The Cloud Extensibility certificate for port 443 is not loaded automatically after a certificate change procedure states successful completion

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• The certificate change procedure reports Success.
• You are unable to access Aria Orchestrator services

Cause

Upon deployment of CExP services, the ingress service is not restarted failing to load the new certificate.

Resolution

The issue is resolved in 8.10.1 and later versions of the Cloud Extensibility Proxy.

Workaround:

Prerequisites

• Please take simultaneous non-memory snapshots of the CExP virtual appliance.
• You have access to root user and password.
• You have SSH or console access to the CExP virtual appliance.

Procedure

1. SSH / PuTTy into the CExP virtual appliance
2. Run the following command

   kubectl -n ingress delete pod -l app=traefik

3. Run the following command to watch the progress. Allow one minute for the ingress service to restart.

   watch kubectl get pods -n ingress

4. Validate that the new certificate was loaded.