Can AWS Fargate Deployment Ignore SSL Certificate?

mengsuan_koe1 — Tue, 09 Nov 2021 14:53:23 GMT

I am attempting to deploy OneAgent on AWS Fargate using Runtime Injection method as depicted here on documentation: https://www.dynatrace.com/support/help/setup-and-configuration/setup-on-cloud-platforms/amazon-web-services/deploy-oneagent-on-aws-fargate/#expand-runtime-injection-3920

However the Dynatrace cluster I am using is a on-prem managed one, which currently does not have valid SSL certificate due to custom domain name used. (Dynatrace Managed CMC does not support getting Let's Encrypt certificate with custom domain name)

Is there a parameter that I can put for AWS to ignore the certificate of Dynatrace Managed? Like a --no-check-certificate kind of workaround.

Re: Can AWS Fargate Deployment Ignore SSL Certificate?

rodrigo_alvare1 — Mon, 08 Nov 2021 14:40:48 GMT

Hi,
this is a limitation in AWS Fargate, here there is a discussion about that topic and possible workarounds like use an EC2 instance and add insecure repository or use ECR https://github.com/aws/containers-roadmap/issues/740

The managed cluster should come automatically with a Let's Encrypt cert looking like https://xxxxx.dynatrace-managed.com , that should work in this scenario

Regards

topic Can AWS Fargate Deployment Ignore SSL Certificate? in Cloud platforms

Can AWS Fargate Deployment Ignore SSL Certificate?

Re: Can AWS Fargate Deployment Ignore SSL Certificate?