Instana

 View Only

  • 1.  error when deploy TLS cert on instana standard (K3)

    Posted Mon October 28, 2024 09:21 AM

    Hi ,
    I try to deploy a fresh new TLS cert on a host that run INSTANA Standard (K3 version)
    when i run this command stanctl up --core-tls-crt <lilename.crt> as root in the /root folder
    i got this,
     error: 1 error occurred

    • invalid tls certificate and key pair.

    i have checked the key file with openssl and the key file is OK.

    any thoughts on this?
     



    ------------------------------
    Ronny Hammar
    ------------------------------


  • 2.  RE: error when deploy TLS cert on instana standard (K3)
    Best Answer

    Posted Tue October 29, 2024 03:40 AM

    Hi Ronny,

    Have you specified both the --core-tls-crt and --core-tls-key flags to specify the TLS certificate and key?

    Hope it helps.



    ------------------------------
    Bart Bogaerts
    Client Engineering - Technology Engineer
    IBM Belgium
    Brussels
    ------------------------------

    Original Message


  • 3.  RE: error when deploy TLS cert on instana standard (K3)

    Posted Tue October 29, 2024 04:53 AM
    Edited by System Test 11 days ago

    Hi Bart, 

    Didn't know that I should put both arguments on the same one liner, I'll try that and let you know.

    thanx for the info Bart! 

    UPDATE:

    Yes, it should be on the same one-liner like this: (running as root)
    stanctl up --core-tls-crt <path/filename.crt> --core-tls-key <path/filename.key>

    I missed the "AND" in the docs.
    but for clarify the docs the one-liner should be printed out as an example.

    and dos should also clarify to use a Wildcard TLS cert for common name.
    as K3 uses a sub domain to admin INSTANA in K3. 

    Thanx again! 



    ------------------------------
    Ronny Hammar
    ------------------------------

    Original Message