Uploaded image for project: 'RH-SSO'
  1. RH-SSO
  2. RHSSO-2238

[RH-SSO 7.6.X container images] Using ENABLE_ACCESS_LOG=true env var makes the resulting "standalone-openshift.xml" config file not to be well-formed

    XMLWordPrintable

Details

    • False
    • None
    • False
    • User Experience
    • Hide
      $ docker run -it -e SSO_ADMIN_USERNAME=admin -e SSO_ADMIN_PASSWORD=doesntmatter -e SSO_REALM=demorealm -e ENABLE_ACCESS_LOG=true registry.redhat.io/rh-sso-7/sso75-openshift-rhel8:7.5-33
      

      Current Result:

      ...
      14:24:38,636 INFO  [stdout] (JolokiaStart) I> No access restrictor found, access to any MBean is allowed
      14:24:38,644 INFO  [stdout] (JolokiaStart) Jolokia: Agent started with URL https://172.17.0.2:8778/jolokia/
      14:24:38,873 INFO  [org.wildfly.security] (ServerService Thread Pool -- 30) ELY00001: WildFly Elytron version 1.15.13.Final-redhat-00001
      14:24:39,286 ERROR [org.jboss.as.controller] (Controller Boot Thread) 
      
      OPVDX001: Validation error in standalone-openshift.xml -------------------------
      |
      |  628:     <host name="default-host" alias="localhost">
      |  629:         <location name="/" handler="sso-welcome-content"/>
      |  630:         <access-log use-server-log="true" pattern="%h %l %u %t %{i,X-Forwarded-Host} \<!-- ##ACCESS_LOG_VALVE## -->quot;%r\<!-- ##ACCESS_LOG_VALVE## -->quot; %s %b"/>
      |                                                                                             ^^^^ Unexpected character '<' (code 60) in attribute value
      |
      |  631:         <http-invoker security-realm="ApplicationRealm"/>
      |  632:     </host>
      |  633: </server>
      |
      | The primary underlying error message was:
      | > Unexpected character '<' (code 60) in attribute value
      | >  at [row,col {unknown-source}]: [630,99]
      |
      |-------------------------------------------------------------------------------
      
      14:24:39,287 ERROR [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0055: Caught exception during boot: org.jboss.as.controller.persistence.ConfigurationPersistenceException: WFLYCTL0085: Failed to parse configuration
      	at org.jboss.as.controller@15.0.15.Final-redhat-00001//org.jboss.as.controller.persistence.XmlConfigurationPersister.load(XmlConfigurationPersister.java:143)
      	at org.jboss.as.server@15.0.15.Final-redhat-00001//org.jboss.as.server.ServerService.boot(ServerService.java:408)
      	at org.jboss.as.controller@15.0.15.Final-redhat-00001//org.jboss.as.controller.AbstractControllerService$1.run(AbstractControllerService.java:447)
      	at java.base/java.lang.Thread.run(Thread.java:829)
      
      14:24:39,288 FATAL [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.
      14:24:39,296 INFO  [org.jboss.as] (MSC service thread 1-6) WFLYSRV0050: WildFly Core 15.0.15.Final-redhat-00001 stopped in 5ms
      

      Expected Result:
      Image starts normally / without errors (the underlying standalone-openshift.xml being generated based on the provided environment variables is well-formed)

      Show
      $ docker run -it -e SSO_ADMIN_USERNAME=admin -e SSO_ADMIN_PASSWORD=doesntmatter -e SSO_REALM=demorealm -e ENABLE_ACCESS_LOG=true registry.redhat.io/rh-sso-7/sso75-openshift-rhel8:7.5-33 Current Result: ... 14:24:38,636 INFO [stdout] (JolokiaStart) I> No access restrictor found, access to any MBean is allowed 14:24:38,644 INFO [stdout] (JolokiaStart) Jolokia: Agent started with URL https://172.17.0.2:8778/jolokia/ 14:24:38,873 INFO [org.wildfly.security] (ServerService Thread Pool -- 30) ELY00001: WildFly Elytron version 1.15.13.Final-redhat-00001 14:24:39,286 ERROR [org.jboss.as.controller] (Controller Boot Thread) OPVDX001: Validation error in standalone-openshift.xml ------------------------- | | 628: <host name="default-host" alias="localhost"> | 629: <location name="/" handler="sso-welcome-content"/> | 630: <access-log use-server-log="true" pattern="%h %l %u %t %{i,X-Forwarded-Host} \<!-- ##ACCESS_LOG_VALVE## -->quot;%r\<!-- ##ACCESS_LOG_VALVE## -->quot; %s %b"/> | ^^^^ Unexpected character '<' (code 60) in attribute value | | 631: <http-invoker security-realm="ApplicationRealm"/> | 632: </host> | 633: </server> | | The primary underlying error message was: | > Unexpected character '<' (code 60) in attribute value | > at [row,col {unknown-source}]: [630,99] | |------------------------------------------------------------------------------- 14:24:39,287 ERROR [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0055: Caught exception during boot: org.jboss.as.controller.persistence.ConfigurationPersistenceException: WFLYCTL0085: Failed to parse configuration at org.jboss.as.controller@15.0.15.Final-redhat-00001//org.jboss.as.controller.persistence.XmlConfigurationPersister.load(XmlConfigurationPersister.java:143) at org.jboss.as.server@15.0.15.Final-redhat-00001//org.jboss.as.server.ServerService.boot(ServerService.java:408) at org.jboss.as.controller@15.0.15.Final-redhat-00001//org.jboss.as.controller.AbstractControllerService$1.run(AbstractControllerService.java:447) at java.base/java.lang.Thread.run(Thread.java:829) 14:24:39,288 FATAL [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details. 14:24:39,296 INFO [org.jboss.as] (MSC service thread 1-6) WFLYSRV0050: WildFly Core 15.0.15.Final-redhat-00001 stopped in 5ms Expected Result: Image starts normally / without errors (the underlying standalone-openshift.xml being generated based on the provided environment variables is well-formed)
    • CIAM Sprint 23

    Description

      See SSOSUP-351 for original issue description, but problem description in very short being starting the latest RH-SSO 7.5.3 container image (registry.redhat.io/rh-sso-7/sso75-openshift-rhel8:7.5-33) with ENABLE_ACCESS_LOG env var set to "true" causes the generated / resulting "standalone-openshift.xml" file not to be well formed. See Steps To Reproduce section for oneliner reproducer.

      Note: This is a regression, caused by RHSSO-2017 fix.

      Attachments

        Activity

          People

            rhn-jlieskov Ján Lieskovský
            rhn-jlieskov Ján Lieskovský
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: