Hi ,
I try to deploy a fresh new TLS cert on a host that run INSTANA Standard (K3 version)
when i run this command stanctl up --core-tls-crt <lilename.crt> as root in the /root folder
i got this,
 error: 1 error occurred

• invalid tls certificate and key pair.

i have checked the key file with openssl and the key file is OK.

any thoughts on this?
 

------------------------------
Ronny Hammar
------------------------------

Hi Ronny,

Have you specified both the --core-tls-crt and --core-tls-key flags to specify the TLS certificate and key?

Hope it helps.

------------------------------
Bart Bogaerts
Client Engineering - Technology Engineer
IBM Belgium
Brussels
------------------------------

Hi Bart, 

Didn't know that I should put both arguments on the same one liner, I'll try that and let you know.

thanx for the info Bart! 

UPDATE:

Yes, it should be on the same one-liner like this: (running as root)
stanctl up --core-tls-crt <path/filename.crt> --core-tls-key <path/filename.key>

I missed the "AND" in the docs.
but for clarify the docs the one-liner should be printed out as an example.

and dos should also clarify to use a Wildcard TLS cert for common name.
as K3 uses a sub domain to admin INSTANA in K3. 

Thanx again! 

------------------------------
Ronny Hammar
------------------------------

Original Message:
Sent: Tue October 29, 2024 03:40 AM
From: Bart Bogaerts
Subject: error when deploy TLS cert on instana standard (K3)

Hi Ronny,

Have you specified both the --core-tls-crt and --core-tls-key flags to specify the TLS certificate and key?

Hope it helps.

------------------------------
Bart Bogaerts
Client Engineering - Technology Engineer
IBM Belgium
Brussels
------------------------------