Dynatrace operator 0.14.0 or 0.14.1 issue

[Mizső]

Hi Folks,

FYI. We have faced an issue at many custormers with Dynatrace Operator. We have received ActiveGate token expiring error at containerized AGs. (Fullstack - Managed)

Operator log:

{"error":"getting reference \"XXXXXXXXXXXXXX/linux/activegate:latest\": Get \"https://XXXXXXXXXXXXX/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority","level":"error","logger":"dynakube","msg":"error reconciling DynaKube","name":"dynakube","namespace":"dynatrace","stacktrace":"Get \"https://XXXXXXXXXXXXXXXXX/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority

4 hours ago Dynatrace Operator version 0.14.2 released on GITHUB. I hope it will be reached soon via RHEL channel and there will be an official documenatation about it.

Best regards,

Mizső   

[radek_jasinski]

Hi @Mizső 

I also had a similar problem on several environments late last week. The log entry was the same and new certificates had to be generated on the client environment side.
However, I do not know if this is a 1 to 1 problem.

Radek

[Mizső]

Hi @radek_jasinski ,

Thanks for the information. Do you refer to the operator token (former api token)? 

Access tokens and permissions - Dynatrace Docs

Thanks in advance.

Best regards,

Mizső 

[radek_jasinski]

The situation on my client's environment was such that I had to, as I mentioned, generate new certificates (because the client uses its own) and re-generate access tokens. This was happening on a Managed environment.

[Mizső]

Thanks @radek_jasinski, I am going to try it... 😉

[Mizső · Accepted solution]

Hi Folks,

The problem was:

{"error":"getting reference \"dynatracexxxxxxxxx.hu/linux/activegate:latest\": Get \"https://dynatracexxxxxxxxxx.hu/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority"

The solution was:

Creating a config map about the managed DT server cert in the dynatrace project:

Change the dynkube yaml ( skipCertCheck change from true to false and add trustedCAs entry with the above created configmap value) and reload it in the dynatrace project:

I hope it helps.

Best regards,

Mizső

[radek_jasinski]

Thank you for sharing  this information:)

[Jorge-salinas]

Do you know how can fix this same but in GCP?

[Mizső]

Hi @Jorge-salinas,

Do you use SaaS Dynatrace form GCP?

Best regards,

Mizső

[Jorge-salinas]

Yes, I´m trying deploy in GCP GKE