How to see Compliance Check regarding Desired State drafts in vCenter 8.x

Products

• VMware vCenter Server

Issue/Introduction

In vSphere 8.0.3 you can manage your clusters using desired state configuration

 

In 8.0.3 release, the draft tab does not have a Check Compliance option in the UI. But this functionality is available through API.

For 8.0.3 release, you can still use the API to run a check compliance and get the diff between configuration on the hosts vs configuration on the draft.

One easy way of running the API is through dcli (present on the vCenter appliance).

 

SSH into the vCenter appliance and run the following:

Go to dcli prompt
dcli +i

Get the cluster id (moid of the cluster)
com vmware vcenter cluster list 

Example of expected output

 

Run check compliance on the latest draft of the cluster. This should return a task id as a string
com vmware esx settings clusters configuration drafts checkcompliance-task --cluster <cluster-moid> --draft latest

In example cluster TestCluster(domain-c5007) has draft present

Query the Check Compliance task to get the result:
com vmware cis tasks get --task <task-id>

Expected out is similar to this

You can also send results of command to test file.

In example to send results to file in tmp folder run this

com vmware cis tasks get --task 524ffadc-9f56-b297-2176-62bf3e7b6821:com.vmware.esx.settings.clusters.configuration.drafts > /tmp/compliance.txt

 

Environment

vSphere 8.x

Cause

By current design draft tab does not have a Check Compliance option in the UI in vSphere 8.0.3

Resolution

The UI draft check compliance has been added in the VCF 9.0