Today when I tried to deploy vRealize Automation 8.0.1 using the Easy Installer, the deployment got stuck on the VraVaPostInstallCheck step and failed this, with the following error:

- LCMVRAVACONFIG590004

- vRA VA deployment Failed at First Boot check on HostName vra.internal.masterwayz.nl

com.vmware.vrealize.lcm.common.exception.EngineException: vRA VA deployment Failed at First Boot check on HostName vra.internal.masterwayz.nl    at com.vmware.vrealize.lcm.plugin.core.vra80.task.VraVaPostInstallCheckTask.execute(VraVaPostInstallCheckTask.java:104)    at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:45)    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)    at java.lang.Thread.run(Thread.java:748)

This is what /var/log/boot.log shows:

root@vra [ /var/log ]# cat boot.log

2020-05-04T16:54:46.585280+00:00 photon-machine root: vami_set_hostname, line 259: Host name has been set to 185.254.168.192.ip.internal.masterwayz.nl

2020-05-04T16:54:46.587959+00:00 photon-machine root: vami_set_hostname, line 98: Inaccessible file: vami_access -rw /etc/mailname failed.

2020-05-04T16:54:46.585270+00:00 photon-machine root[993]: vami_set_hostname, line 259: Host name has been set to 185.254.168.192.ip.internal.masterwayz.nl

2020-05-04T16:54:46.587949+00:00 photon-machine root[998]: vami_set_hostname, line 98: Inaccessible file: vami_access -rw /etc/mailname failed.

2020-05-04T16:54:52.128164+00:00 photon-machine root: vami_set_hostname, line 259: Host name has been set to vra.internal.masterwayz.nl

2020-05-04T16:54:52.130948+00:00 photon-machine root: vami_set_hostname, line 98: Inaccessible file: vami_access -rw /etc/mailname failed.

2020-05-04T16:54:52.128150+00:00 photon-machine root[1192]: vami_set_hostname, line 259: Host name has been set to vra.internal.masterwayz.nl

2020-05-04T16:54:52.130935+00:00 photon-machine root[1197]: vami_set_hostname, line 98: Inaccessible file: vami_access -rw /etc/mailname failed.

Anything that I may do wrong? I'm not sure what I may be doing wrong though. vRLCM and vIDM deployed fine.

Any ideas?

Hi,

I'm trying to do a simple blueprint with Windows and cloudbase-init but struggles to get network connectivity when I try to use "assignment: static" and internal IPAM.

When I deploy the blueprint the deployed VM starts with the network disconnected, but in the OS it got an static IP.

If I choose "assignment: dynamic" it works just fine, why is that?

This is on-premise vSphere

/Rickard

Author : pgilday

URL : http:////docs.vmware.com/en/vRealize-Automation/8.1/Using-and-Managing-Cloud-Assembly/GUID-7358DA34-3015-4076-8054-321B4B597EFB.html

Topic Name : How to set the resource deployment sequence in vRealize Automation Cloud Assembly

Publication Name : Using and Managing vRealize Automation Cloud Assembly

Product/Version : vRealize Automation/8.1

Question :

It's possible to have more than one custom naming for virtual machines inside a project?

I've set up a fresh installation of vRA 8.1, using the LCM workflows. It is a simple environment, with one vIDM and one vRA appliance.

After the installation, I've activated multi-tenancy. The creation of the master and child tenants went on without issues, afterwards I've assigned a certificate to vRA and sync the inventory.

The certificate that is used is a wildcard certificate: *.dom.org, was created on the vIDM and exported into the Locker.

DNS Configuration is:

vIDM: vidm.dom.org 10.0.1.1

     Host A for Master Tenant: master.dom.org 10.0.1.1 < login works

vRA: vra.dom.org 10.0.1.2

     Host A for Child Tenant: ct.dom.org 10.0.1.2

     CNAME: ct.vra.dom.org < error on login

When trying to log in to the Child Tenant, I get redirected to the connector, input my credentials and after beind redirected to the Child Tenant, following error ist displayed in the browser:

Whitelabel Error Page

This application has no configured error view, so you are seeing this as a fallback.

Tue May 05 10:03:22 GMT 2020

[1d5ca56d] There was an unexpected error (type=Internal Server Error, status=500).

General SSLEngine problem

The message is pretty vague. On the page, where the error is displayed, the certificate loaded is the one that vRA got assigned: vRealize Suite Lifecycle Manager Locker CA.

Any ideas on how this can be remedied?

Hi,

I have deployed vRA 8.1 by using easy deployment tool. It's working fine. But, sometimes when I try to open ABX action page, I'm getting Bad Gateway error. Therefore, I have rebooted the vra appliance by following the shutdown prosedure as you can see at below;

Starting and stopping vRealize Automation

I have checked all services with these commands on console; kubectl -n prelude get pods  &  kubectl get pods --all-namespaces  All services and pods appear as running.

