search

Unable to Add Host in Management Plane

hashtag
Problem

  1. Unable to view host in Management Plane for authorization even after running the installer script successfully.

  2. On the affected host, check if it is able to communicate with the Management Plane on port 443.

$ telnet management.plane 443

  • If the above command was successful check /etc/pf9/hostagent.conf for the cert_version followed by requesting the certificate using the same version.

$ less /etc/pf9/hostagent.conf[ssl]cert_version=v4disable=True
$ openssl s_client -connect management.plane:443 -servername broker-v4 -cert /etc/pf9/certs/hostagent/cert.pem -key /etc/pf9/certs/hostagent/key.pem -CAfile /etc/pf9/certs/ca/cert.pem

  • The above command will not return the certificate. This confirms that the host is unable to communicate with the Management Plane using the SNI broker version 4 for certificates.

hashtag
Environment

  • Platform9 Managed OpenStack - v3.6.0 and Higher

  • Hostagent

hashtag
Cause

The SNI broker-v4 endpoint is blocked in the firewall on the customer plane.

hashtag
Resolution

Allow the broker-v4 endpoint communication through the customer firewall.

hashtag
Workaround

  1. Run the below command to check if the affected host is able to request a certificate from the Management Plane using any other version.

  1. If the above command returns the certificate successfully, copy the certificates from one of the working hosts to the affected host.

  1. On the affected hosts, keep the backup of original /etc/pf9/certs directory and then replace the original directory with the certificates copied from the working host.

  2. Restart the pf9-hostagent and pf9-sidekick service and check if the host is able to communicate with Management Plane by running the below command.

PreviousInstance Deployment Failing for Certain AMIs in Platform9 Managed OmniNextSSO Users Have "Email" Field on Support Form

Last updated