VMC on AWS NSX Manager datasource is reporting Invalid Credentials in Aria Operations for Networks

Products

• VMware Aria Operations for Networks

Issue/Introduction

• VMC on AWS NSX Manager datasource is reporting Invalid Credentials :

 

• The logs in /var/log/arkin/saasservice/* reports:

saasservice.STDOUT-2024-10-11-05.09.39.log.error:org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize": Unable to tunnel through proxy. Proxy returns "HTTP/1.1 504 Gateway Timeout"_ nested exception is java.io.IOException: Unable to tunnel through proxy. Proxy returns "HTTP/1.1 504 Gateway Timeout"
saasservice.STDOUT-2024-10-11-05.09.39.log.error-       at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:791) _[spring-web-5.3.26.jar:5.3.26]
saasservice.STDOUT-2024-10-11-05.09.39.log.error-       at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:717) _[spring-web-5.3.26.jar:5.3.26]
saasservice.STDOUT-2024-10-11-05.09.39.log.error-       at org.springframework.web.client.RestTemplate.exchange(RestTemplate.java:608) _[spring-web-5.3.26.jar:5.3.26]
saasservice.STDOUT-2024-10-11-05.09.39.log.error-       at com.vnera.externalclients.csp.CspClient.loginWithRefreshToken(CspClient.java:332) _[csp-0.001-SNAPSHOT.jar:_]
saasservice.STDOUT-2024-10-11-05.09.39.log.error-       at com.vnera.SaasListener.commands.PlatformRequestCommandUtils.loginWithRefreshToken(PlatformRequestCommandUtils.java:12) _[saasservice-0.001-SNAPSHOT.jar:_]

Environment

vRealize Network Insight 6.x

Aria Operations for Networks 6.x 

Cause

The traffic from the platform(s) on port 443 towards https://console.cloud.vmware.com/ is blocked but should be allowed as per VMC NSX Manager prerequisites.

Resolution

• Allow traffic on port 443 from all platform(s) towards https://console.cloud.vmware.com/
  • To confirm the reach-ability, the below commands can be ran from all platform(s):
    • openssl s_client -connect console.cloud.vmware.com:443
    • curl -ikv -X GET https://console.cloud.vmware.com/csp