False Positive Alert Triggered For Unreachable Identity Broker In VCF Operations

Products

• VCF Operations

Issue/Introduction

VCF Operations may trigger a false positive alert indicating that the Identity Broker is unreachable or unhealthy. This occurs when stale VIDB components remain in the environment after an upgrade or removal, causing Fleet LCM to fail status checks.

• • Identity Broker is not reachable and Identity broker is unhealthy.
  • False positive alert in VCF Operations.
  • Keywords: VCF Operations, VIDB, Identity Broker, Fleet LCM, getCredentials, unhealthy.
    
    ########################## - 0ms.\r\n\n getCredentials - ########################## - 2ms.\r\n\n VCF Operations Controller-<REDACTED_HOSTNAME>.PlatformServer.getCredentials - ########################## - 2ms.\r\n AuthorizationCheckerImpl.checkIfUserHasPrivileges - ########################## - 0ms.\r\n Execute(ControllerInterface.getCredentials) - ########################## - 2ms.\r\n VCF Operations Controller-<REDACTED_HOSTNAME>.ControllerServer.getCredentials
{"id":"#########-####-####-####-#########","vidbResourceId":"#########-####-####-####-#########","vidbHost":"VIDB_FQDN","vcGUID":"#########-####-####-####-#########","vcfInstanceId":"#########-####-####-####-#########","clientId":"tenant_admin_client","clientSecret":null
"id":"#########-####-####-####-#########","vidbResourceId":"#########-####-####-####-#########","vidbHost":"stale_VIDB_FQDN","vcGUID":"#########-####-####-####-#########","vcfInstanceId":"#########-####-####-####-#########","clientId":"tenant_admin_client","clientSecret":null,
    
    
  • Identified stale VIDB component in the VCF Operations inventory and deregistered VIDB component from the fleet.

Environment

• VCF Operations 9.1.0.0

Cause

VIDB cleanup routines fail to remove stale records left in the Fleet LCM locker, causing VCF Operations to trigger false positive alerts reporting the Identity Broker as unreachable and unhealthy.

Resolution

1. Upgrade VIDB from version 9.1.0.0 to version 9.1.0.100.
2. Confirm in VCF Operations that the Identity Broker status displays as reachable and healthy, and that false positive alerts are no longer generated.