But now, I'm getting 404 Page Not Found error on my browser when I try to open vRA GUI. I have deleted vRA environment on vRLM manager and created new vRA environment. It's working fine again but still I'm getting Bad Gateway error on ABX page. Then, I have applied the following KB VMware Knowledge Base . I'm getting the same 404 page not found error

Is this version of vRA is delicate such a that???? Just I'm rebooting appliance and It takes a long time. Result? Nothing is working ...

Hello,

I created a very basic CentOS blueprint which deploys just fine, with one exception: vRA doesn't connect the vm

to the network specified in the blueprint. I have configured a network profile which includes two networks. "NetworkA" and "NetworkB".

In the blueprint I specified "NetworkB" with the "name" property, but everytime I deploy a machine it connects to "NetworkA".

When I use tags select the network with contraints it connects to the correct network. This is not my prefered option though because I have a lot of different networks within NSX-T

and I want to avoid tagging every network that already exists or gets created in the future.

This is my Blueprint code:

formatVersion: 1

resources:

  Cloud_vSphere_Machine_1:

    type: Cloud.vSphere.Machine

    properties:

      image: CentOS8

      cpuCount: 1

      totalMemoryMB: 1024

      networks:

        - network: '${resource.Cloud_Network_1.id}'

  Cloud_Network_1:

    type: Cloud.Network

    properties:

      networkType: existing

      name: "NetworkB"

Hi all.  I'd appreciate some advice on if what I'm trying to do can be done, and where I'm going wrong.  I need a way for end-users to connect to a VM using VMRC without them needing their own login to the VRA console.  I thought it would be possible using the API.

I am able to get resource actions using:

GET/api/consumer/resources/{resourceId}/actions/{resourceActionId}/requests/template

Partial output of the above:

I can perform some actions by first getting the template using:

GET/api/consumer/resources/{resourceId}/actions/{resourceActionId}/requests/template

The problem is that if I try to retrieve the request template for any of the connect actions (console, VMRC or SSH) I get this:

My enviroment is vRA7.6 and NSX-T 3.0.

During Deploy blueprint with NSX-T LB, the below message is shown.

"java.lang.IllegalArgumentException: Could not find NSX-T endpoint with name [null]"

I already register endpoint for vCenter & NSX-T with associations.

Please, let me know solution.

I'm not sure. I am looking for NSX-T library for vRealize Orchestrator. embbeded NSX library is not able to create NSX endpoint for NSX-T.

I am deploying a multi-machine blueprint where by the users picks any number of web app and db servers and then sends the request.   The request starts to run and using the AD integration plugin it tries to go out and pre-stage computer accounts for the machines in the specified OU.  I am getting intermittent success.  It is not consistent.  When it fails it is due to a java.util.concurrent.TimeOut Exception.   At first I considered it was due to me using the SPN of the name as the AD controller.  So I changed that and am now pointing to a specific Domain controller.  I still get the errors more often than not.  I get a successful run about 1 out of 5 times.  I know its not anything in the blueprint it has to be in the AD Plugin or there may be an issue on my clients AD Domain.  Here is a failed workflow run showing that it fails at the PRESTAGE_COMPUTER_ACCOUNT.  Any help troubleshooting would be appreciative.

I have built a dynamic type in vRO and imported it into cloud assembly and attached the CRUD workflows to it. When a consumer requests a new thing be built there are optional inputs and i would like to have some hidden/read only fields depending on input. So i created a custom form in the service broker for the CA BP. However if i specify the input property in the BP it becomes required in SB. If i leave out the input on the BP then the data for the field in SB is not sent to CA. Is there a way to pass non required input values from the service broker to cloud assembly?

Hey everyone,

I'm getting this error every time I try to add any of my vCenters to vRA8.

Unable to validate the provided access credentials: Failed to validate credentials. Error: Failed to connect to vCenter: Your certificate may be untrusted. To trust the certificate validate your account credentials and accept the untrusted certificate. Save your cloud account after validation succeeds. Error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Cloud account: null Task: /provisioning/endpoint-tasks/261cdb286c4ad07559d52415ad8

I have tried restarting the vRA appliance. I've also tried a couple of vCenters and both throw the same error. Nothing pops up to validate any certificate. Curious if anyone else has encountered this?

Thanks,

Nick

Hi Team,

I am using vRA 7.6 I wanted to perform action revert to snapshot using API, I read some old discussion from this community and tried follow the same but no luck, Can you please help me provide some input.

- J

Hello,

I want my blueprint to add a second network only if the value is "linux".

Here is an example :

  resources:

  Cloud_vSphere_Machine_1:

    type: Cloud.vSphere.Machine

    properties:

      image: '${input.image}'

      networks:

        - network: '${resource.Cloud_vSphere_Network_1.id}'

        - network: '${resource.Cloud_vSphere_Network_2.id}'

  Cloud_vSphere_Network_1:

    type: Cloud.vSphere.Network

    properties:

      networkType: existing

  Cloud_vSphere_Network_2:

    type: Cloud.vSphere.Network

    properties:

      networkType: existing

      count: '${input.image == "linux" ? 1 : 0 }

vRA8 indicates an error on the second network line saying that it can't create a network on the existing condition. Is there a way to do that ?

