VMware Communities : All Content - vRealize Automation Tools

Hello

I am looking for advice from those with install experience of iaas in vCAC and vRA.

I had a problem with the iaas-service showing as blank and not REGISTERED in the appliance (it did work previously)

I went through the routine of replacing certificates (self signed as this is a POC in a lab) which unfortunately hasn't resolved. I have did this again replacing all certs from the identity appliance / vRA appliance and the IIS certs as well (still no good)

I did have a problem with the vco service but managed to resolve that. I attach a screenshot. is there anything else I can try or something in the logs i should be looking for. Open to any suggestions. Is it worth redeploying the vRA appliance and getting the other components to trust that or am i better starting all over again (which i would love to avoid).

Any help greatly appreciated

Will

Hi,

I am looking for a detailed Virtual Machine provisioning process in vRA, right from what happens when an end user submits the VM Provisioning request and which component of vRA is called first (IaaS Manager?) and with whom the IaaS Manager communicates for getting more directions (Dem-O or Model Manager?). If anyone can provide a detailed insight would be grateful for this support.

Regards,

Nagesh

vRA 7.3 - Simple Deployment

SNOW Jakarta - vRA/SNOW plugin 3.0

We are attempting to restrict the redirection of users to ONLY 100-200 of our 66,000+ potential users. The vra_user role appears to accomplish this for the vast majority. However, we have a fairly large number of users that hold the 'admin' role. It appears that ALL users holding the admin role are redirected as well. As few as 5 of the 60+ admin users will actually administer the vRA components and should be redirected to vRA.

Is there a way to prevent the redirection for non-vRA Admins?

Is anyone know vRO 7.2 work with vRA 6.2.5 ? or vRO 7 only work with vRA ?

and vRA 6.2.5 work with vcenter 6.5 U1 ?

Thanks.

Prerequisites:

1. vCenter Server instance is added in vRA (version v7.2) as a vSphere Endpoint using an administrator user account with full privileges on the vCenter Server.

2. The "vmuser" in the same vCenter Server has fewer privileges e.g. the default "Virtual machine user (sample)” role on the vCenter Server and entitled to a vRA Blueprint that provisions virtual machine(s).

Scenario:

The “vmuser” submits the Blueprint request that creates virtual machine(s) on the vCenter Server.

The Blueprint execution completes successfully creating the specified virtual machine(s). The operations are executed in the context of the service account i.e. the administrator user account with full privileges used for adding the vCenter Server in vRA as vSphere Endpoint.

Also, note that the “vmuser” has no permission to create a virtual machine (it has the default "Virtual machine user (sample)” role on the vCenter Server) and with entitlement to Blueprint in vRA the restricted user created virtual machine(s).

What options are available if I want to execute the vRA Blueprint in the context of the “vmuser” – the user that initiated the vRA Blueprint instead of the service account used for adding the vCenter Server in vRA as a vSphere Endpoint?

Appreciate your thoughts, suggestions, comments on this.

Note: For example, vRealize Orchestrator has an option of using "session per user" while adding vCenter Server in the vRO. vRO with "session per user" mode the vRO workflow operations on the vCenter Server will be executed in the context of the actual vRO user that initiated the vRO Workflow instead of the service account used for adding vCenter Server in vRO. Is there any similar option available in vRA? (vRO permissions - hardening RBAC, Security)

We have a medium scale environment of 2 x vRA appliance, 2 x IaaS servers(web and manager), 2 x DEM servers. It was working fine till we replaced the certificates.

We replace the vRA appliance and IaaS servers with wild card certificates and things starts to fall apart. Typically the Agent status shows "down" and vCenter inventory/state also shows fail. The Networking and Security inventory is also missing as well.

Is wild card certificate supported?

1.sendEBSMessage20(workflow=0230363a-0094-4871-821e-7e8b73349a18) Error in state VMPSMasterWorkflow32.MachineProvisioned phase POST event (queue = f3606e0a-3774-4925-a6d7-ffb4b69f3142)

2. Workflow 'vSphereVCNSInventory' failed with the following exception, vRealize Orchestrator returned an error

We are getting above errors VRA 7.3 , Please someone could assist

Hi,

i would like to be able to deploy kubernetes blueprints, i am looking at the guide below but the article mentions that you need VRA 7.X enterprise. whilst reading through i cant see any features that would require enterprise edition. we have Advanced and i am keen to use this but not sure if i can?

The Kubernetes Blueprint for vRA7 is here! – VMtoCloud.com

if anyone can help with this please?

thanks

I have an XaaS Blueprint with a property that retrieves external values from a vRO Action. It determines the OU for a Windows machine based on the user's selection of a different property on the blueprint. The dropdown in the catalog request gets populated nicely with the expected results. When I submit the request, it bombs on this error:

The value for the 'adDomainOU' field should be among the permitted values.

Anyone else have a similar experience? This is vRA 7.3 using the Azure integration, but I'm not sure that this error is coming from the Azure-integration code specifically. Any suggestions / help?

