[psa] Update Datadog Agent Cert

Hello Teams,

I believe you've noticed there is recent issue regarding Datadog agent isn't sending any metrics because of certificate problem. It's reported at #backend channel [1]

Here is what you need to do to get the Datadog agent back working:

For ASG instances,

[Squid] Use latest AMI

You can follow this document to see the deployment steps

[Java] Release new app AMI using latest base AMI

Or you can use a script to patch it during your AMI baking process

sudo -u dd-agent -- wget https://raw.githubusercontent.com/DataDog/dd-agent/ca79867ff84d3f52c7d067bcff425d722a97c38c/datadog-cert.pem -O /opt/datadog-agent/agent/datadog-cert.pem && sudo service datadog-agent restart

For non-ASG instances (e.g: MongoDB, Old Proxy)

Use SSM Run Command to patch the fix on running instances

Script

sudo -u dd-agent -- wget https://raw.githubusercontent.com/DataDog/dd-agent/ca79867ff84d3f52c7d067bcff425d722a97c38c/datadog-cert.pem -O /opt/datadog-agent/agent/datadog-cert.pem && sudo service datadog-agent restart

SSM Run Command, only Product Domain Admin can send command to infrastructure tagged with their respective ProductDomain. You might want to filter by tag:ProductDomain , but please be careful with high concurrency.

Ubuntu-14 and Nodejs AMI

We don't support Ubuntu 14 AMI, and Ubuntu14/16-nodejs-6/8 anymore. If your application running on top of those, you would need same patches like above. Please patch it using the step above (non-ASG instance), or incorporate the patches on your build or deployment process.

Any further update of the announcement will be done in this post, and will be notified in #site-infra-channel. Please monitor the thread in #backend channel and also this post thread in #site-infra-channel.

[1] https://tvlk.slack.com/archives/C03A4ENFK/p1590839227242700