Troubleshooting

Central platform

To view the KeySafe 5 application service logs, see View logs in KeySafe 5.

If a Kubernetes resource is not working as expected, use kubectl describe to display any errors with that resource:

kubectl describe pod nshield-keysafe5-0
...
Warning  FailedMount  6s (x8 over 70s)  kubelet            MountVolume.SetUp failed for volume "keysafe5-messagebus-tls-volume" : secret "ks5-amqptls" not found

You can also use kubectl get events to detect errors:

kubectl get events --all-namespaces

For more information on debugging Kubernetes applications, see the Kubernetes documentation here.

KeySafe 5 agent

If the agent fails to start, ensure that the configuration file is present at %NFAST_DATA_HOME%/keysafe5/conf/config.yaml.

If the configuration file is present but the agent still fails to start, see the Logging: KeySafe 5 agent section for instructions on accessing the log.

If you are using TLS, ensure that the private key and certificate files are present in %NFAST_DATA_HOME%/keysafe5/conf/messagebus/tls.