Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IQ Access
Fixed In:
7.0.0.1
Opened: Dec 06, 2019 Severity: 4-Minor
Deploying a BIG-IQ APM configuration to managed BIG-IP devices fails with the error: "Failed to update one of more JWKs." The following errors are present in the restjavad.log [WARN][26 Nov 2019 15:06:57 CET][/cm/access/working-config/apm/oauth/jwk-config WorkingJwkConfigCollectionWorker] Worker enrolled in task 7d9ee813-93db-4185-a182-78a5c9aa8cdf. Failing operation with task id cdceb2a7-5b05-4290-9870-d33df96fd957 [ERROR][26 Nov 2019 15:06:57 CET][/cm/access/tasks/discover-config/e584b619-c815-4299-8e72-e62cfb3d17f1/worker AccessDiscoveryTaskWorker] Failed updating JWKs in working config. Reason: java.lang.IllegalStateException: Coordination id cdceb2a7-5b05-4290-9870-d33df96fd957 does not match active task: 7d9ee813-93db-4185-a182-78a5c9aa8cdf at
As a result, you will not be able to deploy APM configurations to managed BIG-IP devices.
You may encounter this intermittent deployment issue when there are high number of OIDC provider objects in your Access configuration, and if you are trying to deploy the configurations to BIG-IP devices in an high availability (HA) pair.
N/A
This issue is now resolved.