Exporter reports the error "cannot validate certificate for ###.###.###.### because it doesn't contain any IP SANs" when being scraped by Prometheus in Healthwatch v2

Products

• Operations Manager

Issue/Introduction

When you configure the Prometheus instance to scrape metrics from the Healthwatch Exporter tiles installed on other Ops Manager foundations or from external services or databases, the exporter detected by the Prometheus instance reports the following error:

level=debug ts=2021-xx-xxT##:##:##.###Z caller=scrape.go:1127 component="scrape manager" scrape_pool=tas-stage-b target=https://###.###.###.###:9090/metrics msg="Scrape failed" 
err="Get \"https://###.###.###.###:9090/metrics\": x509: cannot validate certificate for ###.###.###.### because it doesn't contain any IP SANs"

Environment

Ops Manager

Resolution

If the certificate in the Transport Layer Security (TLS) Config Certificate and Private Key field is signed by a self-signed CA, you have to skip SSL validation during TLS handshakes.

To skip SSL validation during TLS handshakes, enable the TLS Config Skip SSL Validation checkbox in the Healthwatch tile > Prometheus Configuration > Additional Scrape Config Jobs.

For more details, refer to Configure Prometheus.