[CDA] ERROR RM.PeriodicTasks - Error processing periodic task 'AgentTracker'

Products

• CA Continuous Delivery Automation - Automation Engine

Issue/Introduction

Cannot visualize the CDA agents in the ARA/CDA machine.

Environment: Automation Engine 12.3.2, Release Manager 10.0.2, AE REST SSL is enabled, correct AE api (https) is stated in customer.config, however, ARA/CDA shows a blank agent list.

CDA log shows the following error message:

2020-05-26 11:14:43,262 [65(EUT0/2000)] ERROR RM.PeriodicTasks - Error processing periodic task 'AgentTracker'
Ventum.Bond2.Services.AutomationEngine.Exceptions.AeRestException: Status code:0. Request resource:system/agents. Response: 
   at Ventum.Bond2.AERest.AeRestClient.Execute[T](AeRestRequestBase`1 aeRequestBase) in C:\BuildAgent\work\bondrelease\10.0.2\Projects\Ventum.Bond2.AEBridge\AERest\AeRestClient.cs:line 29
   at Ventum.Bond2.Services.AgentInfoGetter.GetAgents() in C:\BuildAgent\work\bondrelease\10.0.2\Projects\Ventum.Bond2.AEBridge\Services\AgentInfoGetter.cs:line 85
   at Ventum.Bond2.Services.AgentInfoGetter.GetAgentList() in C:\BuildAgent\work\bondrelease\10.0.2\Projects\Ventum.Bond2.AEBridge\Services\AgentInfoGetter.cs:line 48
   at Ventum.Bond2.Services.Deployments.Impl.AgentService.AgentServiceImpl.Update() in C:\BuildAgent\work\bondrelease\10.0.2\Projects\Ventum.Bond2.Services.Impl\Services.Deployments.Impl\AgentService.cs:line 144
   at Ventum.Bond2.LoadBalancing.AbstractPeriodicTask.DoExecute() in C:\BuildAgent\work\bondrelease\10.0.2\Projects\Ventum.Bond2.Infrastructure\LoadBalancing\AbstractPeriodicTask.cs:line 59

 

Cause

ARA/CDA unable to reach AE REST, due to untrusted certificate

Environment

Release : 12.3

Component : AUTOMATION ENGINE

Resolution

In order to communicate with AE, CDA must trust this AE rest endpoint. In case there is a self-signed certificate created, it must be added to CDA's trusted certificate.

From CDA 12.3.3 (RM 10.0.3), a trusted certificate folder can be defined in customer.config (section <trustedCertFolder>)

In previous versions, there is a workaround to add this certificate to Windows Certificate truststore as a Computer account (so any application including CDA will trust the communication from AE Rest endpoints)