Showing posts with label DevOps. Show all posts
Showing posts with label DevOps. Show all posts

Sunday, April 12, 2026

Install Jenkins via Docker and setup access via ssh

 


Install Jenkins via Docker 


dave@fedora:/git/devops-docker$ sudo docker run --name jenkins-test -p 8080:8080 -p 50000:50000 -d jenkins/jenkins:lts
[sudo] password for dave: 
Unable to find image 'jenkins/jenkins:lts' locally
lts: Pulling from jenkins/jenkins
53c88f1dfeb7: Pull complete 
4d2125ccf71c: Pull complete 
69503609dc01: Pull complete 
6da7907f70f4: Pull complete 
6327a7366a6f: Pull complete 
01938f7c040b: Pull complete 
b7b154fd69a1: Pull complete 
876217fdee20: Pull complete 
fbae626c1b7a: Pull complete 
b19825c62ed8: Pull complete 
ec7478903548: Pull complete 
e682a95ad036: Pull complete 
Digest: sha256:c4098086090ca98491d4bf66182f5e3b015a8232f2acf2df209a212a5801aa8e
Status: Downloaded newer image for jenkins/jenkins:lts
16c87f857d22f7a0be645a6a1cd88633bfef9b381a03c9061ad723acc4acc33c


Get admin password 

dave@fedora:/git/devops-docker$ sudo docker logs jenkins-test
Running from: /usr/share/jenkins/jenkins.war
webroot: /var/jenkins_home/war
2026-04-12 13:46:37.724+0000 [id=1]    INFO    winstone.Logger#logInternal: Beginning extraction from war file
2026-04-12 13:46:38.325+0000 [id=1]    WARNING    o.e.j.ee9.nested.ContextHandler#setContextPath: Empty contextPath
2026-04-12 13:46:38.359+0000 [id=1]    INFO    org.eclipse.jetty.server.Server#doStart: jetty-12.1.5; built: 2025-12-03T22:18:24.732Z; git: 4905d09d7b6801e792d7b73946cf7b66e4be25d6; jvm 21.0.9+10-LTS
2026-04-12 13:46:38.654+0000 [id=1]    INFO    o.e.j.e.w.StandardDescriptorProcessor#visitServlet: NO JSP Support for /, did not find org.eclipse.jetty.ee9.jsp.JettyJspServlet
2026-04-12 13:46:38.699+0000 [id=1]    INFO    o.e.j.s.DefaultSessionIdManager#doStart: Session workerName=node0
2026-04-12 13:46:38.909+0000 [id=1]    INFO    hudson.WebAppMain#contextInitialized: Jenkins home directory: /var/jenkins_home found at: EnvVars.masterEnvVars.get("JENKINS_HOME")
2026-04-12 13:46:38.979+0000 [id=1]    INFO    o.e.j.s.handler.ContextHandler#doStart: Started oeje9n.ContextHandler$CoreContextHandler@3681037{Jenkins v2.541.3,/,b=file:///var/jenkins_home/war/,a=AVAILABLE,h=oeje9n.ContextHandler$CoreContextHandler$CoreToNestedHandler@2459319c{STARTED}}
2026-04-12 13:46:38.990+0000 [id=1]    INFO    o.e.j.server.AbstractConnector#doStart: Started oejs.ServerConnector@2aa6311a{HTTP/1.1, (http/1.1)}{0.0.0.0:8080}
2026-04-12 13:46:38.991+0000 [id=1]    INFO    org.eclipse.jetty.server.Server#doStart: Started oejs.Server@78525ef9{STARTING}[12.1.5,sto=0] @633ms
2026-04-12 13:46:38.992+0000 [id=43]    INFO    winstone.Logger#logInternal: Winstone Servlet Engine running: controlPort=disabled
2026-04-12 13:46:39.073+0000 [id=42]    INFO    jenkins.model.Jenkins#<init>: Starting version 2.541.3
2026-04-12 13:46:39.122+0000 [id=51]    INFO    jenkins.InitReactorRunner$1#onAttained: Started initialization
2026-04-12 13:46:39.132+0000 [id=72]    INFO    jenkins.InitReactorRunner$1#onAttained: Listed all plugins
2026-04-12 13:46:39.707+0000 [id=51]    INFO    jenkins.InitReactorRunner$1#onAttained: Prepared all plugins
2026-04-12 13:46:39.711+0000 [id=51]    INFO    jenkins.InitReactorRunner$1#onAttained: Started all plugins
2026-04-12 13:46:39.712+0000 [id=68]    INFO    jenkins.InitReactorRunner$1#onAttained: Augmented all extensions
2026-04-12 13:46:39.837+0000 [id=52]    INFO    jenkins.InitReactorRunner$1#onAttained: System config loaded
2026-04-12 13:46:39.837+0000 [id=59]    INFO    jenkins.InitReactorRunner$1#onAttained: System config adapted
2026-04-12 13:46:39.838+0000 [id=69]    INFO    jenkins.InitReactorRunner$1#onAttained: Loaded all jobs
2026-04-12 13:46:39.839+0000 [id=69]    INFO    jenkins.InitReactorRunner$1#onAttained: Configuration for all jobs updated
2026-04-12 13:46:39.857+0000 [id=86]    INFO    hudson.util.Retrier#start: Attempt #1 to do the action check updates server
2026-04-12 13:46:40.152+0000 [id=63]    INFO    jenkins.install.SetupWizard#init: 
[LF]> 
[LF]> *************************************************************
[LF]> *************************************************************
[LF]> *************************************************************
[LF]> 
[LF]> Jenkins initial setup is required. An admin user has been created and a password generated.
[LF]> Please use the following password to proceed to installation:
[LF]> 
[LF]> 3c54093a66f94103af3594c3851f070a
[LF]> 
[LF]> This may also be found at: /var/jenkins_home/secrets/initialAdminPassword
[LF]> 
[LF]> *************************************************************
[LF]> *************************************************************
[LF]> *************************************************************

2026-04-12 13:46:46.027+0000 [id=65]    INFO    jenkins.InitReactorRunner$1#onAttained: Completed initialization
2026-04-12 13:46:46.042+0000 [id=42]    INFO    hudson.lifecycle.Lifecycle#onReady: Jenkins is fully up and running
2026-04-12 13:46:47.011+0000 [id=86]    INFO    h.m.DownloadService$Downloadable#load: Obtained the updated data file for hudson.tasks.Maven.MavenInstaller
2026-04-12 13:46:47.011+0000 [id=86]    INFO    hudson.util.Retrier#start: Performed the action check updates server successfully at the attempt #1

