Hi Team, I am trying to use external metric report...
# troubleshootinga
Amenreet Singh Sodhi
01/16/2023, 5:15 AMHi Team, I am trying to use external metric reporter for flink, but I am getting the following error:
Copy code
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested targetz
Zsombor Chikán
01/16/2023, 9:28 AMHey @Amenreet Singh Sodhi
This error typically occurs when the SSL/TLS certificate of the external metric reporter server is not trusted by the Java runtime that is running your Flink job. To resolve this issue, you can either import the certificate of the external metric reporter server into the JRE's truststore (cacerts) or disable certificate validation altogether.
Zsombor Chikán
01/16/2023, 9:28 AMTo import the certificate into the truststore, you can use the keytool command that comes with the JDK. Example command to import a certificate from a file called external_metrics.crt:
Copy code
keytool -import -alias external_metrics -file external_metrics.crt -keystore $JAVA_HOME/jre/lib/security/cacertsZsombor Chikán
01/16/2023, 9:30 AMYou will be prompted to enter the keystore password, which is typically "changeit" for the cacerts file by default. (But here is a link about it: https://backstage.forgerock.com/knowledge/kb/article/a40125620 )
Zsombor Chikán
01/16/2023, 9:32 AMAlternatively, you can disable certificate validation by configuring a custom SSLContext for the HttpClient used by Flink metric reporter. This can be done by adding the following code snippet to your Flink job configuration:
Copy code
import javax.net.ssl.SSLContext;
import org.apache.flink.shaded.okhttp3.OkHttpClient;
OkHttpClient client = new OkHttpClient.Builder()
.sslSocketFactory(sslContext.getSocketFactory(), (X509TrustManager) trustAllCerts)
.hostnameVerifier((hostname, session) -> true)
.build();Zsombor Chikán
01/16/2023, 9:32 AMyou can find some info about okhttp here: https://nightlies.apache.org/flink/flink-statefun-docs-release-3.2/docs/modules/http-endpoint/
Zsombor Chikán
01/16/2023, 9:33 AM(however, disabling certificate validation is not recommended for production use, as it can leave your application vulnerable to man-in-the-middle attacks)
a
Amenreet Singh Sodhi
01/16/2023, 10:44 AMThanks for the help, Have added the requried certificates. Now able to see data in external metrics
✅ 1