Troubleshooting
Central platform
To view the KeySafe 5 application service logs, see Obtaining Logs.
If a Kubernetes resource is not working as expected, use kubectl describe
to display any errors with that resource.
$ kubectl describe -n nshieldkeysafe5 pod nshield-keysafe5-0
[. . .]
Warning FailedMount 6s (x8 over 70s) kubelet MountVolume.SetUp failed for volume "keysafe5-messagebus-tls-volume" : secret "ks5-amqptls" not found
You can also use kubectl get events
to detect errors.
kubectl get events --all-namespaces
For more information on debugging Kubernetes applications, see the Kubernetes documentation here.
KeySafe 5 agent
If the agent fails to start, ensure that the configuration file is present at %NFAST_DATA_HOME%/keysafe5/conf/config.yaml
.
If the configuration file is present but the agent still fails to start, see the Logging: KeySafe 5 agent section for instructions on accessing the log.
If you are using TLS, ensure that the private key and certificate files are present in %NFAST_DATA_HOME%/keysafe5/conf/messagebus/tls
.