During the update from version 25 to 26, an error occurs when starting the service

1

Hello! I get an error when starting the service.
I run it with the command kc.sh start --verbose
I use Docker to start it

keycloak-1  | Updating the configuration and installing your custom providers, if any. Please wait.
keycloak-1  | 2024-11-07 23:29:42,721 INFO  [io.qua.dep.QuarkusAugmentor] (main) Quarkus augmentation completed in 14759ms
keycloak-1  | 2024-11-07 23:29:47,029 INFO  [org.keycloak.url.HostnameV2ProviderFactory] (main) If hostanme is specified, hostname-strict is effectively ignored
keycloak-1  | 2024-11-07 23:29:51,022 INFO  [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) Starting Infinispan embedded cache manager
keycloak-1  | 2024-11-07 23:29:51,365 INFO  [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) Persistent user sessions enabled and no memory limit found in configuration. Setting max entries for sessions to 10000 entries.
keycloak-1  | 2024-11-07 23:29:51,365 INFO  [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) Persistent user sessions enabled and no memory limit found in configuration. Setting max entries for clientSessions to 10000 entries.
keycloak-1  | 2024-11-07 23:29:51,366 INFO  [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) Persistent user sessions enabled and no memory limit found in configuration. Setting max entries for offlineSessions to 10000 entries.
keycloak-1  | 2024-11-07 23:29:51,366 INFO  [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) Persistent user sessions enabled and no memory limit found in configuration. Setting max entries for offlineClientSessions to 10000 entries.
keycloak-1  | 2024-11-07 23:29:52,265 INFO  [org.infinispan.CONTAINER] (ForkJoinPool.commonPool-worker-1) ISPN000556: Starting user marshaller 'org.infinispan.commons.marshall.ImmutableProtoStreamMarshaller'
keycloak-1  | 2024-11-07 23:29:55,960 WARN  [io.agroal.pool] (main) Datasource '<default>': JDBC resources leaked: 1 ResultSet(s) and 0 Statement(s)
keycloak-1  | 2024-11-07 23:29:56,413 INFO  [org.keycloak.storage.datastore.DefaultMigrationManager] (main) Migrating older model to 26.0.0
keycloak-1  | 2024-11-07 23:29:56,430 INFO  [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (main) Node name: node_811521, Site name: null
keycloak-1  | 2024-11-07 23:29:58,952 WARN  [io.agroal.pool] (main) Datasource '<default>': JDBC resources leaked: 1 ResultSet(s) and 1 Statement(s)
keycloak-1  | 2024-11-07 23:29:59,077 INFO  [com.arjuna.ats.jbossatx] (main) ARJUNA032014: Stopping transaction recovery manager
keycloak-1  | 2024-11-07 23:29:59,110 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: Failed to start server in (development) mode
keycloak-1  | 2024-11-07 23:29:59,110 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) Error details:: java.lang.NullPointerException: Cannot invoke "org.keycloak.models.ClientModel.setFullScopeAllowed(boolean)" because "adminCliClient" is null
keycloak-1  |   at org.keycloak.migration.migrators.MigrateTo26_0_0.migrateRealm(MigrateTo26_0_0.java:65)
keycloak-1  |   at org.keycloak.migration.migrators.MigrateTo26_0_0.lambda$migrate$0(MigrateTo26_0_0.java:52)
keycloak-1  |   at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:184)
keycloak-1  |   at java.base/java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:197)
keycloak-1  |   at java.base/java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:197)
keycloak-1  |   at java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:179)
keycloak-1  |   at java.base/java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:197)
keycloak-1  |   at java.base/java.util.Iterator.forEachRemaining(Iterator.java:133)
keycloak-1  |   at java.base/java.util.Spliterators$IteratorSpliterator.forEachRemaining(Spliterators.java:1939)
keycloak-1  |   at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:509)
keycloak-1  |   at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:499)
keycloak-1  |   at java.base/java.util.stream.ForEachOps$ForEachOp.evaluateSequential(ForEachOps.java:151)
keycloak-1  |   at java.base/java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateSequential(ForEachOps.java:174)
keycloak-1  |   at java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
keycloak-1  |   at java.base/java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:596)
keycloak-1  |   at org.keycloak.utils.ClosingStream.forEach(ClosingStream.java:128)
keycloak-1  |   at org.keycloak.migration.migrators.MigrateTo26_0_0.migrate(MigrateTo26_0_0.java:52)
keycloak-1  |   at org.keycloak.storage.datastore.DefaultMigrationManager.migrate(DefaultMigrationManager.java:148)
keycloak-1  |   at org.keycloak.migration.MigrationModelManager.migrate(MigrationModelManager.java:33)
keycloak-1  |   at org.keycloak.quarkus.runtime.storage.database.jpa.QuarkusJpaConnectionProviderFactory.migrateModel(QuarkusJpaConnectionProviderFactory.java:202)
