Layer7 API Management

  • 1.  CA_API_Gateway_v9.2.00-CR06 Patch

    Posted Jan 16, 2018 05:33 AM

    Hi,

     

    When I patch our gateway with the CA_API_Gateway_v9.2.00-CR06 patch, I see that the patch was successfully installed but when I issue the following command it doesn't state the patch version:

    rpm -q ssg

    ssg-9.2.00-6904.noarch

     

    Display Patch Management menu

    1) Patch ID CA_API_Gateway_v9.2.00-CR06 (Upgrades the CA API Gateway Software to version 9.2.00-CR06. This patch requires a reboot of the CA API Gateway Appliance after installation.) is INSTALLED, last modified on 2018-01-16T11:17:18+0100

     

    patches.log
    2018-01-16T11:15:08.564+0100 INFO 656 patch.record.logger: 1516097708564:CA_API_Gateway_v9.2.00-CR06:UPLOAD::
    2018-01-16T11:16:11.233+0100 INFO 617 patch.record.logger: 1516097771233::LIST::
    2018-01-16T11:17:18.432+0100 INFO 709 patch.record.logger: 1516097838432:CA_API_Gateway_v9.2.00-CR06:INSTALL::
    2018-01-16T11:17:18.538+0100 INFO 709 patch.record.logger: 1516097838538:CA_API_Gateway_v9.2.00-CR06:PACKAGE_DELETE::
    2018-01-16T11:17:33.663+0100 INFO 745 patch.record.logger: 1516097853663::LIST::
    2018-01-16T11:17:39.929+0100 INFO 673 patch.record.logger: 1516097859929::LIST::

     

    patch_cli_0_0.log

    2018-01-16T11:14:21.816+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running PatchCli patch client with arguments: [-scriptname, patch.sh, upload, /tmp/patch.EqT7yBIT/CA_API_Gateway_v9.2.00-CR06.L7P]
    2018-01-16T11:14:21.829+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using default target: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:14:21.830+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using Patch Service API endpoint: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:14:22.824+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running patch action: UPLOAD
    2018-01-16T11:15:08.761+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: UPLOAD returned 1 results.
    2018-01-16T11:16:09.235+0100 CONFIG 1 com.l7tech.server.processcontroller.patching.client: Logging initialized with defaults from 'jar:file:/opt/SecureSpan/Controller/Controller.jar!/com/l7tech/server/processcontroller/patching/client/resources/logging.properties'
    2018-01-16T11:16:09.264+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running PatchCli patch client with arguments: [-scriptname, patch.sh, list, -sort, ID]
    2018-01-16T11:16:09.273+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using default target: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:16:09.273+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using Patch Service API endpoint: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:16:10.622+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running patch action: LIST
    2018-01-16T11:16:11.380+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: LIST returned 12 results.
    2018-01-16T11:16:17.578+0100 CONFIG 1 com.l7tech.server.processcontroller.patching.client: Logging initialized with defaults from 'jar:file:/opt/SecureSpan/Controller/Controller.jar!/com/l7tech/server/processcontroller/patching/client/resources/logging.properties'
    2018-01-16T11:16:17.602+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running PatchCli patch client with arguments: [-scriptname, patch.sh, install, CA_API_Gateway_v9.2.00-CR06]
    2018-01-16T11:16:17.611+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using default target: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:16:17.612+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using Patch Service API endpoint: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:16:18.517+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running patch action: INSTALL
    2018-01-16T11:17:18.719+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: INSTALL returned 1 results.
    2018-01-16T11:17:31.978+0100 CONFIG 1 com.l7tech.server.processcontroller.patching.client: Logging initialized with defaults from 'jar:file:/opt/SecureSpan/Controller/Controller.jar!/com/l7tech/server/processcontroller/patching/client/resources/logging.properties'
    2018-01-16T11:17:32.004+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running PatchCli patch client with arguments: [-scriptname, patch.sh, list, -sort, ID]
    2018-01-16T11:17:32.012+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using default target: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:17:32.013+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using Patch Service API endpoint: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:17:33.261+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running patch action: LIST
    2018-01-16T11:17:33.787+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: LIST returned 12 results.
    2018-01-16T11:17:38.526+0100 CONFIG 1 com.l7tech.server.processcontroller.patching.client: Logging initialized with defaults from 'jar:file:/opt/SecureSpan/Controller/Controller.jar!/com/l7tech/server/processcontroller/patching/client/resources/logging.properties'
    2018-01-16T11:17:38.548+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running PatchCli patch client with arguments: [-scriptname, patch.sh, list, -sort, INSTALLED::UPLOADED::ERROR::ROLLED_BACK|-LAST_MOD::-LAST_MOD::-LAST_MOD::ID, ::id::description::state::last_mod]
    2018-01-16T11:17:38.556+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using default target: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:17:38.557+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Using Patch Service API endpoint: https://localhost:8765/services/patchServiceApi
    2018-01-16T11:17:39.565+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: Running patch action: LIST
    2018-01-16T11:17:40.049+0100 INFO 1 com.l7tech.server.processcontroller.patching.client.PatchCli: LIST returned 12 results.

