRuntimeExit(Shutdown.java:179)
at java.base/java.lang.Shutdown.exit(Shutdown.java:160)
at java.base/java.lang.Terminator$1.handle(Terminator.java:51)
at java.base/jdk.internal.misc.Signal$1.run(Signal.java:218)
at java.base/java.lang.Thread.run(Thread.java:1583)
2025-01-22 17:29:35.997 [helidon-shutdown-thread] INFO io.helidon.Main - Shutdown requested by JVM shutting down
2025-01-22 17:29:35.997 [helidon-shutdown-thread] INFO io.helidon.Main - Shutdown finished
It looks like when federation endpoint is not set and the oke workload provider instantiation mechanism was trying to get the region from the OCI Java SDK APIs and using it to construct the federation endpoint URL. If IMDS does not exist, the above failure will happen.
The text was updated successfully, but these errors were encountered:
Issue Description:
There are scenarios where in a Kubernetes pod, the Instance Metadata Service (IMDS) does not exist. Because of this OKE Workload Provider will fail if FederationEndpoint is not set. The problem is, currently we don't have a way to pass in FederationEndpoint to the instantiation of OKE Workload Provider.
Environment Details:
Helidon MP : v4.1.x
JDK : 21
Information
The issue is manifested with this log:
It looks like when federation endpoint is not set and the oke workload provider instantiation mechanism was trying to get the region from the OCI Java SDK APIs and using it to construct the federation endpoint URL. If IMDS does not exist, the above failure will happen.
The text was updated successfully, but these errors were encountered: