Rotating the Supervisor Control Plane VM Password

Products

• VMware vSphere Kubernetes Service
• VMware vCenter Server

Issue/Introduction

Supervisor Control plane VM password is not auto-rotated by WCP and if there is a requirement to rotate this you can follow the steps outlined in this article.

Environment

vCenter 7.x, 8.x, 9.x

Resolution

To rotate the SupervisorControlPlaneVM passwords, you need to get the cluster ID and initiate a rotate_password API call as outlined below.

1. Log into the vCenter UI as the SSO administrator
2. Go to Developer Center ==> API Explorer
3. Ensure vcenter is the Selected API
4. Scroll to namespace_management/clusters
5. Run the GET for "/api/vcenter/namespace-management/clusters" and get your cluster ID i.e. domain-c8
6. Run the POST for "/api/vcenter/namespace-management/clusters/domain-c8?action=rotate_password" where the cluster is the cluster ID above

After ~60 seconds the password will be rotated.

 

* How Do You Retrieve APIs Using vSphere API Explorer
https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/vcenter-and-host-management/working-with-the-developer-center-host-management/using-the-api-explorer-host-management/retrieve-apis-using-api-explorer-host-management.html

* Vcenter NamespaceManagement Clusters get | vSphere Automation API
https://developer.broadcom.com/xapis/vsphere-automation-api/latest/api/vcenter/namespace-management/clusters/cluster/get/

* Vcenter NamespaceManagement Clusters rotatePassword | vSphere Automation API
https://developer.broadcom.com/xapis/vsphere-automation-api/latest/api/vcenter/namespace-management/clusters/cluster__action=rotate_password/post/

Additional Information