In some cases, it is necessary to directly edit the Ops Manager installation.yml or actual-installation.yml. The most common use case is when a static IP reference needs to be changed or when there is an IP conflict on one of the errand jobs.
Editing the
installation.yml or actual-installation.yml
incorrectly can result in unexpected behavior which could lead to the corruption of existing deployments. We do not recommend editing this file as part of a standard operating procedure. One should only edit this file under the guidance and instruction of a VMware Tanzu Engineer.
1. SSH into the Operations Manager VM and backup the installation.yml
and/or actual-installation.yml.
installation.yml
and/or actual-installation.yml file. Make sure to use the Ops Manager decryption passphrase when prompted.
$ sudo -u tempest-web SECRET_KEY_BASE="s" RAILS_ENV=production /home/tempest-web/tempest/web/scripts/decrypt /var/tempest/workspaces/default/actual-installation.yml /tmp/actual-installation.yml $ sudo -u tempest-web SECRET_KEY_BASE="s" RAILS_ENV=production /home/tempest-web/tempest/web/scripts/decrypt /var/tempest/workspaces/default/installation.yml /tmp/installation.yml
Note: When running decrypt from Ops Manager directory /home/ubuntu you may encounter the error: Permission denied @ dir_chdir - /home/ubuntu. To remedy this, navigate out of /home/ubuntu.
3. Locate the object you are instructed to change and make the edit.
4. Encrypt the modified installation.yml and/or actual-installation.yml and replace the existing one. Make sure to use the Ops Manager decryption passphrase when prompted.
$ sudo -u tempest-web SECRET_KEY_BASE="s" RAILS_ENV=production /home/tempest-web/tempest/web/scripts/encrypt /tmp/actual-installation.yml /var/tempest/workspaces/default/actual-installation.yml $ sudo -u tempest-web SECRET_KEY_BASE="s" RAILS_ENV=production /home/tempest-web/tempest/web/scripts/encrypt /tmp/installation.yml /var/tempest/workspaces/default/installation.yml
5. Continue with the next steps in your supplied procedure.
If you are unsure what to enter for the decryption passphrase, refer to the article below: