プロキシサーバの変更後に、Cloud Secure /ワークロードセキュリティエージェントデーモンサービスを開始できません
環境
- Cloud Insights ワークロードセキュリティ
- プロキシ経由でインストールされたエージェント
問題
- プロキシサーバの変更後にCloud Workload Security Agent Daemon Serviceを開始できません。
# systemctl status cloudsecure-agent.service
● cloudsecure-agent.service - Cloud Secure Agent Daemon Service
Loaded: loaded (/usr/lib/systemd/system/cloudsecure-agent.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2023-04-03 18:26:37 JST; 42min ago
Process: <PID> ExecStart=/bin/bash /opt/netapp/cloudsecure/agent/bin/cloudsecure-agent (code=exited, status=1/FAILURE)
Main PID: <PID> (code=exited, status=1/FAILURE)
Apr 03 18:26:37 hostname systemd[1]: cloudsecure-agent.service: Service RestartSec=15s expired, scheduling restart.
Apr 03 18:26:37 hostname systemd[1]: cloudsecure-agent.service: Scheduled restart job, restart counter is at 18.
Apr 03 18:26:37 hostname systemd[1]: Stopped Cloud Secure Agent Daemon Service.
Apr 03 18:26:37 hostname systemd[1]: cloudsecure-agent.service: Start request repeated too quickly.
Apr 03 18:26:37 hostname systemd[1]: cloudsecure-agent.service: Failed with result 'exit-code'.
Apr 03 18:26:37 hostname systemd[1]: Failed to start Cloud Secure Agent Daemon Service.
/opt/netapp/cloudsecure/agent/logs/agent.log
レポートエラー:
2023-04-03T09:26:22,148 [ERROR] [prod] [<tenant_id>] [<agent_id>] [agent-ActorSystemImpl] - Failed to configure agent. Reason: Http request GET:/rest/v1/agents/login/<tenant_id> failed with error PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target