Generate the hybrid configuration file when custom certificates are not used for Ingress and Kafka clusters.
Hybrid deployments only: Generate this file when custom certificates are not used for the Ingress and Kafka clusters
Ensure that you have the latest CA certificates obtained after installing services. If not, update the CA certificates and regenerate the hybrid configuration file after restarting the service.
- On the Virtual Appliance, generate the hybrid configuration:
cd ~/appd-charts/utils
bash prepare-hybrid.sh
Sample output:
Writing Kafka CA Cert
Writing Schema registry CA Cert
Writing AnomalyDetectionKafkaSSLProducer
Writing AnomalyDetectionKafkaConsumerSSL
Writing configure script
Creating archive of hybrid config
hybrid-config/
hybrid-config/kafka-ca.crt
hybrid-config/AnomalyDetectionKafkaConsumerSSL
hybrid-config/configure.sh
hybrid-config/schema-registry-ca.crt
hybrid-config/AnomalyDetectionKafkaSSLProducer
Completed
The script creates hybrid-config.tar, containing Kafka and Schema Registry CA certificates, producer and consumer SSL configuration, and configure.sh.
- Copy the
hybrid-config.tar file to the standalone Controller.
- Extract and run the configuration script:
tar -xvf hybrid-config.tar
- Change to the extracted configuration directory and run the script:
cd ~/hybrid-config
bash configure.sh
- Enter the actual Controller home when prompted:
Controller home [/opt/appdynamics/platform/product/controller]: /path/to/platform/controller
Note:
Virtual Appliance certificates expire after five years. Regenerate the hybrid configuration and copy updated certificates to the Classic Controller as part of certificate rotation.
For more information on how to audit and rotate certificates in Virtual Appliance, see Manage Virtual Appliance Certificates.
- Restart the classic Controller.