Skip to main content

Hi nayone seen this issue. We have an Airgap installation but when accessing all kind if iam pages we get a server error. When looking into the odata server log we find this jave exception stack
 

com.ifsworld.fnd.common.exceptions.ODataProviderException:
Error 
while invoking method iamUserList().
  at com.ifsworld.fnd.storage.invoker.JavaOperationInvoker.invokeOperation(JavaOperationInvoker.java:166)
  at com.ifsworld.fnd.storage.invoker.JavaOperationInvoker.invoke(JavaOperationInvoker.java:91)
  at com.ifsworld.fnd.storage.invoker.BpaInvokerWrapper.invoke(BpaInvokerWrapper.java:168)
  at com.ifsworld.fnd.provider.processor.FndComplexCollectionProcessor.readComplexCollection(FndComplexCollectionProcessor.java:116)
  at org.apache.olingo.server.core.ODataDispatcher.handleComplexDispatching(ODataDispatcher.java:411)
  at org.apache.olingo.server.core.ODataDispatcher.handleFunctionDispatching(ODataDispatcher.java:207)
  at org.apache.olingo.server.core.ODataDispatcher.handleResourceDispatching(ODataDispatcher.java:148)
  at org.apache.olingo.server.core.ODataDispatcher.dispatch(ODataDispatcher.java:119)
  at org.apache.olingo.server.core.ODataHandlerImpl.processInternal(ODataHandlerImpl.java:168)
  at org.apache.olingo.server.core.ODataHandlerImpl.process(ODataHandlerImpl.java:89)
  at com.ifsworld.fnd.provider.ODataHandlerWrapper.process(ODataHandlerWrapper.java:64)
  at com.ifsworld.fnd.provider.ODataHandlerWrapper.process(ODataHandlerWrapper.java:77)
  at com.ifsworld.fnd.web.api.FndODataServletBase.serviceODataRequest(FndODataServletBase.java:330)
  at com.ifsworld.fnd.web.api.FndODataServletBase.serviceProjectionRequest(FndODataServletBase.java:163)
  at com.ifsworld.fnd.web.api.FndODataServletBase.service(FndODataServletBase.java:112)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:791)
  at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1258)
  at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:746)
  at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:443)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:193)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:98)
  at com.ifsworld.fnd.web.api.ResponseFilterBase.doFilter(ResponseFilterBase.java:60)
  at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:201)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
  at com.ifsworld.fnd.web.api.InitConfigurationFilterBase.doFilter(InitConfigurationFilterBase.java:202)
  at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:201)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
  at com.ibm.ws.security.jaspi.JaspiServletFilter.doFilter(JaspiServletFilter.java:56)
  at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:201)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
  at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:1002)
  at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1140)
  at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:5049)
  at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.handleRequest(DynamicVirtualHost.java:316)
  at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:1007)
  at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.run(DynamicVirtualHost.java:281)
  at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink$TaskWrapper.run(HttpDispatcherLink.java:1184)
  at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.wrapHandlerAndExecute(HttpDispatcherLink.java:453)
  at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.ready(HttpDispatcherLink.java:412)
  at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:566)
  at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleNewRequest(HttpInboundLink.java:500)
  at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.processRequest(HttpInboundLink.java:360)
  at com.ibm.ws.http.channel.internal.inbound.HttpICLReadCallback.complete(HttpICLReadCallback.java:70)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager.requestComplete(WorkQueueManager.java:504)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:574)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:958)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1047)
  at com.ibm.ws.threading.internal.ExecutorServiceImpl$RunnableWrapper.run(ExecutorServiceImpl.java:238)
  at java.base\/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
  at java.base\/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
  at java.base\/java.lang.Thread.run(Unknown Source)
Caused by: java.lang.reflect.InvocationTargetException
  at java.base\/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  at java.base\/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
  at java.base\/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
  at java.base\/java.lang.reflect.Method.invoke(Unknown Source)
  at com.ifsworld.fnd.storage.invoker.JavaOperationInvoker.invokeOperation(JavaOperationInvoker.java:153)
  ... 
50 more
Caused by: java.lang.NullPointerException
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getTokenEndpoint(IdentityAndAccessHandlingUtils.java:211)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getAccessToken(IdentityAndAccessHandlingUtils.java:216)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getAccessTokenByROPC(IdentityAndAccessHandlingUtils.java:259)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.refetchTokens(IdentityAndAccessHandlingUtils.java:272)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.buildRequest(IdentityAndAccessHandlingUtils.java:338)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getResource(IdentityAndAccessHandlingUtils.java:370)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getResource(IdentityAndAccessHandlingUtils.java:390)
  at com.ifsworld.projection.IdentityAndAccessHandlingFunctionsImpl.iamUserList(IdentityAndAccessHandlingFunctionsImpl.java:279)
  ... 
55 more
 

It doesn’t show in this stacktrace, but through other channels it was discovered that the issue seem to be a conflicting cidr of the internal k8s network.

The customer had added a zero to the default PodCidrRange in main_config.json which makes it conflict with “some” network resource in the internet public network ranges. (unclear exactly what)
"PodCidrRange":  "100.64.0.0/16"


We have updated the techdoc for 25r1 to be more clear that the k8s internal network (ifs.PodCidrRange) need to be a private network

i.e.
Use RFC 1918 Private IP Ranges: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 to avoid network overlap of other system IP's


Reply