NSX-T Edge Node Settings Mismatch

Products

• VMware Cloud Foundation

Issue/Introduction

The purpose of this KB is to address the issue with Edge Node Settings Mismatch error in NSXT UI

Symptoms:

NSX-T Manager alarms has the below error

Edge Node Settings Mismatch error. CLI configuration : {"Enable SSH":true}, intent configuration :{"Enable SSH":false} Under get services, customer sees the following configuration under ssh: Service name: ssh Service state: stopped Start on boot: False Root login: enabled

 

Environment

Vmware Cloud Foundation 4.5

Cause

ssh is getting enabled every day due to a cron job that runs daily at 1 AM to refresh the notification about the expiration of all the accounts in the SDDC manager UI.

While fetching these details, particularly for nsxt manager, the ssh is enabled temporarily

Resolution

The issue is fixed in 4.5.1, 5.0

Workaround:

Check sddc manager operationsmanager.log sand confirm you see the cron job triggered

 

 

Run this cron job weekly and then disable the ssh after cron job run, once a week

 

Note: Running the cron job weekly won't refresh the details for a week if the expiration policy is changed for any product meanwhile and no password operation is performed through sddc manager in that timeframe.

 

Following are the steps to run the job at 1 AM every Monday :

• echo "credentials.expiry.cache.refresh.interval=0 0 1 ? * MON" >> /etc/vmware/vcf/operationsmanager/application-prod.properties
• systemctl restart operationsmanager