VMware is aware of this issue. A fix is being considered for a future release. See the Workaround below for additional information.
Workaround:
Prerequisites
- You have the root user and access to the VMs with SSH.
- You have backups of the VMware Aria Automation Orchestrator 8.x appliance(s).
- You must backup your VMware Automation Orchestrator VMs at the same time.
- If you are making the snapshots manually, you must start the snapshots of the second and the third node not more than 40 seconds after you start the snapshots for the first node.
Procedure
- SSH or PuTTy into one of the nodes within the cluster.
- Isolate the vco-app pod ID as this value is generated upon pod creation:
kubectl get pods -n prelude
- Run the following command to enter a bash shell within the vco-app:
kubectl -n prelude exec -it vco-app-7fbc9c65cc-2vm25 -c vco-server-app -- bash
- Run the following command to to expose the vro-configure-inner.sh shell script within the pod:
rpm -hiv --nodeps /vco-cfg-cli.rpm
- Run the following command to update the aliases vco.vsphere.lookup-service.ssl.certificate and vco.sso.ssl.certificate within the keystore. Be sure to replace vSphere-Auth-Provider-URI with the actual URI for the vSphere Authentication provider in the italicized text:
/usr/lib/vco-cli/bin/vro-configure-inner.sh trust --alias vco.vsphere.lookup-service.ssl.certificate --uri vSphere-Auth-Provider-URI --accept
Note: If you see the following message in the Control Center logs
/services-logs/prelude/vco-app/file-logs/vco-controlcenter-app.log
Failed to instantiate [com.vmware.vcac.authentication.http.configuration.ConfigurationDataAdapter]: Constructor threw exception; nested exception is java.lang.NullPointerException
Try the following command in replace of Step #5, then complete Step #6-#9:
/usr/lib/vco-cli/bin/vro-configure-inner.sh reset-authentication --enable-legacy-account
- Type exit followed by the Enter key (carriage return) to exit bash:
- To stop all services, run:
/opt/scripts/deploy.sh --shutdown
- To start all services, run
/opt/scripts/deploy.sh
- Validate the deployment has finished by reviewing the output from the deploy.sh script followed by attempting to access the previously inaccessible URLs.