This error is found in catalina.out:

2017-11-09 20:38:10,232 vcac: [component="cafe:composition-service" priority="INFO" thread="tomcat-http--50" tenant="myTenant" context="L9PgP2cl" parent="L9PgP2cl" token="Adk2wby6"] com.vmware.vcac.composition.service.impl.RequestServiceImpl.validate:889 - Received request for requestedObjectId myTenant!::!AzureWindows2012BJ, catalogRequestId null, requestNumber null, resourceId null

2017-11-09 20:38:10,233 vcac: [component="cafe:composition-service" priority="INFO" thread="tomcat-http--50" tenant="myTenant" context="L9PgP2cl" parent="L9PgP2cl" token="Adk2wby6"] com.vmware.vcac.composition.service.impl.RequestServiceImpl.validateRequest:154 - validateRequest for request type [CATALOG_ITEM], requestedobjectid [myTenant!::!AzureWindows2012BJ]

2017-11-09 20:38:10,400 vcac: [component="cafe:catalog" priority="ERROR" thread="tomcat-http--28" tenant="myTenant" context="L9PgP2cl" parent="" token="L9PgP2cl"] com.vmware.vcac.platform.rest.client.error.ResponseErrorHandler.handleRestError:113 - [Rest Error]: {Status code: 400}, {Error code: 11015} , {Error Source: null}, {Error Msg: The value for the 'adDomainOU' field should be among the permitted values.}, {System Msg: The value for the field with id adDomainOU should be among the permitted values.}

2017-11-09 20:38:10,401 vcac: [component="cafe:catalog" priority="WARN" thread="tomcat-http--28" tenant="myTenant" context="L9PgP2cl" parent="" token="L9PgP2cl"] com.vmware.vcac.catalog.provider.gateway.impl.ProviderRequestGatewayImpl.validateRequest:106 - CatalogItemRequest [RequestId="null" CatalogItemId="c22d820d-128e-440b-a044-217cded10134" CatalogItemName="Azure Windows 2012 - BJ" ServiceName="Azure" TenantName="myTenant" SubtenantName="Azure HCPDev"] : The provider [e2022805-a27c-47d0-849e-3655acf93cba] determined that request was invalid

com.vmware.vcac.platform.rest.client.error.RestException: The value for the 'adDomainOU' field should be among the permitted values.

at com.vmware.vcac.platform.rest.client.error.ResponseErrorHandler.mapRestException(ResponseErrorHandler.java:121) ~[platform-rest-client-7.3.0-SNAPSHOT.jar:?]

at com.vmware.vcac.platform.rest.client.error.ResponseErrorHandler.handleRestError(ResponseErrorHandler.java:100) ~[platform-rest-client-7.3.0-SNAPSHOT.jar:?]

at com.vmware.vcac.platform.rest.client.error.ResponseErrorHandler.handleError(ResponseErrorHandler.java:59) ~[platform-rest-client-7.3.0-SNAPSHOT.jar:?]

at org.springframework.web.client.RestTemplate.handleResponse(RestTemplate.java:700) ~[spring-web-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:653) ~[spring-web-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:613) ~[spring-web-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.client.RestTemplate.postForObject(RestTemplate.java:380) ~[spring-web-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at com.vmware.vcac.platform.rest.client.impl.RestClientImpl.post(RestClientImpl.java:394) ~[platform-rest-client-7.3.0-SNAPSHOT.jar:?]

at com.vmware.vcac.catalog.provider.gateway.impl.ProviderRequestGatewayImpl.validateRequest(ProviderRequestGatewayImpl.java:98) [classes/:?]

at com.vmware.vcac.catalog.service.impl.RequestServiceImpl.applyProviderValidation(RequestServiceImpl.java:1142) [classes/:?]

at com.vmware.vcac.catalog.service.impl.RequestServiceImpl.submitRequest(RequestServiceImpl.java:1040) [classes/:?]

at com.vmware.vcac.catalog.service.impl.RequestServiceImpl.createOrUpdateRequest(RequestServiceImpl.java:883) [classes/:?]

at sun.reflect.GeneratedMethodAccessor4640.invoke(Unknown Source) ~[?:?]

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_131]

at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_131]

at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:92) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at com.sun.proxy.$Proxy916.createOrUpdateRequest(Unknown Source) [?:?]

at com.vmware.vcac.catalog.controller.consumer.ConsumerRequestController.create(ConsumerRequestController.java:95) [classes/:?]

at com.vmware.vcac.catalog.controller.consumer.ConsumerRequestController$$FastClassBySpringCGLIB$$60f2cac8.invoke(<generated>) [classes/:?]

at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204) [spring-core-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:721) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:69) [spring-security-core-4.2.1.RELEASE.jar:4.2.1.RELEASE]

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:656) [spring-aop-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at com.vmware.vcac.catalog.controller.consumer.ConsumerRequestController$$EnhancerBySpringCGLIB$$29602f65.create(<generated>) [classes/:?]

at sun.reflect.GeneratedMethodAccessor4687.invoke(Unknown Source) ~[?:?]

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_131]

at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_131]

at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205) [spring-web-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:133) [spring-web-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:116) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:827) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:738) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:85) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:963) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:897) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:872) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at javax.servlet.http.HttpServlet.service(HttpServlet.java:661) [servlet-api.jar:?]

at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846) [spring-webmvc-4.3.7.RELEASE.jar:4.3.7.RELEASE]

at javax.servlet.http.HttpServlet.service(HttpServlet.java:742) [servlet-api.jar:?]

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) [catalina.jar:8.5.14]

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.14]

at org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) [platform-log4j-web-custom-7.3.0-SNAPSHOT.jar:?]

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.14]

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.14]

at com.vmware.vcac.platform.metrics.servlet.MetricsAbstractInstrumentedFilter.doFilter(MetricsAbstractInstrumentedFilter.java:95) [platform-metrics-servlet-7.3.0-SNAPSHOT.jar:?]

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.14]

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.14]

at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:317) [spring-security-web-4.2.1.RELEASE.jar:4.2.1.RELEASE]

at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:127) [spring-security-web-4.2.1.RELEASE.jar:4.2.1.RELEASE]

at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91) [spring-security-web-4.2.1.RELEASE.jar:4.2.1.RELEASE]