証明書の期限が切れているため、ワークロードセキュリティエージェントに接続できません
環境
- Data Infrastructure Insights(DII)(旧称Cloud Insights )サービス
- ソフトウェアワークロードセキュリティ(SWS)
問題
- ステータスが「
Not Connected
」と表示されるワークロードセキュリティエージェント - エージェントサービスがホストVM内で実行されていない
- リスタート時、数秒後に再び失敗する
agent.log
:
[INFO] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-AcqAuthenticationKeyGenerator] - Certificate signing request is created successfully.
[ERROR] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-CommunicationManager] - Received status code 401 and status response [] for the request POST:/rest/v1/agents/cert
[ERROR] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-CommunicationManager] - Certificate request failed, reason: Sign Agent certificate request failed. Failed to login: cannot find Authorization header
[INFO] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-AcqAuthenticationKeyGenerator] - Restoring agent certs from /opt/netapp/cloudsecure/agent-certs/acqkeys_backup
[ERROR] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-ActorSystemImpl] - Failed to configure agent. Reason: Certificate request failed, reason: Sign Agent certificate request failed. Failed to login: cannot find Authorization header}}