[AMBARI-21893] NameNode Heap Usage (Daily) metric alert status flips to UNKNOWN intermittently when AMS HTTPS is enabled.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.0
• Component/s: ambari-metrics
• Assignee: Aravindan Vijayan
• Reporter: Aravindan Vijayan
• Created: 06/Sep/17 17:15
• Updated: 13/Sep/17 03:53
• Resolved: 13/Sep/17 02:54

Description

Underlying Issue

This issue is because of AMS HTTPS + HA scenario. The CA cert file (/etc/ambari-metrics-monitor/conf/ca.pem) found on every host is generated by fetching a specific metric collector host's certificate from the truststore.

This certificate file is being used by alert script, service check and even monitors to talk to collector.

• For example, in a cluster with hosts H1 to H5, let's say there are 2 collectors - H1 & H2.
• On a node H3, let's say the ca.pem file was constructed using the certificate for collector H2.
• Service check or metric monitor on H3 will NOT be able to talk to H1 since it does not have the certificate for that host.

Issue Links

• links to: Review Board