Install plugins Install SSH server plugin Access Jenkins via ssh




dave@fedora:/git/devops-docker$ ssh -p 2222 dave@localhost help
  add-job-to-view
    Adds jobs to view.
  build
    Builds a job, and optionally waits until its completion.
  cancel-quiet-down
    Cancel the effect of the "quiet-down" command.
  clear-queue
    Clears the build queue.
  connect-node
    Reconnect to a node(s)
  console
    Retrieves console output of a build.
  copy-job
    Copies a job.
  create-credentials-by-xml
    Create Credential by XML
  create-credentials-domain-by-xml
    Create Credentials Domain by XML
  create-job
    Creates a new job by reading stdin as a configuration XML file.
  create-node
    Creates a new node by reading stdin as a XML configuration.
  create-view
    Creates a new view by reading stdin as a XML configuration.
  declarative-linter
    Validate a Jenkinsfile containing a Declarative Pipeline
  delete-builds
    Deletes build record(s).
  delete-credentials
    Delete a Credential
  delete-credentials-domain
    Delete a Credentials Domain
  delete-job
    Deletes job(s).
  delete-node
    Deletes node(s)
  delete-view
    Deletes view(s).
  disable-job
    Disables a job.
  disable-plugin
    Disable one or more installed plugins.
  disconnect-node
    Disconnects from a node.
  enable-job
    Enables a job.
  enable-plugin
    Enables one or more installed plugins transitively.
  get-credentials-as-xml
    Get a Credentials as XML (secrets redacted)
  get-credentials-domain-as-xml
    Get a Credentials Domain as XML
  get-gradle
    List available gradle installations
  get-job
    Dumps the job definition XML to stdout.
  get-node
    Dumps the node definition XML to stdout.
  get-view
    Dumps the view definition XML to stdout.
  groovy
    Executes the specified Groovy script. 
  groovysh
    Runs an interactive groovy shell.
  help
    Lists all the available commands or a detailed description of single command.
  import-credentials-as-xml
    Import credentials as XML. The output of "list-credentials-as-xml" can be used as input here as is, the only needed change is to set the actual Secrets which are redacted in the output.
  install-plugin
    Installs a plugin either from a file, an URL, or from update center. 
  keep-build
    Mark the build to keep the build forever.
  list-changes
    Dumps the changelog for the specified build(s).
  list-credentials
    Lists the Credentials in a specific Store
  list-credentials-as-xml
    Export credentials as XML. The output of this command can be used as input for "import-credentials-as-xml" as is, the only needed change is to set the actual Secrets which are redacted in the output.
  list-credentials-context-resolvers
    List Credentials Context Resolvers
  list-credentials-providers
    List Credentials Providers
  list-jobs
    Lists all jobs in a specific view or item group.
  list-plugins
    Outputs a list of installed plugins.
  mail
    Reads stdin and sends that out as an e-mail.
  offline-node
    Stop using a node for performing builds temporarily, until the next "online-node" command.
  online-node
    Resume using a node for performing builds, to cancel out the earlier "offline-node" command.
  quiet-down
    Quiet down Jenkins, in preparation for a restart. Don’t start any builds.
  reload-configuration
    Discard all the loaded data in memory and reload everything from file system. Useful when you modified config files directly on disk.
  reload-job
    Reload job(s)
  remove-job-from-view
    Removes jobs from view.
  replay-pipeline
    Replay a Pipeline build with edited script taken from standard input
  restart
    Restart Jenkins.
  restart-from-stage
    Restart a completed Declarative Pipeline build from a given stage.
  safe-restart
    Safe Restart Jenkins. Don’t start any builds.
  safe-shutdown
    Puts Jenkins into the quiet mode, wait for existing builds to be completed, and then shut down Jenkins.
  session-id
    Outputs the session ID, which changes every time Jenkins restarts.
  set-build-description
    Sets the description of a build.
  set-build-display-name
    Sets the displayName of a build.
  shutdown
    Immediately shuts down Jenkins server.
  stop-builds
    Stop all running builds for job(s)
  update-credentials-by-xml
    Update Credentials by XML
  update-credentials-domain-by-xml
    Update Credentials Domain by XML
  update-job
    Updates the job definition XML from stdin. The opposite of the get-job command.
  update-node
    Updates the node definition XML from stdin. The opposite of the get-node command.
  update-view
    Updates the view definition XML from stdin. The opposite of the get-view command.
  version
    Outputs the current version.
  wait-node-offline
    Wait for a node to become offline.
  wait-node-online
    Wait for a node to become online.
  who-am-i
    Reports your credential and permissions.
dave@fedora:/git/devops-docker$ 


Run job via ssh 




Trigger a build and follow the logs (Best for Dev):
ssh -p 2222 my_jenkins_user@localhost build "Your-Job-Name" -s -v

Sunday, October 5, 2025

Weblogic 14.1.2 start managed server with Admin Channel

 

HOWTO


See also 


Git

Keep domain wide administration port disabled





Configure custom Admin Channel on Admin  server 





Configure custom Admin Channel on managed server 





Start managed server with Admin Channel

  • startManagedWebLogic.sh managed_server_name admin_url (UNIX)