keycloak-1  |   at org.keycloak.quarkus.runtime.storage.database.jpa.QuarkusJpaConnectionProviderFactory.initSchema(QuarkusJpaConnectionProviderFactory.java:197)
keycloak-1  |   at org.keycloak.models.utils.KeycloakModelUtils.lambda$runJobInTransaction$1(KeycloakModelUtils.java:274)
keycloak-1  |   at org.keycloak.models.utils.KeycloakModelUtils.runJobInTransactionWithResult(KeycloakModelUtils.java:393)
keycloak-1  |   at org.keycloak.models.utils.KeycloakModelUtils.runJobInTransaction(KeycloakModelUtils.java:273)
keycloak-1  |   at org.keycloak.models.utils.KeycloakModelUtils.runJobInTransaction(KeycloakModelUtils.java:263)
keycloak-1  |   at org.keycloak.quarkus.runtime.storage.database.jpa.QuarkusJpaConnectionProviderFactory.postInit(QuarkusJpaConnectionProviderFactory.java:130)
keycloak-1  |   at org.keycloak.quarkus.runtime.integration.QuarkusKeycloakSessionFactory.init(QuarkusKeycloakSessionFactory.java:105)
keycloak-1  |   at org.keycloak.quarkus.runtime.integration.jaxrs.QuarkusKeycloakApplication.createSessionFactory(QuarkusKeycloakApplication.java:67)
keycloak-1  |   at org.keycloak.services.resources.KeycloakApplication.startup(KeycloakApplication.java:90)
keycloak-1  |   at org.keycloak.quarkus.runtime.integration.jaxrs.QuarkusKeycloakApplication.onStartupEvent(QuarkusKeycloakApplication.java:52)
keycloak-1  |   at org.keycloak.quarkus.runtime.integration.jaxrs.QuarkusKeycloakApplication_Observer_onStartupEvent_GNZ8m5QenZ9h9VNelo7awjUZFDE.notify(Unknown Source)
keycloak-1  |   at io.quarkus.arc.impl.EventImpl$Notifier.notifyObservers(EventImpl.java:351)
keycloak-1  |   at io.quarkus.arc.impl.EventImpl$Notifier.notify(EventImpl.java:333)
keycloak-1  |   at io.quarkus.arc.impl.EventImpl.fire(EventImpl.java:80)
keycloak-1  |   at io.quarkus.arc.runtime.ArcRecorder.fireLifecycleEvent(ArcRecorder.java:156)
keycloak-1  |   at io.quarkus.arc.runtime.ArcRecorder.handleLifecycleEvents(ArcRecorder.java:107)
keycloak-1  |   at io.quarkus.deployment.steps.LifecycleEventsBuildStep$startupEvent1144526294.deploy_0(Unknown Source)
keycloak-1  |   at io.quarkus.deployment.steps.LifecycleEventsBuildStep$startupEvent1144526294.deploy(Unknown Source)
keycloak-1  |   at io.quarkus.runner.ApplicationImpl.doStart(Unknown Source)
keycloak-1  |   at io.quarkus.runtime.Application.start(Application.java:101)
keycloak-1  |   at io.quarkus.runtime.ApplicationLifecycleManager.run(ApplicationLifecycleManager.java:119)
keycloak-1  |   at io.quarkus.runtime.Quarkus.run(Quarkus.java:71)
keycloak-1  |   at org.keycloak.quarkus.runtime.KeycloakMain.start(KeycloakMain.java:146)
keycloak-1  |   at org.keycloak.quarkus.runtime.cli.command.AbstractStartCommand.run(AbstractStartCommand.java:57)
keycloak-1  |   at picocli.CommandLine.executeUserObject(CommandLine.java:2030)
keycloak-1  |   at picocli.CommandLine.access$1500(CommandLine.java:148)
keycloak-1  |   at picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2465)
keycloak-1  |   at picocli.CommandLine$RunLast.handle(CommandLine.java:2457)
keycloak-1  |   at picocli.CommandLine$RunLast.handle(CommandLine.java:2419)
keycloak-1  |   at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2277)
keycloak-1  |   at picocli.CommandLine$RunLast.execute(CommandLine.java:2421)
keycloak-1  |   at picocli.CommandLine.execute(CommandLine.java:2174)
keycloak-1  |   at org.keycloak.quarkus.runtime.cli.Picocli.run(Picocli.java:147)
keycloak-1  |   at org.keycloak.quarkus.runtime.cli.Picocli.parseAndRun(Picocli.java:135)
keycloak-1  |   at org.keycloak.quarkus.runtime.KeycloakMain.main(KeycloakMain.java:106)
keycloak-1  |   at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
keycloak-1  |   at java.base/java.lang.reflect.Method.invoke(Method.java:580)
keycloak-1  |   at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:62)
keycloak-1  |   at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:33)
keycloak-1  | 
keycloak-1 exited with code 0
2

Seems that you have no more default client admin-cli in one of your realms.
I recommend always not to delete default clients, but only disable them, if not needed.

Possible solution:
Restore v25 DB backup, start the server in v25, create the ´admin-cli` client in the realm(s) where it is missing, then try the update again.

1 Like
3

The funniest thing is that we haven’t had this client for over four years. As far as I understand, it was simply renamed, we call it “portal-cli”. I’ll try to rename it to “admin-cli”, thanks!

4

The default clients are not always with every release updated.
Unfortunately, the Java update scripts don’t properly check for null values. I had this several times in the past with various artifacts and unfortunately the people implementing the update scripts do not want see the need to check for nulls…
Thus: never delete default clients. :man_shrugging:

1 Like
5

I’m getting back to you with an answer. I created the “admin-cli” client in the master realm, with default settings. Everything worked fine, thanks again for your help!

1 Like