After update to Ops manager an error occurs when try to fetch credentials from existing clusters

Products

• VMware Tanzu Kubernetes Grid Integrated Edition

Issue/Introduction

After update in the field Director Hostname in Ops Manager UI - BOSH Director - Director Config and apply change only to Bosh director an error occurs during fetching cluster credentials 

tkgi get-credentials <CLUSTER> 

Fetching credentials for cluster <CLUSTER>.

Error: Status: 500; ErrorMessage: <nil>; Description: There was a problem completing your request. Please contact your operations team providing the following information: service: p.pks, service-instance-guid: <ID>, broker-request-id: <ID>, operation: bind - error-message: gathering deployment list Cannot get the list of deployments: Finding deployments: Performing request GET 'https://<BOSH_FQDN>:25555/deployments?exclude_configs=true': Performing GET request: Requesting token via client credentials grant: Performing request POST 'https://<BOSH_FQDN>:8443/oauth/token': Performing POST request: Retry: Post https://<BOSH_FQDN>:8443/oauth/token: tls: failed to verify certificate: x509: certificate is valid for localhost, not <BOSH_FQDN>; ResponseError: <nil>

 

Environment

TKGi Any version 

 

Cause

Changes in the field Director Hostname in Ops Manager UI - BOSH Director - Director Config result in a update of the certificate assosiated with bosh director 

If there is a FQDN defined - the certificate generated will be valid for the FQDN of the Bosh Director 

If the field is not filled - then the certificate genarated will be valid for the IP of the bosh director 

Any subcomponent that are updated and consume bosh director services will fails to communicate because the certificate will be invalid.

Resolution

Apply change to TKGi Tile to allow the changes from Opsman/Bosh director to take place as well and confirm get-credentials works fine