dave@dave:/app/domains/dave_domain/bin$ ./startManagedWebLogic.sh dave-managed https://localhost:9002
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000
.
CLASSPATH=/home/app/weblogic/wlserver/../oracle_common/modules/com.oracle.webservices.wls.wls-jaxrpc.jar::/home/app/weblogic/wlserver/server/lib/weblogic.jar:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/ant-contrib-1.0b3.jar:/home/app/weblogic/wlserver/modules/features/oracle.wls.common.nodemanager.jar:/home/app/weblogic/wlserver/common/derby/lib/derbytools.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyclient.jar:/home/app/weblogic/wlserver/common/derby/lib/derby.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyshared.jar
.
PATH=/app/domains/dave_domain/bin:/home/app/weblogic/wlserver/server/bin:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/org.apache.ant/apache-ant/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/usr/java/jdk-21/bin:/opt/google:/opt/jmc/jmc-8.3.1_linux-x64/JDK_Mission_Control:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/home/dave/.local/bin:/home/dave/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/var/lib/snapd/snap/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
Starting WLS with line:
/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin/java -server   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -cp /home/app/weblogic/wlserver/server/lib/weblogic-launcher.jar -Dlaunch.use.env.classpath=true -Dweblogic.Name=dave-managed -Djava.security.policy=/home/app/weblogic/wlserver/server/lib/weblogic.policy  -Djava.system.class.loader=com.oracle.classloader.weblogic.LaunchClassLoader  -javaagent:/home/app/weblogic/wlserver/server/lib/debugpatch-agent.jar -da -Dwls.home=/home/app/weblogic/wlserver/server -Dweblogic.home=/home/app/weblogic/wlserver/server   -Dweblogic.management.server=https://localhost:9002   weblogic.Server
[0.009s][warning][cds] Archived non-system classes are disabled because the java.system.class.loader property is specified (value = "com.oracle.classloader.weblogic.LaunchClassLoader"). To use archived non-system classes, this property must not be set
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is unknown> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <FIPS compliant operation not available for configuration type OTHER> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is in non-FIPS mode> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 21.0.5+9-LTS-239 from Oracle Corporation.> 
<Oct 5, 2025, 1:54:29 PM Central European Summer Time> <Info> <Security> <BEA-090065> <Getting boot identity from user.> 
Enter username to boot WebLogic server:weblogic    
Enter password to boot WebLogic server:
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Warning> <Security> <BEA-090960> <The server's SSL configuration is not available. There will potentially be SSL handshake failures.> 
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Warning> <Security> <BEA-090924> <JSSE has been selected by default, since the SSLMBean is not available.> 
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Info> <Security> <BEA-090908> <Using the default WebLogic SSL Wildcard Hostname Verifier implementation.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141107> <Version: WebLogic Server 14.1.2.0.0  Tue Nov 26 02:40:45 GMT 2024 2171472> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141340> <Server starting with ProductionModeEnabled=false> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141341> <Server starting with SecureModeEnabled=false> 
<Oct 5, 2025, 1:54:42 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 1:54:42 PM Central European Summer Time> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool.> 
<Oct 5, 2025, 1:54:42,345 PM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 1:54:42,371 PM Central European Summer Time> <Notice> <LoggingService> <BEA-320400> <The log file /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms, such as Windows.> 
<Oct 5, 2025, 1:54:42,371 PM Central European Summer Time> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log00001. Log messages will continue to be logged in /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log.> 
<Oct 5, 2025, 1:54:42,380 PM Central European Summer Time> <Notice> <Log Management> <BEA-170019> <The server log file weblogic.logging.FileStreamHandler instance=303355457
Current log file=/home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log
Rotation dir=/home/app/domains/dave_domain/servers/dave-managed/logs
 is opened. All server side log events will be written to this file.> 
<Oct 5, 2025, 1:54:42,410 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:42,447 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:42,448 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:42,465 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:42,495 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:42,501 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:44,453 PM Central European Summer Time> <Notice> <Security> <BEA-090946> <Security pre-initializing using security realm: myrealm> 
<Oct 5, 2025, 1:54:44,753 PM Central European Summer Time> <Notice> <Security> <BEA-090947> <Security post-initializing using security realm: myrealm> 
<Oct 5, 2025, 1:54:46,072 PM Central European Summer Time> <Notice> <Security> <BEA-090082> <Security initialized using administrative security realm: myrealm> 
<Oct 5, 2025, 1:54:46,213 PM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://localhost:9200/jndi/weblogic.management.mbeanservers.runtime.> 
<Oct 5, 2025, 1:54:48,057 PM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "localhost", maps to multiple IP addresses: 127.0.0.1, 0:0:0:0:0:0:0:1.> 
<Oct 5, 2025, 1:54:48,057 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "dave-managed-admin" is now listening on 127.0.0.1:9200 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 1:54:48,079 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY.> 
<Oct 5, 2025, 1:54:48,079 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 1:54:48,124 PM Central European Summer Time> <Notice> <Log Management> <BEA-170036> <The Logging monitoring service timer has started to check for logged message counts every 30 seconds.> 
<Oct 5, 2025, 1:54:48,274 PM Central European Summer Time> <Notice> <Log Management> <BEA-170027> <The server has successfully established a connection with the Domain level Diagnostic Service.> 
<Oct 5, 2025, 1:54:48,394 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN.> 
<Oct 5, 2025, 1:54:48,459 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING.> 
<Oct 5, 2025, 1:54:48,522 PM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "dave", maps to multiple IP addresses: 192.168.0.115, 192.168.122.1, 192.168.49.1, 172.17.0.1, fe80:0:0:0:b1c0:455e:93e9:1ac4%2, 2a02:8308:a:5b00:0:0:0:bd2e, 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0.> 
<Oct 5, 2025, 1:54:48,524 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,525 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[7]" is now listening on 127.0.0.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,526 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000332> <Started the WebLogic Server Managed Server "dave-managed" for domain "dave_domain" running in development mode.> 
<Oct 5, 2025, 1:54:48,525 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on 192.168.49.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,529 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[6]" is now listening on 0:0:0:0:0:0:0:1%lo:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,532 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,533 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 192.168.0.115:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,537 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on 172.17.0.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,538 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[5]" is now listening on 192.168.122.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,640 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000360> <The server started in RUNNING mode.> 
<Oct 5, 2025, 1:54:48,653 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING.> 



Runtime monitoring in Remote Console

config.xml with managed server

<server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address></listen-address>
    <network-access-point>
      <name>Admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9002</listen-port>
      <hostname-verification-ignored>true</hostname-verification-ignored>
    </network-access-point>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <server>
    <name>dave-managed</name>
    <ssl>
      <enabled>false</enabled>
    </ssl>
    <listen-port>9001</listen-port>
    <listen-address xsi:nil="true"></listen-address>
    <network-access-point>
      <name>dave-managed-admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9200</listen-port>
    </network-access-point>
  </server>

Create domain on Weblogic 14.1.2 with Oracle JDK 21

HOWTO


GitHub


Check current version 

dave@dave:~$ cd /app/weblogic/wlserver/server/lib
dave@dave:/app/weblogic/wlserver/server/lib$ java -cp weblogic.jar weblogic.version

