VMC or vCF Cloud Account details are updated but enumeration continues to fail

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• Health check and enumeration have failed for a vCF or VMC cloud account.
• When the account is validated and saved successfully, the health check status turns green, but enumeration still fails.
• You see the health check failure messages similar to:

  Failed to send enum request. Endpoint [/resources/endpoints/id] is in SUSPENDED state.

Environment

VMware Aria Automation 8.13.x
VMware vRealize Automation 8.11.x
VMware vRealize Automation 8.10.x
VMware Aria Automation 8.14.x
VMware Aria Automation 8.12.x
VMware Aria Automation 8.x

Resolution

This issue is resolved in VMware Aria Automation 8.16.0. See the Workaround section below for additional details.

Workaround:

Prerequisites

• You have SSH access to the appliances running in the cluster.
• You have root username and password to login to the appliances.

Procedure

1. Acquire the associated vSphere account id:
   1. For vCF: take the last segment from the url in customProperty "vsphere"
   2. For VMC: take the last path segment from the "cloud-account" property of "_links" property in "enabledRegions" list.
2. Using curl run a GET against /iaas/api/cloud-accounts/account-id

   curl --location --request GET 'https://AriaAutoFQDN/iaas/api/cloud-accounts/account-id' \ --header 'Authorization: Bearer cloud_admin_token'

Note: Update account-id with your correct cloud account ID.
Note: Update cloud-admin-token with the correct bearer token.
Note: Update AriaAutoFQDN with your correct FQDN.

3. PATCH in new properties to reset the enumeration state using /provisioning/uerp/resources/endpoints/last-segment-uuid

   curl --location --request PATCH 'https://AriaAutoFQDN/provisioning/uerp/resources/endpoints/last-segment-uuid' \
   --header 'Authorization: Bearer cloud-admin-token' \
   --header 'Content-Type: application/json' \
   --data-raw '{
       "entriesToAdd": {
           "customProperties": {
               "endpointHealthCheckState": "AVAILABLE",
               "consecutiveFailuresCount": "0",
               "lastFailureTimestampMillis": "0"
           }
       },
       "kind":"com:vmware:xenon:common:ServiceStateMapUpdateRequest"
   }'

Note: Update AriaAutoFQDN, last-segment-uuid, and cloud-admin-token with the correct information.

Additional Information

See the following list for additional issues related to Cloud Accounts: 

• vSphere Cloud Account certificate is changed causing errors such as Unavailable for Deployment and Failed to validate
• Data collection is failing for vSphere+ Cloud Account in Aria Automation
• Save button is greyed out in vSphere Cloud Account configuration after successful password validation.
• vCenter Cloud Account data collection fails if UTF_8 characters are used in a password which may lock the service account

Impact/Risks:
Enumeration will not succeed until the associated vSphere account is reset.