Layer7 API Management

Expand all | Collapse all

No validation of key management service policy during preparation of the gateway for API Portal

Jump to Best Answer
  • 1.  No validation of key management service policy during preparation of the gateway for API Portal

    Posted 04-12-2017 08:10 AM
      |   view attached

    Hello everyone,

    I am trying to set up the API Portal. I use 2 VMs at my host machine, in one lies the only gateway (single node) and the other will be used for the Portal.

    I follow the steps mentioned here for the Policy Manager "https://docops.ca.com/ca-api-developer-portal/3-5/en/set-up-the-api-portal/prepare-the-gateway-for-the-api-portal/3-publish-the-api-portal-services-on-the-gateway", but while the "API Portal Integration Service" policy gets validated without problem, the same doesn't happen when I try to publish the "API Key Management Service".

    It takes a lot of time and eventually I get the message that the programme couldn't retrieve the necessary policies. I attach below the log file that is being created.

    --------------------------------------------------------

    Date/Time:
    2017/04/12 at 13:54:31 CEST

    Build Info:
    CA API Gateway 9.1.00 build 6342, built 20160414204206 by root at build64-rhel6

    System Properties:
    java.version: 1.8.0_73
    java.specification.version: 1.8
    os.name: Windows 7
    os.arch: x86

    Memory Usage:
    190,371,160 bytes: the amount of free memory in the Java Virtual Machine.
    259,522,560 bytes: the total amount of memory in the Java virtual machine.

    Stack Trace:
    java.lang.RuntimeException: java.lang.OutOfMemoryError: Java heap space

    at com.l7tech.util.ExceptionUtils.wrap(Unknown Source)

    at com.l7tech.console.poleditor.PolicyEditorPanel.validateAndDisplay(Unknown Source)

    at com.l7tech.console.poleditor.PolicyEditorPanel.validatePolicy(Unknown Source)

    at com.l7tech.console.poleditor.PolicyEditorPanel.validatePolicy(Unknown Source)

    at com.l7tech.console.action.EditPolicyAction.performAction(Unknown Source)

    at com.l7tech.console.action.BaseAction.performAction(Unknown Source)

    at com.l7tech.console.action.BaseAction.actionPerformed(Unknown Source)

    at com.l7tech.console.action.SecureAction.actionPerformed(Unknown Source)

    at com.l7tech.console.action.BaseAction.invoke(Unknown Source)

    at com.l7tech.console.action.c2.run(Unknown Source)

    at java.awt.event.InvocationEvent.dispatch(Unknown Source)

    at java.awt.EventQueue.dispatchEventImpl(Unknown Source)

    at java.awt.EventQueue.access$500(Unknown Source)

    at java.awt.EventQueue$3.run(Unknown Source)

    at java.awt.EventQueue$3.run(Unknown Source)

    at java.security.AccessController.doPrivileged(Native Method)

    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)

    at java.awt.EventQueue.dispatchEvent(Unknown Source)

    at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)

    at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)

    at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)

    at java.awt.EventDispatchThread.pumpEvents(Unknown Source)

    at java.awt.EventDispatchThread.pumpEvents(Unknown Source)

    at java.awt.EventDispatchThread.run(Unknown Source)

    Caused by: java.lang.OutOfMemoryError: Java heap space

    at java.util.Arrays.copyOf(Unknown Source)

    at java.util.Arrays.copyOf(Unknown Source)

    at java.util.ArrayList.grow(Unknown Source)

    at java.util.ArrayList.ensureExplicitCapacity(Unknown Source)

    at java.util.ArrayList.ensureCapacityInternal(Unknown Source)

    at java.util.ArrayList.add(Unknown Source)

    at com.l7tech.policy.PolicyValidatorResult.addWarning(Unknown Source)

    at com.l7tech.policy.validator.DefaultPolicyValidator.doValidatePath(Unknown Source)

    at com.l7tech.policy.validator.b.call(Unknown Source)

    at com.l7tech.policy.validator.b.call(Unknown Source)

    at com.l7tech.policy.assertion.CurrentInterfaceDescription.doWithInterfaceDescription(Unknown Source)

    at com.l7tech.policy.validator.DefaultPolicyValidator.validatePath(Unknown Source)

    at com.l7tech.policy.validator.AbstractPolicyValidator.doValidation(Unknown Source)

    at com.l7tech.policy.validator.AbstractPolicyValidator.validateWithCurrentAssertionTranslator(Unknown Source)

    at com.l7tech.policy.validator.a.call(Unknown Source)

    at com.l7tech.policy.validator.a.call(Unknown Source)

    at com.l7tech.policy.assertion.CurrentAssertionTranslator.doWithAssertionTranslator(Unknown Source)

    at com.l7tech.policy.validator.AbstractPolicyValidator.validate(Unknown Source)

    at com.l7tech.policy.validator.DefaultPolicyValidator.validate(Unknown Source)

    at com.l7tech.console.poleditor.q.call(Unknown Source)

    at com.l7tech.console.poleditor.q.call(Unknown Source)

    at com.l7tech.gui.util.at.construct(Unknown Source)

    at com.l7tech.gui.util.av.run(Unknown Source)

    at java.lang.Thread.run(Unknown Source)


    CA Technologies Help Centre:
    Before requesting Policy Manager support,
    please gather the following information:
    - Company name
    - Contact person information (email, phone number and location)
    - Details of problem

    Support Email:
    support@layer7.com

    General Email:
    info@layer7.com

    Web Site:
    http://www.layer7tech.com

    Phone:
    604-681-9377 (local)
    1-800-681-9377 (toll free)

    Fax:
    604-681-9387

    ------------------------------------------------------------

    The error message indicates issues with the memory but I can't see how this can be related.

    Thanks a lot for the assistance!

     

    Best regards,

    Panos



  • 2.  Re: No validation of key management service policy during preparation of the gateway for API Portal
    Best Answer

    Posted 04-14-2017 09:55 AM

    Hello, 

     

    I would recommend turning off Policy Validation. Validation time is affected by the number of decision points in a policy. The more decision points, the longer it will take to validate (or hang). The key management service does have quite a bit of decision points, so I would turn off Policy validation and let us know if that helps:

     

    If you are using the thick client of Policy Manager, it is located under "File" > "Preferences" and then uncheck "Policy Validation Feedback".

     

    -Alec Daniello

    APIM Support Engineer



  • 3.  Re: No validation of key management service policy during preparation of the gateway for API Portal

    Posted 04-18-2017 05:27 AM

    Hi Alec,

     

    Thanks for the reply.

     

    Yes this did solve the issue. When I uncheck the "Policy Validation Feedback" option, there is no waiting in opposition to when the option is selected. Thanks again for the guidance.

     

    Best regards,

    Panagiotis Karanikas

    Associate Services Consultant