WebLogic Server 14.1.1.0.0  Thu Mar 26 03:15:09 GMT 2020 2000885

Use 'weblogic.version -verbose' to get subsystem information

Use 'weblogic.utils.Versions' to get version information for all modules


Instal Oracle JDK 21 

Verify that a certified JDK already exists on your system; the installer requires a certified JDK. See Oracle Fusion Middleware Supported System Configurations. To download the JDK, see About JDK Requirements for an Oracle Fusion Middleware Installation.


dave@dave:~$ java -version
java version "21.0.5" 2024-10-15 LTS
Java(TM) SE Runtime Environment (build 21.0.5+9-LTS-239)
Java HotSpot(TM) 64-Bit Server VM (build 21.0.5+9-LTS-239, mixed mode, sharing)

Install Weblogic 14.1.2



Unzip 
$ unzip -l  ~/Downloads/V1045131-01.zip 
Archive:  /home/dave/Downloads/V1045131-01.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
686826498  12-05-2024 23:27   fmw_14.1.2.0.0_wls.jar
---------                     -------
686826498                     1 file

Install
dave@dave:/app$ java -jar fmw_14.1.2.0.0_wls.jar

            
Launcher log file is /tmp/OraInstall2025-10-05_09-05-18AM/launcher2025-10-05_09-05-18AM.log.
Extracting the installer . . . . . . Done
Checking if CPU speed is above 300 MHz.   Actual 2599.988 MHz    Passed
Checking monitor: must be configured to display at least 256 colors.   Actual 16777216    Passed
Checking swap space: must be greater than 512 MB.   Actual 8191 MB    Passed
Checking temp space: must be greater than 300 MB.   Actual 7234 MB    Passed
Preparing to launch the Oracle Universal Installer from /tmp/OraInstall2025-10-05_09-05-18AM
Log: /tmp/OraInstall2025-10-05_09-05-18AM/install2025-10-05_09-05-18AM.log
Logs successfully copied to /home/dave/oraInventory/logs.







Start admin server



dave@dave:/app/domains/dave_domain$ ./startWebLogic.sh 
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000
.
CLASSPATH=/home/app/weblogic/wlserver/../oracle_common/modules/com.oracle.webservices.wls.wls-jaxrpc.jar::/home/app/weblogic/wlserver/server/lib/weblogic.jar:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/ant-contrib-1.0b3.jar:/home/app/weblogic/wlserver/modules/features/oracle.wls.common.nodemanager.jar::/home/app/weblogic/wlserver/common/derby/lib/derbynet.jar:/home/app/weblogic/wlserver/common/derby/lib/derbytools.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyclient.jar:/home/app/weblogic/wlserver/common/derby/lib/derby.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyshared.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyoptionaltools.jar
.
PATH=/app/domains/dave_domain/bin:/home/app/weblogic/wlserver/server/bin:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/org.apache.ant/apache-ant/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/usr/java/jdk-21/bin:/opt/google:/opt/jmc/jmc-8.3.1_linux-x64/JDK_Mission_Control:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/home/dave/.local/bin:/home/dave/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/var/lib/snapd/snap/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
Starting WLS with line:
/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin/java -server   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -cp /home/app/weblogic/wlserver/server/lib/weblogic-launcher.jar -Dlaunch.use.env.classpath=true -Dweblogic.Name=AdminServer -Djava.security.policy=/home/app/weblogic/wlserver/server/lib/weblogic.policy  -Djava.system.class.loader=com.oracle.classloader.weblogic.LaunchClassLoader  -javaagent:/home/app/weblogic/wlserver/server/lib/debugpatch-agent.jar -da -Dwls.home=/home/app/weblogic/wlserver/server -Dweblogic.home=/home/app/weblogic/wlserver/server      weblogic.Server
[0.016s][warning][cds] Archived non-system classes are disabled because the java.system.class.loader property is specified (value = "com.oracle.classloader.weblogic.LaunchClassLoader"). To use archived non-system classes, this property must not be set
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is unknown> 
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <FIPS compliant operation not available for configuration type OTHER> 
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is in non-FIPS mode> 
<Oct 5, 2025, 9:13:27 AM Central European Summer Time> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 21.0.5+9-LTS-239 from Oracle Corporation.> 
<Oct 5, 2025, 9:13:27 AM Central European Summer Time> <Info> <Management> <BEA-141107> <Version: WebLogic Server 14.1.2.0.0  Tue Nov 26 02:40:45 GMT 2024 2171472> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <Management> <BEA-141340> <Server starting with ProductionModeEnabled=false> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <Management> <BEA-141341> <Server starting with SecureModeEnabled=false> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool.> 
<Oct 5, 2025, 9:13:28,654 AM Central European Summer Time> <Notice> <Log Management> <BEA-170019> <The server log file weblogic.logging.FileStreamHandler instance=1415466851
Current log file=/home/app/domains/dave_domain/servers/AdminServer/logs/AdminServer.log
Rotation dir=/home/app/domains/dave_domain/servers/AdminServer/logs
 is opened. All server side log events will be written to this file.> 
<Oct 5, 2025, 9:13:28,783 AM Central European Summer Time> <Notice> <Security> <BEA-090946> <Security pre-initializing using security realm: myrealm> 
<Oct 5, 2025, 9:13:29,295 AM Central European Summer Time> <Notice> <Security> <BEA-090947> <Security post-initializing using security realm: myrealm> 
<Oct 5, 2025, 9:13:29,985 AM Central European Summer Time> <Notice> <Security> <BEA-090082> <Security initialized using administrative security realm: myrealm> 
<Oct 5, 2025, 9:13:30,235 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.runtime.> 
<Oct 5, 2025, 9:13:30,544 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.domainruntime.> 
<Oct 5, 2025, 9:13:30,696 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.edit.> 
