topic Re: Dynatrace operator 0.14.0 or 0.14.1 issue in Container platforms

Dynatrace operator 0.14.0 or 0.14.1 issue

Mizső — Wed, 19 Mar 2025 13:08:57 GMT

Hi Folks,

FYI. We have faced an issue at many custormers with Dynatrace Operator. We have received ActiveGate token expiring error at containerized AGs. (Fullstack - Managed)

Operator log:

{"error":"getting reference \"XXXXXXXXXXXXXX/linux/activegate:latest\": Get \"https://XXXXXXXXXXXXX/v2 /\": tls: failed to verify certificate: x509: certificate signed by unknown authority","level":"error","logger":"dynakube","msg":"error reconciling DynaKube","name":"dynakube","namespace":"dynatrace","stacktrace":"Get \"https://XXXXXXXXXXXXXXXXX/v2 /\": tls: failed to verify certificate: x509: certificate signed by unknown authority

4 hours ago Dynatrace Operator version 0.14.2 released on GITHUB. I hope it will be reached soon via RHEL channel and there will be an official documenatation about it.

Best regards,

Mizső

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

radek_jasinski — Wed, 15 Nov 2023 13:53:17 GMT

Hi @Mizső

I also had a similar problem on several environments late last week. The log entry was the same and new certificates had to be generated on the client environment side.
However, I do not know if this is a 1 to 1 problem.

Radek

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

Mizső — Wed, 15 Nov 2023 17:57:07 GMT

Hi @radek_jasinski ,

Thanks for the information. Do you refer to the operator token (former api token)?

Access tokens and permissions - Dynatrace Docs

Thanks in advance.

Best regards,

Mizső

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

radek_jasinski — Thu, 16 Nov 2023 12:13:57 GMT

The situation on my client's environment was such that I had to, as I mentioned, generate new certificates (because the client uses its own) and re-generate access tokens. This was happening on a Managed environment.

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

Mizső — Thu, 16 Nov 2023 12:26:04 GMT

Thanks @radek_jasinski, I am going to try it... 😉

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

Mizső — Wed, 19 Mar 2025 13:09:23 GMT

Hi Folks,

The problem was:

{"error":"getting reference \"dynatracexxxxxxxxx.hu/linux/activegate:latest\": Get \"https://dynatracexxxxxxxxxx.hu/v2/\ ": tls: failed to verify certificate: x509: certificate signed by unknown authority"

The solution was:

Creating a config map about the managed DT server cert in the dynatrace project:

Change the dynkube yaml ( skipCertCheck change from true to false and add trustedCAs entry with the above created configmap value) and reload it in the dynatrace project:

I hope it helps.

Best regards,

Mizső

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

radek_jasinski — Mon, 20 Nov 2023 11:36:00 GMT

Thank you for sharing this information:)

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

Jorge-salinas — Tue, 23 Jul 2024 20:55:26 GMT

Do you know how can fix this same but in GCP?

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

Mizső — Sun, 28 Jul 2024 18:21:07 GMT

Hi @Jorge-salinas,

Do you use SaaS Dynatrace form GCP?

Best regards,

Mizső

Re: Dynatrace operator 0.14.0 or 0.14.1 issue

Jorge-salinas — Wed, 31 Jul 2024 15:32:11 GMT

Yes, I´m trying deploy in GCP GKE