Dynatrace Managed Cluster Nodes on the same host

[mevlut_soner]

Hi all ,

We added a new node at one of the our customer. But the newly added node still does not appear after 3 days. Our customer gets error as below. I wonder that, should any port need to open between two cluster nodes on the same host ?

2019-10-14 06:12:22 UTC WARNING [<default,0x1>] [GlobalLicenseWorker] Couldn't verify MC connection due to an exception.
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
        at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316)
        at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310)

Best Regards.

Mevlüt

[skrystosik]

You've added extra DT node on the same host? This is not supported option I suppose. In general network ports should be opened if first node is working fine on the same machine. But there is issue with SSL certificate validation. I'm not sure if there isn't any issue with certs because od architecture you've picked. Why did you do something like that?

Sebastian

[mevlut_soner · Accepted solution]

Yes, there is a certificate validation problem. We solve this below steps. Thank you.

Add an SSL certificate to Dynatrace Managed cluster TrustStore

[eduard_van_der1]

Please open a ticket for this so support can look into the issue.

It seems MC connectivity is having issues but that's likely a small part of the observed problems here.