<Oct 5, 2025, 9:13:32,359 AM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 9:13:32,463 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 9:13:32,484 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 9:13:32,486 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 9:13:32,498 AM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "dave", maps to multiple IP addresses: 192.168.0.115, 192.168.122.1, 192.168.49.1, 172.17.0.1, fe80:0:0:0:b1c0:455e:93e9:1ac4%2, 2a02:8308:a:5b00:0:0:0:bd2e, 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0.> 
<Oct 5, 2025, 9:13:32,501 AM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "localhost", maps to multiple IP addresses: 127.0.0.1, 0:0:0:0:0:0:0:1.> 
<Oct 5, 2025, 9:13:32,502 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration" is now listening on 192.168.0.115:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,504 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,505 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,505 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[3]" is now listening on 172.17.0.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,506 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[4]" is now listening on 192.168.49.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,507 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[5]" is now listening on 192.168.122.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,508 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[6]" is now listening on 0:0:0:0:0:0:0:1%lo:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,508 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[7]" is now listening on 127.0.0.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,526 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY.> 
<Oct 5, 2025, 9:13:32,527 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 9:13:32,585 AM Central European Summer Time> <Notice> <Log Management> <BEA-170036> <The Logging monitoring service timer has started to check for logged message counts every 30 seconds.> 
<Oct 5, 2025, 9:13:34,817 AM Central European Summer Time> <Notice> <Log Management> <BEA-170027> <The server has successfully established a connection with the Domain level Diagnostic Service.> 
<Oct 5, 2025, 9:13:34,894 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN.> 
Oct 05, 2025 9:13:34 AM weblogic.wsee.jaxws.provider.state.persistence.LogicalStoreStateManagerProvider <init>
INFO: Constructing LogicalStoreStateManagerProvider@1716684370, providerName=WseeStore, storeName=WseeStore]
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper$LogicalStoreInfo <init>
INFO: Constructing LogicalStoreInfo@966438498 [name=WseeStore]
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper registerForJMSDestinationAvailability
INFO: pname=null JMSDestinationAvailabilityHelper register for weblogic.wsee.BufferedRequestQueue:weblogic.wsee.BufferedRequestQueue
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper registerForJMSDestinationAvailability
INFO: pname=null JMSDestinationAvailabilityHelper register for weblogic.wsee.BufferedResponseQueue:weblogic.wsee.BufferedResponseQueue
<Oct 5, 2025, 9:13:34,967 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING.> 
<Oct 5, 2025, 9:13:35,031 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,032 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,033 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[7]" is now listening on 127.0.0.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,033 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[7]" is now listening on 127.0.0.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,034 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,035 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,035 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[5]" is now listening on 192.168.122.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,036 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 192.168.0.115:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 192.168.0.115:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[6]" is now listening on 0:0:0:0:0:0:0:1%lo:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000331> <Started the WebLogic Server Administration Server "AdminServer" for domain "dave_domain" running in development mode.> 
<Oct 5, 2025, 9:13:35,038 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on 192.168.49.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,039 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[6]" is now listening on 0:0:0:0:0:0:0:1%lo:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,039 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[4]" is now listening on 192.168.49.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,040 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on 172.17.0.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,041 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[3]" is now listening on 172.17.0.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,043 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[5]" is now listening on 192.168.122.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,118 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000360> <The server started in RUNNING mode.> 
<Oct 5, 2025, 9:13:35,130 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING.> 
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper getDDMemberInfosFromDestinationChange
INFO: add PhysicalStoreInfo PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper getDDMemberInfosFromDestinationChange
INFO: add PhysicalStoreInfo PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper onDestinationsAvailable
INFO: Destination Available processing logicalStore: WseeStore for PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper onDestinationsAvailable
INFO: Destination Available processing logicalStore: WseeStore for PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper$LogicalStoreInfo addPhysicalStore
INFO: Added physical store for server AdminServer PhysicalStore='WseeJaxwsFileStore' Current physical store count: 1
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper notifyServerSetListeners
INFO: 2 can not find  ServerSetListener




