Aria Automation (Formerly vRealize Automation) unable to add Workflows in content sources in Service Broker

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• In Aria Automation, workflows are missing and getting errors such as Error downloading catalog item '/workflow/c845####-####-####-####-########f33c' (Error: Content provider error).
• Workflow disappeared from the Content Source
• Unable to import Workflows to the service broker content sources as it fails with an error.
• From the output of the command on the Aria Automation Primary Node "vracli certificate load-balancer --list" returns this message: "Unable to read vRA certificate configuration for 'lb': Missing certificate configuration for lb"
• we get the below error : 

910001: Can not connect to Automation Orchestrator Server.org.springframework.web.reactive.function.client.WebClientRequestException: PKIX path building failed:

sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find      valid certification path to requested target.

 

 

Environment

• VMware Aria Automation 8.x

Cause

• The issue is that the load balancer certificate appears unknown to the vRA and therefore breaks the communication. 

Resolution

• Remove the Load Balancer certificate and configure the Load Balancer with SSL passthrough enabled.
• Once the LB is reconfigured, follow the below steps:

• • Run opt/scripts/deploy.sh script on Aria Automation primary node to redeploy the environment.
  • Delete the vRO integration and add it back from the VRA UI.
  • Remove all workflows from Content Sources and re-add them for them to become available.

Additional Information

Impact/Risks:

• Ability to use Workflows in Service Broker in Aria Automation will be hindered.