NSX Advanced Load Balancer Management Pack integration with Aria Operations not working

Products

• VMware Aria Suite

Issue/Introduction

The purpose of this knowledge base article is to provide a workaround to get the NSX-ALB management pack integration working.

Symptoms:

• The NSX Advanced Load Balancer management pack is not collecting in Aria Operations. The following state is displayed on the instance:
  "Collecting, Status: Error, Message: Unable to Establish Connection to Endpoint NSX Advanced LB", for the remaining or "State: Collecting, Status: None"
  
  
• Same issue is seen after upgrading the NSX Advanced Load Balancer management pack from 1.0 to 1.2 and also upgrading Aria Operations from 8.12 to 8.14
  
  
• Data collection from NSX-ALB does not work. in the NSX-ALB adapter logs, repeated errors as follows are shown:

NSXAdvancedLBAdapter_623150.log.1:Caused by: org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://vasxxxxxx.edu.gov/api//cluster": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

• CPU usage may be high on the Aria Operations appliance(s), and may observe frequent collector crashes as the service spins in an effort to connect to the endpoint

Environment

VMware Aria Operations 8.12.x

VMware Aria Operations 8.14.x

NSX Advanced Load Balancer (AVI) - 22.1.3 (9096)

NSX Advanced Load Balancer MGMT pack - 1.2.22602622

Cause

Aria Operations 8.14.1 integration with NSX-ALB completes and the test is successful, but after the integration is saved, the cloud proxy status shows "No data receiving" or "Unable to Establish Connection to NSX Advanced LB Endpoint"

Deleting the certificate, and testing the integration, works, and can be saved, but the instance state still shows the same error messages.

Resolution

To resolve the issue:

1. Delete the Integration with the NSX-ALB endpoint
2. Open the VMware Aria Operations UI, and navigate to Administration / Certificate Management and remove the NSX certificate
3. Click on import certificate, and manually point it to the location of the save NSX-ALB certificate.

Note: Alternatively, you can navigate to Integrations > Data Sources, and edit the NSX management pack instance(s), click Validate Connection, and accept to pull in the new certificate.