Config.xml


dave@dave:/app$ cat  /app/domains/dave_domain/config/config.xml 
<?xml version="1.0" encoding="UTF-8"?>
<domain xsi:schemaLocation="http://xmlns.oracle.com/weblogic/security/wls http://xmlns.oracle.com/weblogic/security/wls/1.0/wls.xsd http://xmlns.oracle.com/weblogic/domain http://xmlns.oracle.com/weblogic/1.0/domain.xsd http://xmlns.oracle.com/weblogic/security http://xmlns.oracle.com/weblogic/1.0/security.xsd http://xmlns.oracle.com/weblogic/security/xacml http://xmlns.oracle.com/weblogic/security/xacml/1.0/xacml.xsd" xmlns="http://xmlns.oracle.com/weblogic/domain" xmlns:sec="http://xmlns.oracle.com/weblogic/security" xmlns:wls="http://xmlns.oracle.com/weblogic/security/wls" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <name>dave_domain</name>
  <domain-version>14.1.2.0.0</domain-version>
  <security-configuration xmlns:xacml="http://xmlns.oracle.com/weblogic/security/xacml" xmlns:pas="http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator">
    <name>dave_domain</name>
    <realm>
      <sec:authentication-provider xsi:type="wls:default-authenticatorType">
        <sec:name>DefaultAuthenticator</sec:name>
      </sec:authentication-provider>
      <sec:authentication-provider xsi:type="wls:default-identity-asserterType">
        <sec:name>DefaultIdentityAsserter</sec:name>
        <sec:active-type>AuthenticatedUser</sec:active-type>
        <sec:active-type>weblogic-jwt-token</sec:active-type>
      </sec:authentication-provider>
      <sec:role-mapper xsi:type="xacml:xacml-role-mapperType">
        <sec:name>XACMLRoleMapper</sec:name>
      </sec:role-mapper>
      <sec:authorizer xsi:type="xacml:xacml-authorizerType">
        <sec:name>XACMLAuthorizer</sec:name>
      </sec:authorizer>
      <sec:adjudicator xsi:type="wls:default-adjudicatorType">
        <sec:name>DefaultAdjudicator</sec:name>
      </sec:adjudicator>
      <sec:credential-mapper xsi:type="wls:default-credential-mapperType">
        <sec:name>DefaultCredentialMapper</sec:name>
      </sec:credential-mapper>
      <sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType">
        <sec:name>WebLogicCertPathProvider</sec:name>
      </sec:cert-path-provider>
      <sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>
      <sec:name>myrealm</sec:name>
      <sec:password-validator xsi:type="pas:system-password-validatorType">
        <sec:name>SystemPasswordValidator</sec:name>
        <pas:min-password-length>8</pas:min-password-length>
        <pas:min-numeric-or-special-characters>1</pas:min-numeric-or-special-characters>
      </sec:password-validator>
    </realm>
    <default-realm>myrealm</default-realm>
    <credential-encrypted>{AES256}wLRjNyZr9HwkpIvZnt7prR1F0F58X1w55Rt0o2cUG1TsYT/fB5G3umETxFA8Ha30NEvPnXmPhKzVp7xAYVmfNe6jg4gGugEmZqQ7uvi2xR0BbXo60GxPSRkuVCCvHCa+</credential-encrypted>
    <node-manager-username>weblogic</node-manager-username>
    <node-manager-password-encrypted>{AES256}4uKCZCiWlVnsqKKDIE0PuTPZ3AaqVPaW5D8mJFw2zzw=</node-manager-password-encrypted>
  </security-configuration>
  <server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address/>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <embedded-ldap>
    <name>dave_domain</name>
    <credential-encrypted>{AES256}DEcZ24F0BPrv+9aNTYyBzUj2M0VZ7cMcL0ifWbTli8/0XHtLR4NNVmfFTxlejbEO</credential-encrypted>
  </embedded-ldap>
  <administration-port-enabled>true</administration-port-enabled>
  <configuration-version>14.1.2.0.0</configuration-version>
  <app-deployment>
    <name>state-management-provider-memory-rar</name>
    <target>AdminServer</target>
    <module-type>rar</module-type>
    <source-path>/home/app/weblogic/oracle_common/modules/com.oracle.state-management.state-management-provider-memory-rar-impl.rar</source-path>
    <staging-mode>nostage</staging-mode>
  </app-deployment>
  <jms-server>
    <name>WseeJaxwsJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeJaxwsFileStore</persistent-store>
  </jms-server>
  <jms-server>
    <name>WseeJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeFileStore</persistent-store>
  </jms-server>
  <jms-server>
    <name>WseeSoapjmsJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeSoapjmsFileStore</persistent-store>
  </jms-server>
  <self-tuning>
    <work-manager>
      <name>weblogic.wsee.jaxws.mdb.DispatchPolicy</name>
      <target>AdminServer</target>
    </work-manager>
    <work-manager>
      <name>weblogic.wsee.mdb.DispatchPolicy</name>
      <target>AdminServer</target>
    </work-manager>
  </self-tuning>
  <file-store>
    <name>WseeJaxwsFileStore</name>
    <directory>WseeJaxwsFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <file-store>
    <name>WseeFileStore</name>
    <directory>WseeFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <file-store>
    <name>WseeSoapjmsFileStore</name>
    <directory>WseeSoapjmsFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <jms-system-resource>
    <name>WseeJaxwsJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>WseeJaxwsJmsServerSub</name>
      <target>WseeJaxwsJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseejaxwsjmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <jms-system-resource>
    <name>WseeJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>BEA_JMS_MODULE_SUBDEPLOYMENT_WSEEJMSServer</name>
      <target>WseeJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseejmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <jms-system-resource>
    <name>WseeSoapjmsJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>WseeSoapjmsJmsServerSub</name>
      <target>WseeSoapjmsJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseesoapjmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <admin-server-name>AdminServer</admin-server-name>
  <saf-agent>
    <name>ReliableWseeJaxwsSAFAgent</name>
    <target>AdminServer</target>
    <store>WseeJaxwsFileStore</store>
  </saf-agent>
  <saf-agent>
    <name>ReliableWseeSAFAgent</name>
    <target>AdminServer</target>
    <store>WseeFileStore</store>
  </saf-agent>
  <ssl-enabled>true</ssl-enabled>
</domain>

Keystores - PKCS12 or JKS


 For PKCS12 keystores, keytool does not support different keystore and key passwords.
 Secure domain - use SSL Keystores Obtain properly signed certificate via CSR 

JKS

keytool -genkeypair -alias server_cert -keyalg RSA -sigalg SHA384withRSA -keysize 3072 -validity 365 -dname "CN=server.avitek.com,OU=Support,O=Avitek,L=Bangalore,ST=Karnataka,C=IN" -storetype JKS -storepass Welcome1 -keypass Welcome1 -keystore identity.jks

keytool -export -alias server_cert -file root.cer -keystore identity.jks -storepass Welcome1

keytool -import -v -noprompt -trustcacerts -alias root.cert -file root.cer -storetype JKS -keystore trust.jks -storepass Welcome1

PKCS12

keytool -genkeypair -alias server_cert -keyalg RSA -sigalg SHA384withRSA -keysize 3072 -validity 365 -dname "CN=server.avitek.com,OU=Support,O=Avitek,L=Bangalore,ST=Karnataka,C=KA" -storepass Welcome1 -keypass Welcome1 -keystore identity.p12

keytool -export -alias server_cert -file root.cer -keystore identity.p12 -storepass Welcome1

keytool -import -v -noprompt -trustcacerts -alias root.cert -file root.cer -keystore trust.p12 -storepass Welcome1

CA truststore

DemoTrustKeyStorePassPhrase

dave@dave:/app/weblogic$ keytool -list -keystore ./wlserver/server/lib/DemoTrust.jks
Enter keystore password:  

*****************  WARNING WARNING WARNING  *****************
* The integrity of the information stored in your keystore  *
* has NOT been verified!  In order to verify its integrity, *
* you must provide your keystore password.                  *
*****************  WARNING WARNING WARNING  *****************

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

wlscertgenca, Dec 2, 2012, trustedCertEntry, 
Certificate fingerprint (SHA-256): 57:10:7C:2C:B3:07:B9:8B:F8:FD:EB:69:99:36:53:03:7A:E1:E7:CB:D3:7A:E7:CF:30:F3:B3:ED:F3:42:0A:D7

DemoIdentity

DOMAIN_HOME/security/DemoCerts.props 



dave@dave:/app/weblogic$ find /app/domains/dave_domain/ -name DemoIdentity.p12 
/app/domains/dave_domain/security/DemoIdentity.p12
dave@dave:/app/weblogic$ keytool -list -keystore /app/domains/dave_domain/security/DemoIdentity.p12
Enter keystore password:  

*****************  WARNING WARNING WARNING  *****************
* The integrity of the information stored in your keystore  *
* has NOT been verified!  In order to verify its integrity, *
* you must provide your keystore password.                  *
*****************  WARNING WARNING WARNING  *****************

