Scripted process to configure a proxy on VCF Management Services and VCF Automation

Products

• VCF Operations
• VMware Cloud Foundation
• VMware SDDC Manager / VCF Installer

Issue/Introduction

This knowledge base (KB) article provides an automated process for configuring a proxy on the VMSP

Environment

• VMware Cloud Foundation 9.1

• VCF Automation 9.1

• SDDC Manager 9.1

Resolution

VCF Management Services:

1. Download the attached vmsp-utility.py script 
   
   
2. Identify a Control Plane Node from the VCF Operations UI.
   
   Build > Lifecyle > VCF Management > Components > VCF Services Runtime
   
   
   
   
   
3. Copy the vmsp-utility script to the Control Plane node's /home/vmware-system-user/ directory.
   
   
4. If applicable copy the proxy certificate and/or the TLS inspection cert to the Control Plane node's /home/vmware-system-user/ directory.
   
   
5. SSH into the Control Plane node with vmware-system-user (If password unknown follow steps in, "Resetting the vmware-system-user password for VMware Cloud Foundation Services Runtime")
   
   
6. Elevate to root with sudo -i
 

7. Execute the script:
   
   

   root@####### [ /home/vmware-system-user ]# python vmsp-utility.py
   
   ══════════════════════════════════════════════════════════════════
    VCF Management Service Utility
   ══════════════════════════════════════════════════════════════════
     Please ensure script is running on a Controller node
     vmware-system-user SSH password is required
   
     KUBECONFIG already set to /etc/kubernetes/admin.conf
   
   Resolving Node Host...
     NODE_HOST detected: https://###.###.###.###:5480
   
   Resolving VSP FQDN...
     VSP FQDN detected: ###.###.###
   
   Please enter the SSH password for vmware-system-user:
   
   Successfully generated token!
   
   Authenticating to VSP ([email protected])...
     VSP token generated.
     VSP component ID: ########-####-####-####-############
   
   1. Show proxy configuration
   2. Configure proxy
   3. Remove proxy
   4. Add certificates into truststore
   5. List certificates in truststore
   6. Quit
   
   Select one of the following options: 2
   
   ─── Configure Proxy on Software Depot ───
   
   Proxy Host/Name:
   

VCF Automation:

1. Download the attached vmsp-utility.py script 
   
   
2. Copy the vmsp-utility.py script to the VCF Automation FQDN's /home/vmware-system-user directory
   
   
3. SSH into the VCF Automation FQDN with vmware-system-user (If password unknown follow steps in, "Resetting the vmware-system-user password for VCF Identity Broker & VCF Automation")
   
   
4. Elevate to root with sudo -i
   
   
5. Execute the script.
   

   root@vcfa-runtime-#### [ ~ ]# python vmsp-utility.py
   
   ══════════════════════════════════════════════════════════════════
    VCF Management Service Utility
   ══════════════════════════════════════════════════════════════════
     Please ensure script is running on a Controller node
     vmware-system-user SSH password is required
   
     KUBECONFIG already set to /etc/kubernetes/admin.conf
   
   Resolving Node Host...
     NODE_HOST detected: https://###.###.###.###:5480
   
   Resolving VSP FQDN...
     VSP FQDN detected: ###-####-###-###
   
   Please enter the SSH password for vmware-system-user:
   
   Successfully generated token!
   
   Authenticating to VSP ([email protected])...
     VSP token generated.
     VSP component ID: ########-####-####-####-############
   
   1. Show proxy configuration
   2. Configure proxy
   3. Remove proxy
   4. Add certificates into truststore
   5. List certificates in truststore
   6. Quit
   

Additional Information

Configure a Proxy Server for VCF Management Services Components and VCF Automation