Unable to access Aria Orchestrator UI after certificate replacement.

Products

• VMware Aria Suite

Issue/Introduction

Launching Orchestrator from Aria Automation does not complete with a spinning circle icon continuously.

Orchestrator launches work when using the Orchestrator fqdn directly. 

The error below is visible in /services-logs/prelude/vco-app/file-logs/vco-server-app.log

 

"Logins are restricted to the default for this Orchestrator organization"

Environment

VMware Aria Orchestrator 8.x

Cause

The issue can be caused by a misconfiguration of the authentication provider. 

Resolution

Ensure there is a snapshot of the Orchestrator Appliance before applying the below steps.

1. ssh to the environment
2. Execute vracli vro get-auth
3. Verify it returns CSP auth configuration settings, which should NOT be present in this setup
4. Execute vracli vro reset-auth in order to clear these settings
5. Execute /opt/scripts/deploy.sh
6. Verify that vracli vro get-auth does not return anything
7. Execute kubectl describe deployment -n prelude vco-app and verify that the install rpms container has the AUTH_PROVIDER env variable set to "basic"
8. Login to Control Center and unregister/register the proper authentication provider
9. Wait for the vco-app pod to restart
10. Verify that the user is redirected to login page and logs in successfully when accessing external Orchestrator