After upgrading Fault-Tolerant Data Aggregators (DA) in CA Performance Management (CAPM), consul members output is blank

Products

• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

After upgrading CAPM with DA's in fault tolerant configuration using DA Proxy component, from 20.2.x to 21.2.x, both the DA's status in CAPC console is fine:

But when the following commands are run on any DA or DA Proxy, its not returning the response that was shown in previous 20.2.x versions. For example:

On the DA PROXY:

[root bin]# ./consul members

[root bin]# ./consul members

[root bin]# ./consul operator raft list-peers

Error getting peers: Failed to retrieve raft configuration: Unexpected response code: 403 (rpc error making call: Permission denied)

On DA:

[root bin]# ./consul members

[root bin]# ./consul operator raft list-peers
Error getting peers: Failed to retrieve raft configuration: Unexpected response code: 403 (Permission denied)

Environment

DX NetOps CAPM Release : 21.2 or later

Cause

In release 20.2.8 onwards, we moved to token usage for consul.

Resolution

You need you need to pass -token <token> on command line. The Token is in the file:

</DASharedRepo>/acl-token.properties

For example:

[[email protected]]# ./consul members -token 9845e08e-0201-f027-999f-672b015bf4ce

[[email protected]]# ./consul operator raft list-peers -token 9845e08e-0201-f027-999f-672b015bf4c