VCF 9.1 - Inventory Sync fails on "converts the brownfield input spec to brownfield check spec"

Products

• VCF Operations

Issue/Introduction

The "Sync Inventory" task  for a domain from VCF Operations 9.1 fails on "converts the brownfield input spec to brownfield check spec"

When you expand this task - it only mentions "credential error". 

 

/var/log/vmware/vcf/domainmanager.log 

CREDENTIAL_ERROR

Failed to get credential of type AUDIT for entity XXXX-XXXXX

Credential not found for entity  XXXX-XXXXX

Environment

VCF 9.1

Cause

The inventory sync is making a brownfield import as part of a "Guardrails" mechanism during inventory synchronization to ensure the environment meets specific configuration standards.

In this scenario - NSX Audit credentials are missing to proceed further than the brownfield-import aspect of the inventory sync task from VCF Operations. 

Resolution

• From SDDC Manager - run this command to find the specific credential issue - note the entity id and user type
  • less -ip CREDENTIAL_ERROR /var/log/vmware/vcf/domainmanager.log 
• Note the output of these commands - replace entity id from step1. This tells us if the entityid for the missing password is (1) NSXT or (2) NSXT_EDGE password.
  • psql -h localhost -U postgres -d platform -c "\x" -c "select * from nsxt where id='XXX-XXX';"
  • psql -h localhost -U postgres -d platform -c "\x" -c "select * from nsxt_edge_cluster where id='XXX-XXX';"

EXAMPLE

> DomainManager.Log

 Failed to get credential of type AUDIT for entity 6b42f22a-8675-417c-8fbc-7cd7b8577a8d

psql -h localhost -U postgres -d platform -c "\x" -c "select id,cluster_fqdn from nsxt where id='6b42f22a-8675-417c-8fbc-7cd7b8577a8d';"

 

-[ RECORD 1 ]+-------------------------------------

id           | 6b42f22a-8675-417c-8fbc-7cd7b8577a8d

cluster_fqdn | VI-2.WLD

 > This confirms AUDIT user is missing from my NSXT manager with this FQDN.

•  Apply the script from this KB using the above information
  • https://knowledge.broadcom.com/external/article/327183/nsx-audit-user-is-missing-from-sddc-pass.html
• Confirm the credential is now updated in SDDC Manager for the entity ID that we just updated.  
  • psql -h localhost -U postgres -d platform -c "\x" -c "select * from credential where entityid='XXX-XXX' and credentialtype='AUDIT';"
• Create new inventory sync task from VCF OPs - Inventory - select domain and  "Sync Inventory"

Additional Information

For further assistance on this - reference this KB number on a case with our support team.

Creating and managing Broadcom cases