     

    Does anyone has any clue?

     

    Regards,

    Hakim



  • 2.  Re: CA_API_Gateway_v9.2.00-CR06 Patch

    Posted Jan 16, 2018 10:11 AM

    Hi hakimcherrat,

     

    As CR07 is released, could you try installing that patch and see if the rpm updated successfully?

     

    Kind Regards,

    Anwar



  • 3.  Re: CA_API_Gateway_v9.2.00-CR06 Patch

    Broadcom Employee
    Posted Jan 16, 2018 10:53 AM

    While I agree with Anwar,

    Depending on the cause cr7 may have the same issue.

    1) Is this a software or appliance?

    2) Can you check disk space make sure plenty of space is available in /opt and /tmp

    3) sspc_0_0.log may contain some useful information.

     

    Thanks



  • 4.  Re: CA_API_Gateway_v9.2.00-CR06 Patch

    Posted Jan 17, 2018 03:26 AM

    Hi,

     

    Thank you all for your reply.

    I will sum up the replies for each of you:

     

    koran08,

    Unfortunately I'm not able to do that because we are bound to strict release ruling here at the customer.
    The CR07 patch is planned for next month.

     

    Charles_Lilienkamp

    1) No it is an appliance gateway (vm)

    2) I've already checked disk space prior to the patch install, everything was ok

    3) I've also checked this log file and the same as the other ones, no errors but however there is no entry that states that the ssg-9.2.00-7581_CR06.noarch.rpm is going to be installed?

    2018-01-16T11:16:40.713+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchVerifier: No user supplied trusted certificates for patch verification.
    2018-01-16T11:16:40.713+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Installing patch CA_API_Gateway_v9.2.00-CR06
    2018-01-16T11:16:40.718+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Executing [/usr/bin/sudo, /opt/SecureSpan/Appliance/libexec/patch_launcher, /opt/SecureSpan/JDK/jr
    e/bin/java, -Dnode.management.api.endpoint=https://10.249.123.241:8765/services/nodeManagementApi, -jar, /opt/SecureSpan/Controller/var/patches/CA_API_Gateway_v9.2.00-CR06.L7P]
    2018-01-16T11:16:47.397+0100 INFO 11 com.l7tech.server.processcontroller.monitoring.MonitoringKernelImpl: NODE.operatingStatus value RUNNING is in tolerance (not equal to RUNNING)
    2018-01-16T11:16:48.065+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Executing resource extraction patch task
    2018-01-16T11:16:48.133+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Getting file sizes
    2018-01-16T11:16:54.280+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Extracting resources to /tmp/patchertemp6920778565578329547.tmp
    2018-01-16T11:16:54.280+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Extracting ssem-1.17.00-6744.noarch.rpm
    2018-01-16T11:16:55.283+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Extracting ssg-9.2.00-7581_CR06.noarch.rpm
    2018-01-16T11:16:59.338+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Extracting ssg-appliance-9.2.00-7581_CR06.x86_64.rpm
    2018-01-16T11:17:01.582+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Extracting jdk-move-script.sh
    2018-01-16T11:17:01.583+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Extracting install.properties
    2018-01-16T11:17:01.583+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Done executing resource extraction patch task
    2018-01-16T11:17:01.585+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Executing shell script patch task
    2018-01-16T11:17:01.585+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Extracting shell script to run
    2018-01-16T11:17:01.593+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Done extracting shell script to run
    2018-01-16T11:17:01.593+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Running shell script
    2018-01-16T11:17:18.077+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Preparing... ###########################################
    #######
    2018-01-16T11:17:18.078+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: installing package ssg-appliance-9.2.00-7581_CR06.x86_64 needs 22MB o
    n the /opt filesystem
    2018-01-16T11:17:18.290+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Preparing... ###########################################
    #######
    2018-01-16T11:17:18.290+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: package ssem-1.17.00-6744.noarch is already installed
    2018-01-16T11:17:18.365+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Patch returned exit code 0
    2018-01-16T11:17:18.366+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Done running shell script
    2018-01-16T11:17:18.366+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Output from patch install: Done executing shell script patch task
    2018-01-16T11:17:18.432+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Patch exit code: 0
    2018-01-16T11:17:18.433+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Patch CA_API_Gateway_v9.2.00-CR06 is installed.
    2018-01-16T11:17:18.433+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Patch files 'autoDelete' is ON; trying to delete patch ID: CA_API_Gateway_v9.2.00-CR06
    2018-01-16T11:17:18.433+0100 INFO 709 com.l7tech.server.processcontroller.patching.PatchServiceApiImpl: Deleting patch ID: CA_API_Gateway_v9.2.00-CR06

