DOI - APMIA Azure Extension

Products

DX Operational Intelligence

Issue/Introduction

DX OI 21.3 installed on-prem.

APM infrastructure agent running with azure extension and connected to on-prem DX OI.

APM infrastructure agent returning token error in logs

[INFO] [IntroscopeAgent.RESTMon] [[email protected]@azure.te_no_productivos~~azure_aks OAuthUtils] Refresh token is empty and requesting new token
[INFO] [IntroscopeAgent.RESTMon] [[email protected]@azure.te_no_productivos~~azure_aks OAuthUtils] Connection String : https://login.microsoftonline.com/9744600e-3e04-492e-baa1-25ec245c6f10/oauth2/token
[ERROR] [IntroscopeAgent.RESTMon] [[email protected]@azure.te_serv_comunes~~azure_aks DataCollector] Error in executeUrlTasks is:
java.lang.IllegalArgumentException: Authorization token required
at com.google.common.base.Preconditions.checkArgument(Preconditions.java:142)

Environment

Release : 21.3

Component :

Cause

From the log analysis:

bypassed the original token authentication issue. Indeed, there is a problem accessing Azure

[ERROR] [IntroscopeAgent.RESTMon] [[email protected]@azure.te_serv_comunes~~azure_app_services] Could not retrieve OAuth access token with details OAuth2Details(scope=user_impersonation, grantType=authorization_code, clientId=ea780245-df3f-47cd-a908-f68e099c0f8c, clientSecret=y8_7cCrq-8d2s21mQljp~l8~O_jNLLCXo9, encryption=null, encryptedClientSecret=null, username=null, authorityUri=https://login.microsoftonline.com/9744600e-3e04-492e-baa1-25ec245c6f10, resourceId=https://management.core.windows.net/, apiVersion=null, projectId=5908a7b5-6fcc-4b39-9712-772ae6aca372, clientSecretId=null, authorityTokenUri=null, authProviderCertUrl=null, clientCertUrl=null, accessToken=null, refreshToken=null, expiresAfter=0, headerPrefix=Bearer)
java.util.concurrent.ExecutionException: java.net.SocketException: Network is unreachable (connect failed)
at java.util.concurrent.FutureTask.report(FutureTask.java:122)

Resolution

Need to configure the following two URLs in the reverse proxy server:

- A client request to get Azure OAuth token at root '/' should be configured to the URL, https://login.microsoftonline.com.

- A client request at '/subscriptions/' should be configured to the URL, https://management.azure.com.

Try Reverse proxy instead of Forward;

Refer to "Reverse Proxy Server Settings
" section at the following link to our documentation:

Install and Configure Azure Monitoring

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/dx-apm-agents/SaaS/infrastructure-agent/azure-monitoring/install-azure-monitoring-for-ca-digital-experience-insights.html