PAMSC Utility Appliance cannot start Tibco service

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

A PAMSC Utility Appliance was redeployed from its OVA to resolve an issue where both the eventforwarder and the policyorchestrator would not start (simply reported "Bad request").

Afterward the Tibco logs showed the following warnings:

34001 -   Normal   Scheduled          85s               default-scheduler  Successfully assigned default/pam-tibco-z582r to 10.6.8.108
34001 -   Warning  ErrImageNeverPull  3s (x8 over 85s)  kubelet            Container image "symantec/pam-tibco:1.0.0.184" is not present with pull policy of Never
34001 -   Warning  Failed             3s (x8 over 85s)  kubelet            Error: ErrImageNeverPull

Environment

Privileged Access Management (PAM) 4.0+ with Utility Appliance.

Cause

The warnings indicate that the Tibco container image is not being sent to that node and therefore it could not be started.

Resolution

Redeploying the Tibco patch to the Utility Group reported an error deploying, but it did resolve the issue and the container image was deployed and started successfully.