Unable to generate the CSR for Component from VCF OPS, ERROR "endpoint.not.found"
search cancel

Unable to generate the CSR for Component from VCF OPS, ERROR "endpoint.not.found"

book

Article ID: 447766

calendar_today

Updated On:

Products

VCF Operations

Issue/Introduction

Unable to generate the CSR for Component from VCF OPS
Generate Certificate Signing Request - Internal fails instantly with

 

Error Code: endpoint.not.found
endpoint.not.found
Certificate task GENERATE_CSR for <COMPONENT FQDN> has failed.  
Error message: Unable to find <COMPONENT TYPE> End point.


com.vmware.vrealize.lcm.plugin.common.vrops.exceptions.CertificateGenericException: Certificate task GENERATE_CSR for <COMPONENT FQDN> has failed.  
Error message: Unable to find <COMPONENT TYPE End point. Marking task as failed at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.handleCertificateTaskFailure(CertTaskUtil.java:177) at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.handleTerminatedTask(CertTaskUtil.java:142) at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.monitorTaskInternal(CertTaskUtil.java:106) at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.monitorCertificateTask(CertTaskUtil.java:82) at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.monitorCertificateTask(CertTaskUtil.java:66) at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.GenerateCSRTask.execute(GenerateCSRTask.java:51) at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:50) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.base/java.lang.Thread.run(Unknown Source)

 

In the logs/ path  /storage/log/vcops/log/component-manager-plugin-<UUID>.log we see 

<ddate && Time> INFO component-manager-plugin 27769 [ops@4413 threadId="1289" threadName="ComponentManagerTaskEngine-7" operationId=""] [com.vmware.vrealize.lcm.platform.automata.service.Task.injec
tFailedEventWithLocale] - Injecting task failure event. Error Code : 'endpoint.not.found', Retry : 'false', Causing Properties : '{ CAUSE ::  }'
com.vmware.vrealize.lcm.plugin.common.vrops.exceptions.CertificateGenericException: Certificate task GENERATE_CSR for <Component FQDN> has failed.  Error message: Unable to find <Component Type> End point. Marking task as failed
        at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.handleCertificateTaskFailure(CertTaskUtil.java:177)
        at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.handleTerminatedTask(CertTaskUtil.java:142)
        at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.monitorTaskInternal(CertTaskUtil.java:106)
        at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.monitorCertificateTask(CertTaskUtil.java:82)
        at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.CertTaskUtil.monitorCertificateTask(CertTaskUtil.java:66)
        at com.vmware.vrealize.lcm.plugin.core.vrops.certificatemanagement.tasks.GenerateCSRTask.execute(GenerateCSRTask.java:51)
        at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:50)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
        at java.base/java.lang.Thread.run(Unknown Source)

Environment

VCF 9.1, VCF Ops 9.1

Cause

Most likely component was moved from one collector to another, but the DataBase entry still exists. 

Resolution

  • To address the issue follow these steps:

    1. Make sure adapter is NOT in warning state like https://knowledge.broadcom.com/external/article?articleNumber=425733, if that is the case, follow the steps
      1. Navigate to Operate > Administration > Integrations
      2. Click Account Tab
      3. Expand "VMware Cloud Foundation" instance
      4. Expand domain (Management/workload) instance
      5. Edit setting of NSXT Adapter instance [case is created for NSX but may be applied for other components]
      6. Either switch to "System Managed Credential" selected
      7. Or click on "Rotate" > "Validate Connection > "Save" if "System Managed Credential" already in use
        *Credentials highlighted below are known to cause problems - i.e. these can expire, need to be updated constantly etc.

       




      NOTE: These steps should be address the issue, but there is a caveat, in that It can take up to 6/12 hours to properly sync/collect data, and allow us to retry the task. 

    2. To force collection Navigate to → Operate → Administration → Configuration → Inventory Management → Adapter Instances → VMware Infrastructure Management adapter instances
    3. Select all Infrastructure Management Adapter rows → Click Start Maintenance



       Select all Infrastructure Management Adapter rows → Click End Maintenance [same as above]

    4. Wait for few mins (up to 5 mins), check if Certificate Operation is successful or same endpoint not found issue is seen.

    5. There is an additional Option which remains internal, as this involves is a DB edit which can impact the VCF Ops Database integrity.
      Should steps 1 and 2 fail to help, open a case with Broadcom Support referencing KB 447766.  

     

Powered by Wolken Software