Event Endpoint Management continues to be enhanced

Event Endpoint Management continues to be available and enhanced as part of IBM's integration platforms.

End of Marketing announcement for IBM Event Automation

Event Streams and Event Processing are deprecated and no enhancements will be provided. Support and security fixes will be provided in line with published support lifecycle policies. Future event-driven solutions that make use of Apache Kafka and Flink will be delivered by IBM Confluent Platform.

For more information, see the support lifecycle transition and software ordering completion announcement.

Event Gateway fails with SSL errors

Symptoms

The Event Gateway fails to connect to the Event Manager, and throws the following exception:

WARN com.ibm.ei.gateway.eem.core.BackendClient (EEM Backend Client) - [lambda$checkData$15:293] Error updating resources from https://<eem-manager-gateway-route>/clusters : Failed to create SSL connection
javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

Causes

Certificates are automatically renewed by the Cert Manager if you are using it to generate TLS certificates. The Event Manager and the operator-managed Event Gateway pick up the renewed CA certificate. If the Event Manager or the Event Gateway renews at a different time, the Event Manager and the Event Gateway get a different CA certificate.

To confirm this issue, examine the ca.crt in the Event Manager secret <instance_name>-ibm-eem-manager, and compare to the secret in the Event Gateway<instance_name>-ibm-egw-cert.

Resolving the problem

Operator-managed and Kubernetes Deployment Event Gateway Event Gateways

Delete both the Event Manager and the Event Gateway secrets to allow the certificates to be renewed by the Cert Manager.

You might see the following error around 5 minutes after you deleted both the Event Manager and the Event Gateway secrets:

WARN com.ibm.ei.gateway.eem.core.BackendClient (EEM Backend Client) - [lambda$checkData$15:293] Error updating resources from https://quick-start-manager-ibm-eem-gateway-eim.apps.tag.cp.fyre.ibm.com/clusters : javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown

If you see this error, delete the Event Manager pod. After the Event Manager becomes Ready again, the Event Gateway will reconnect to the Event Manager.

Docker Event Gateways

Update the contents of the certificate files supplied in your Docker run command. For example: -v "path:/certs/client.pem" -v "path:/certs/client.key".

If you change the certificate file names, then you must restart the Event Gateway with the updated name in the Docker run command.