Keystore type: PKCS12
Keystore provider: SUN

Your keystore contains 1 entry

demoidentity, Oct 5, 2025, PrivateKeyEntry, 
Certificate chain length: 0

Demo keystore passwords
dave@dave:/app/weblogic$ find /app/domains/dave_domain/ -name DemoCerts.props 
/app/domains/dave_domain/security/DemoCerts.props
dave@dave:/app/weblogic$ cat /app/domains/dave_domain/security/DemoCerts.props
#WebLogic User Configuration File; 2
#Sun Oct 05 09:10:56 CEST 2025
weblogic.security.DemoCACertificate=/app/domains/dave_domain/security/democacert.der
weblogic.security.DemoCAPrivateKey=/app/domains/dave_domain/security/democakey.der
weblogic.security.DemoCAPrivateKeyPassPhrase={AES256}ElpnZY1KC6DxJmXy8hPfnOr5rOh90wycyg+6HTTfRsUI2uIb6kN9xi3uBK4sUNIthKhrRa9namNKw7VkXB3U2Q\=\=
weblogic.security.DemoIdentityKeyStore=/app/domains/dave_domain/security/DemoIdentity.p12
weblogic.security.DemoIdentityKeyStoreAlias=DemoIdentity
weblogic.security.DemoIdentityKeyStorePassPhrase={AES256}IT7turw8Kw4BXgQhGuCWuNVPqIoIiF12XI/diC6BDO92Yl0OESNs/ptJnNK3vumyixx7U3C9Lz0n1B5TF3K8rw\=\=
weblogic.security.DemoIdentityKeyStoreType=pkcs12
weblogic.security.DemoIdentityPrivateKeyPassPhrase={AES256}gOybATaMsEKFwffWsu9F5ALMrldWt+O0MEd0peGxiBTOI5r3mIzyn8UU0DF9nxBtQa+t2JwwxJpbgfEXBSoYvg\=\=
weblogic.security.DemoTrustKeyStore=/app/domains/dave_domain/security/DemoTrust.p12
weblogic.security.DemoTrustKeyStorePassPhrase={AES256}EJ0dKjKO2dq3Pei1y0AbCoRuNHfKX26IDLZjcI4DsqXSu/zwSCjFYFKXvdJleRtH
weblogic.security.DemoTrustKeyStoreType=pkcs12

Open console https://dave:9002/console 









 Download remote console

Download RPM  file 


dave@dave:/app$ sudo dnf install weblogic-remote-console-2.4.17-linux.rpm
Updating and loading repositories:
 RPM Fusion for Fedora 41 - Nonfree - Updates                                                                                                                                                                                                                                         100% |   6.9 KiB/s |   8.4 KiB |  00m01s
 RPM Fusion for Fedora 41 - Nonfree - Steam                                                                                                                                                                                                                                           100% |   7.4 KiB/s |   8.3 KiB |  00m01s
 Fedora 41 - x86_64                                                                                                                                                                                                                                                                   100% |  25.3 KiB/s |  26.4 KiB |  00m01s
 RPM Fusion for Fedora 41 - Free - Updates                                                                                                                                                                                                                                            100% |   9.0 KiB/s |   8.3 KiB |  00m01s
 RPM Fusion for Fedora 41 - Nonfree - NVIDIA Driver                                                                                                                                                                                                                                   100% |  10.2 KiB/s |   8.6 KiB |  00m01s
 Hashicorp Stable - x86_64                                                                                                                                                                                                                                                            100% |   2.1 KiB/s |   1.5 KiB |  00m01s
 Google Cloud SDK                                                                                                                                                                                                                                                                     100% |   2.0 KiB/s |   1.4 KiB |  00m01s
 Kubernetes                                                                                                                                                                                                                                                                           100% |   2.6 KiB/s |   1.8 KiB |  00m01s
 google-chrome                                                                                                                                                                                                                                                                        100% |   2.1 KiB/s |   1.3 KiB |  00m01s
 Visual Studio Code                                                                                                                                                                                                                                                                   100% |   3.0 KiB/s |   1.5 KiB |  00m01s
 Fedora 41 - x86_64 - Updates                                                                                                                                                                                                                                                         100% |  11.1 KiB/s |   8.7 KiB |  00m01s
 Copr repo for PyCharm owned by phracek                                                                                                                                                                                                                                               100% |   4.4 KiB/s |   2.1 KiB |  00m00s
Repositories loaded.
Package                                                                                                        Arch                   Version                                                                                                        Repository                                                           Size
Installing:
 weblogic-remote-console                                                                                       x86_64                 2.4.17-1                                                                                                       @commandline                                                    453.6 MiB

Transaction Summary:
 Installing:         1 package

Total size of inbound packages is 180 MiB. Need to download 0 B.
After this operation, 454 MiB extra will be used (install 454 MiB, remove 0 B).
Is this ok [y/N]: y
Running transaction
[1/3] Verify package files                                                                                                                                                                                                                                                            100% |   1.0   B/s |   1.0   B |  00m01s
[2/3] Prepare transaction                                                                                                                                                                                                                                                             100% |   2.0   B/s |   1.0   B |  00m00s
[3/3] Installing weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                            100% |  27.6 MiB/s | 453.6 MiB |  00m16s
>>> Running %post scriptlet: weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                                                        
>>> Finished %post scriptlet: weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                                                       
>>> Scriptlet output:                                                                                                                                                                                                                                                                                                         
>>> update-alternatives is /sbin/update-alternatives                                                                                                                                                                                                                                                                          
>>>                                                                                                                                                                                                                                                                                                                           
Warning: skipped OpenPGP checks for 1 package from repository: @commandline
Complete!



