Werk #15705: Warning about agent updater rule on CME remote site update

Component Setup
Title Warning about agent updater rule on CME remote site update
Date Jul 27, 2023
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.3.0b1
Not yet released
Checkmk MSP (CME)
2.3.0b1 Checkmk MSP (CME)
2.2.0p8 Checkmk MSP (CME)
2.1.0p32 Checkmk MSP (CME)

When updating a remote site in a distributed site setup using the Checkmk Managed Services Edition, the update process may issue a warning like this:

-|  WARNING: Invalid rule configuration detected (Ruleset: agent_config:cmk_update_agent, Title: Agent updater (Linux, Windows, Solaris), Folder: ,
-| Rule nr: 1, Exception: -----BEGIN CERTIFICATE-----
-| MII...
-| ...HqQ==
-| -----END CERTIFICATE-----
-|  is not an allowed value)
-|  Detected 1 issue(s) in configured rules.
-| To correct these issues, we recommend to open the affected rules in the GUI.
-| Upon attempting to save them, any problematic fields will be highlighted.

The root cause for this warning is that on the CME remote site, the underlying agent signing certificates are not available, so the ruleset referring to them can't be verified.

As a workaround you can safely ignore this warning, since the cmk_update_agent rule is never used on a remote site.

However, from now on the warning won't be displayed any longer.

To the list of all Werks