     

    Eventually I managed to fix the problem by extracting the ssg-9.2.00-7581_CR06.noarch.rpm from the package and install it on the gateway.
    This is however a bit of a rigorous solution but it was the only way I could think of.
    So to me it seems that the patch script does not installs the .rpm from the package, the question is why?

     

    Regards,

    Hakim  



  • 5.  Re: CA_API_Gateway_v9.2.00-CR06 Patch
    Best Answer

    Broadcom Employee
    Posted Jan 17, 2018 08:04 AM

    Hakim,

    Based on what you supplied I would still think it would be disk space (required in both /tmp and /opt) but its hard to tell. And since you already "extracting the ssg-9.2.00-7581_CR06.noarch.rpm from the package and install it" I dont think we will be able to get to a specific root cause but if you have a problem in CR7 I would suggest a slightly different approach before installing the rpm and opening a support case. 

     

    The fact that your logs have the 

    patch install: Running shell script

    Indicates the shell script for patching is running. 

     

    The 

    Patch install: Preparing... ####

    Indicates that likely rpm o/s command is running the #### are similar to what you would see in the rpm -Uhv.

     

    So since you seem to already mention you unzipped the SSGPatch.L7P

    I would suggest next time running, 

    cd /com/l7tech/server/processcontroller/patching/builder/ShellScriptPatchTask_2

    then run the shell in debug, 

    sh -x ./install.sh /{filetempextractfolder}/com/l7tech/server/processcontroller/patching/builder/ResourcesPatchTask_1

     

    It seems from your output it likely passed to at least here, 

     

    RPMS_TO_INSTALL=$(eval ls ${PATCH_TMP}/ssg-${INSTALLING_GATEWAY_VERSION}*.rpm ${PATCH_TMP}/ssg-appliance-${INSTALLING_APPLIANCE_VERSION}*.${ARCH}.rpm)

    # install the RPMs

    /bin/rpm -Uvh $RPMS_TO_INSTALL

     

    So I suspect the original rpm -Uhv was failing with multiple packages at the same time.

     

    I have previously opened a case for better return code checking of this script internally to add more evaluations to the last return code $?

     

    But I suggest if there are any issues with CR7 to open a support case and run the install.sh in debug as noted above. 

     

    Thanks, Charlie.



  • 6.  Re: CA_API_Gateway_v9.2.00-CR06 Patch

    Posted Jan 17, 2018 08:44 AM

    Hi Charlie,

     

    Thank you very much for the suggestions.

    I will certainly take the steps in consideration at the next patch install 

     

    Regards,

    Hakim