Depending on setup use default 7001 port or Admin channel port 9002


Connected to Admin Console 






Configure admin channel

 





<Oct 5, 2025, 10:35:37,609 AM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 10:35:37,650 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 10:35:37,663 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 10:35:37,664 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 10:35:37,671 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Admin" is now listening on 127.0.0.1:9002 for protocols admin, ldaps, https.> 

config.xml with separately configured admin channel

<server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address></listen-address>
    <network-access-point>
      <name>Admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9002</listen-port>
      <hostname-verification-ignored>true</hostname-verification-ignored>
    </network-access-point>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <embedded-ldap>
    <name>dave_domain</name>
    <credential-encrypted>{AES256}DEcZ24F0BPrv+9aNTYyBzUj2M0VZ7cMcL0ifWbTli8/0XHtLR4NNVmfFTxlejbEO</credential-encrypted>
  </embedded-ldap>
  <administration-port-enabled>false</administration-port-enabled>
  <configuration-version>14.1.2.0.0</configuration-version>

Sunday, August 3, 2025

OCP k8s CRC local monitoring

 HOWTO



Add memory 


$ crc stop
INFO Stopping kubelet and all containers...       
INFO Stopping the instance, this may take a few minutes... 
Stopped the instance
dave@fedora:~/Downloads$ crc config set memory 14336
Changes to configuration property 'memory' are only applied when the CRC instance is started.
If you already have a running CRC instance, then for this configuration change to take effect, stop the CRC instance with 'crc stop' and restart it with 'crc start'.
dave@fedora:~/Downloads$  crc config set enable-cluster-monitoring true
Successfully configured enable-cluster-monitoring to true
dave@fedora:~/Downloads$ crc start

Monitoring 


dave@fedora:~/Downloads$ oc config use-context crc-admin
Switched to context "crc-admin".
dave@fedora:~/Downloads$ oc whoami
kubeadmin
dave@fedora:~/Downloads$ oc get clusterversion version -ojsonpath='{range .spec.overrides[*]}{.name}{"\n"}{end}' | nl -v -2
    -2    cluster-monitoring-operator
    -1    monitoring
     0    cloud-credential-operator
     1    cloud-credential
     2    cluster-autoscaler-operator
     3    cluster-autoscaler
     4    cluster-cloud-controller-manager-operator
     5    cloud-controller-manager
dave@fedora:~/Downloads$ crc config set enable-cluster-monitoring true
Successfully configured enable-cluster-monitoring to true




Pod YAML

kind: Pod
apiVersion: v1
metadata:
  name: demo
  namespace: demo
  uid: 6be00704-f3ca-4d4b-9af6-f6bee0494ba1
  resourceVersion: '37632'
  creationTimestamp: '2025-08-03T09:24:59Z'
  labels:
    run: demo
  annotations:
    k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.66/23"],"mac_address":"0a:58:0a:d9:00:42","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.66/23","gateway_ip":"10.217.0.1","role":"primary"}}'
    k8s.v1.cni.cncf.io/network-status: |-
      [{
          "name": "ovn-kubernetes",
          "interface": "eth0",
          "ips": [
              "10.217.0.66"
          ],
          "mac": "0a:58:0a:d9:00:42",
          "default": true,
          "dns": {}
      }]
    openshift.io/scc: anyuid
  managedFields:
    - manager: crc
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:k8s.ovn.org/pod-networks': {}
      subresource: status
    - manager: kubectl-run
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:labels':
            .: {}
            'f:run': {}
        'f:spec':
          'f:containers':
            'k:{"name":"demo"}':
              .: {}
              'f:command': {}
              'f:image': {}
              'f:imagePullPolicy': {}
              'f:name': {}
              'f:resources': {}
              'f:terminationMessagePath': {}
              'f:terminationMessagePolicy': {}
          'f:dnsPolicy': {}
          'f:enableServiceLinks': {}
          'f:restartPolicy': {}
          'f:schedulerName': {}
          'f:securityContext': {}
          'f:terminationGracePeriodSeconds': {}
    - manager: multus-daemon
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:k8s.v1.cni.cncf.io/network-status': {}
      subresource: status
    - manager: kubelet
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:55:05Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:status':
          'f:conditions':
            'k:{"type":"ContainersReady"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"Initialized"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"PodReadyToStartContainers"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"Ready"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
          'f:containerStatuses': {}
          'f:hostIP': {}
          'f:hostIPs': {}
          'f:phase': {}
          'f:podIP': {}
          'f:podIPs':
            .: {}
            'k:{"ip":"10.217.0.66"}':
              .: {}
              'f:ip': {}
          'f:startTime': {}
      subresource: status
spec:
  restartPolicy: Always
  serviceAccountName: default
  imagePullSecrets:
    - name: default-dockercfg-p7cfm
  priority: 0
  schedulerName: default-scheduler
  enableServiceLinks: true
  terminationGracePeriodSeconds: 30
  preemptionPolicy: PreemptLowerPriority
  nodeName: crc
  securityContext:
    seLinuxOptions:
      level: 's0:c26,c0'
  containers:
    - resources: {}
      terminationMessagePath: /dev/termination-log
      name: demo
      command:
        - sleep
        - 600s
      securityContext:
        capabilities:
          drop:
            - MKNOD
      imagePullPolicy: Always
      volumeMounts:
        - name: kube-api-access-z7xrc
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      terminationMessagePolicy: File
      image: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
  serviceAccount: default
  volumes:
    - name: kube-api-access-z7xrc
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
          - configMap:
              name: openshift-service-ca.crt
              items:
                - key: service-ca.crt
                  path: service-ca.crt
        defaultMode: 420
  dnsPolicy: ClusterFirst
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
status:
  containerStatuses:
    - restartCount: 3
      started: true
      ready: true
      name: demo
      state:
        running:
          startedAt: '2025-08-03T09:55:04Z'
      volumeMounts:
        - name: kube-api-access-z7xrc
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
          readOnly: true
          recursiveReadOnly: Disabled
      imageID: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
      image: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
      lastState:
        terminated:
          exitCode: 0
          reason: Completed
          startedAt: '2025-08-03T09:45:03Z'
          finishedAt: '2025-08-03T09:55:03Z'
          containerID: 'cri-o://fe191488478ade4fb4fbd6f045f4896cdd3128a02cd23c9163dea85039de6efc'
      containerID: 'cri-o://f9351ee373330f42397d46be58820ae2d34616afcddf9be923e30bbd906b5238'
  qosClass: BestEffort
  hostIPs:
    - ip: 192.168.126.11
  podIPs:
    - ip: 10.217.0.66
  podIP: 10.217.0.66
  hostIP: 192.168.126.11
  startTime: '2025-08-03T09:24:59Z'
  conditions:
    - type: PodReadyToStartContainers
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:25:03Z'
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:24:59Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:55:05Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:55:05Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:24:59Z'
  phase: Running