API for Non-configurable credential rotation UAA Admin

Products

• VMware Tanzu Application Service

Issue/Introduction

Non-configurable credential properties can now be rotated with a new API endpoint: /api/v0/staged/products/:product_guid/rotate_credentials. This can be used to rotate static UAA credentials. It currently only supports property type simple_credentials.

The Getting a staged product’s properties API endpoint has been extended to support filtering by attributes: configurable, credential, type.

Environment

OpsMan 3.3

Resolution

To rotate the credential first check the staged product properties,

Execute the following command:

 

curl -s -k -H ‘Accept: application/json;charset=utf-8’ -H “Content-Type: application/json” -H “Authorisation: bearer $TOKEN” https://<opsmgr-domein>/api/v0/staged/products/cf-#########/properties | python3 -m json.tool

Upon identifying the properties, proceed with the following command to rotate the password:

 

Example of rotating the TAS UAA admin password:

 

curl -v -s -k -X PUT “https://<opsmgr-domein>/api/v0/staged/products/cf-##########/rotate_credentials” -H “Authorisation: Bearer $TOKEN” -H “Content-Type: application/json” -d ‘{ “properties”: {“.uaa.admin_credentials”: {“value”: {“identity”: “admin”,“password”: “Current password”}}}’

Upon receiving a successful response,

{“message”:”Credentials(s) rotated successfully”,”rotated_properties”:[“.uaa.admin_credentials”]}

Proceed with apply change  for the specific tile.

 

Additional Information

API Doc

https://<Opsman-Domain>/docs/#tag/Certificate-Authorities/paths/~1api~1v0~1certificate_authorities~1active~1regenerate/post