configure-leader-follower errand fails with "x509: certificate signed by unknown authority" error

Products

• VMware Tanzu SQL

Issue/Introduction

When rotating CA cert that is used by VMware SQL with MySQL for Tanzu Application Service TLS connections, if you don't add it to Ops Man -> Security -> Trusted Cert, as explained in docs, you may see the following error in configure-leader-follower errand as part of the upgrade-all-service-instances errand of the Mysql Tile.
 

, "result_output" = '{"instance":{"group":"mysql","id":"ae7ccd48-c07a-421b-b74a-c5f2d13bc83a"},"errand_name":"configure-leader-follower","exit_code":1,"stdout":"2023/09/01 08:57:19 Started executing command: configure-leader-follower\n2023/09/01 08:57:19 Failed to get server status for q-m105n2s0.q-g153.bosh: status request failed: Get \"https://q-m105n2s0.q-g153.bosh:8443/status\": x509: certificate signed by unknown authority
(possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"opsmgr-services-tls-ca\")\n","stderr":"","logs":{"blobstore_id":"1f052cf5-0fb6-4335-bbd8-0f64e40e276c","sha1":"d3c99471239e16b05923565f80c4ab942f60e48f;sha512:e2918d1bbe74211c3dd75f4ac6be4af81e899c8c4edde935ceedbf245f8501a369a352c7129a3b7e1da970d9fe0a3a7fe6677b27ed9f5eabcad3b197be2fcef8"}}
', "context_id" = '6ea97c1a-1e37-4f03-89df-6faba7803699' WHERE ("id" = 14051873)

Environment

Product Version: 2.10

Resolution

Adding the new cert to Ops Man -> Security ->Trusted Cert and running Apply Changes again, should solve the issue.