Symptoms

  1. After OA upgrade to 7.3 Azure periodic tasks Azure CSP: Archiving and deleting old reports and Azure CSP: check budget cap are failing with error:

    Last execution output   Access denied.

  2. Odin Automation core node is configured with two (or more) IP Addresses for example 10.20.79.10 and 10.20.80.10.

  3. On attempt to access different tabs under Services > Applications > Azure Cloud Solution Provider > Instance following exception appears:

    Access denied.
Error code: access_denied
Error Category: api

  4. azure.log on Azure CSP Endpoint contains records like:

    ============
2018-02-13 01:10:34,829 INFO  [com.odin.azure.server.AuthorizeController] (azure task-9) <APS-APP> A key store file for the server key of an application with the instance id  'f2c11c32-b408-4cfd-93a1-11a22a3344c6' doesn't contain a certificate for 'https://10.20.80.10:6308/' APS controller.
2018-02-13 01:10:34,830 DEBUG [com.odin.azure.server.ServerLogs] (azure task-9) <SERVER> Incoming request 'GET https://10.20.80.19:10443/azure/aps/applications/1994ba5e-2566-4607-8391-1be12f3e4a56/full' has been finished: HTTP 403 Forbidden
============

  5. In core.log on Core Node it represents as the following:

    Feb 13 01:15:26.709 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean opening new connection for application f2c66c32-b408-4cfd-93a1-46a35a1534c6
Feb 13 01:15:26.724 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean closed connection for application ff7d4ae6-2adf-444c-a9af-49ea154bb27b
Feb 13 01:15:26.724 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean Begin request: 'GET https://10.20.80.19:10443/azure/aps/applications/1994ba5e-2566-4607-8391-1be12f3e4a56/base_currency' TLSv1.2
Feb 13 01:15:26.749 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean End request: 'GET https://10.20.80.19:10443/azure/aps/applications/1994ba5e-2566-4607-8391-1be12f3e4a56/base_currency' '403 Forbidden'
Feb 13 01:15:26.750 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.tracer exit by exception: com.parallels.pa.service.connectivity.ejb.EndpointExecutorBean.call com.parallels.pa.service.aps.api.APSEndpointExecutionException: Access denied.

Cause

After Odin Automation platform upgrade APS-Controller-URI was changed from https://10.20.79.10:6308/ to https://10.20.80.10:6308/. Azure CSP application does not support handle such changes. Software-related issue #APSA-19557 has been addressed to Odin platform Development team.

Resolution

Please contact Odin Technical Support to apply workaround.

Additionally please contact pta@odin.com or Technical Account Manager to trace the status of the software issue.

Internal content

Link on internal Article