Hi,

I have good experience on vRA7. But, now I'm trying to learn vRA8. I have found a lot of article about Infoblox and vRA8 integration and I have done many scenario with this integration. But, I need to assign manual IP address with user input during deployment.

I can assign IP address of OS during deployment with the following custom properties on vRA 7 ;

VirtualMachine.NetworkN.Name

VirtualMachine.NetworkN.Address

VirtualMachine.NetworkN.SubnetMask

VirtualMachine.NetworkN.Gateway

VirtualMachine.NetworkN.PrimaryDns

VirtualMachine.NetworkN.SecondaryDns

VirtualMachine.NetworkN.DnsSuffix

VirtualMachine.NetworkN.DnsSearchSuffixes

I could not find any documentation about this...

I have created blueprint like this ;

formatVersion: 1

inputs:

  hostname:

    type: string

    title: hostname

resources:

  Cloud_vSphere_Machine_1:

    type: Cloud.vSphere.Machine

    properties:

      image: WinTemplate

      customizationSpec: Demo

      name: '${input.hostname}'

      cpuCount: 1

      totalMemoryMB: 1024

      networks:

        - network: '${resource.Cloud_vSphere_Network_1.id}'

          assignment: static

          address: 172.22.211.211

          deviceIndex: 0

  Cloud_vSphere_Network_1:

    type: Cloud.vSphere.Network

    properties:

      networkType: existing

      networkCidr: 172.22.0.0/16

      constraints:

        - tag: VLAN100

I'm getting this error ;" Unable to find a valid subnet for network 'Cloud_vSphere_Network_1' of type 'EXISTING' with constraints '[VLAN100]', reasons: [Network profile 'All-Networks' was skipped because [Network [Cloud_vSphere_Network_1] allocation: cannot allocate a network with static IP ranges for profile 'All-Networks'.]] (less) "

Is that possible with vRA 8 or do we have to completely change our understanding of the network with vRA8 ?

https://docs.vmware.com/en/VMware-Cloud-services/1.0/ipam_integration_contract_reqs.pdf writes:

Note: The process for creating a custom IPAM integration package for an external IPAM vendor can be complex. To simplify the process, a new SDK is planned. The format of the IPAM integration package may change based on the new SDK. To support backward compatibility, the existing format will continue to be supported but the changed, enhanced format will be preferred.

When can we expect this new SDK released?

In the documentation this appears to exist, yet the blueprint object does not exist for this.  Also if you just try to put it in the YAML, it doesn't give you the properties it claims it should.  Am I missing something?  Is this documentation ahead of the product?  I don't understand what is happening here.

As a matter of fact, none of the AWS specific Loadbalancer information works or is correct.   VRA 8.1 Onprem

https://code.vmware.com/apis/894/vrealize-automation-resource-type-schema

Has anyone ever seen an issue where vRO is trying to run two instances of the same workflow at the same time.  One runs and one fails. The one that fails the error is "The operation is not allowed in the current state".

Example is two different uses submit a BluePrint to run at the exact same time. One will complete and one will fail.

If the workflow is run 100 times but never close together in time, they will always complete OK.

After creating a VM using vRA8.1 on vCenter, I ran add disk from the action menu, but the message below appears and I cannot create it. What could be the cause?

Using vCenter 6.7.0.42000

Team,

I am trying to deploy WordPress using vRealize Automation 8.1 blueprint. I tried to deploy single VM (wordpress + SQL) and different vm's (wordpress & SQL on separate virtual machines). In both the cases VM provisioning works fine but Cloud Config commands is not executing. Provisioned VM's get IP address from DHCP and is able to reach internet.

The OS used in an Vanila Ubuntu 18.x image.

Please suggest if i am missing any step?

Thanks

Hello,

Forgive me, I speak English poorly.  I am trying to connect to VCenter. I am using pyVim:

from pyVim.connect import SmartConnect, Disconnect
import ssl
from pyVim.connect import SmartConnectNoSSL
s = ssl.SSLContext(ssl.PROTOCOL_TLSvl)
s.verify_mode = ssl.CERT_NONE

try:
    c=SmartConnect(host="host", user="user", pwd="password")    print("Valid certificate")
except:    c=SmartConnect(host="host", user="user", pwd="password")    print("Invalid or untrusted certificate")
print(c.CurrentTime())
Disconnect(c)

This code gives me such an error:

/usr/bin/python3.8 /home/vminfo/PycharmProjects/VMware/connect_db.py
Traceback (most recent call last):  File "/home/vminfo/PycharmProjects/VMware/connect_db.py", line 8, in <module>    c = SmartConnect(host="host", user="user", pwd='password')  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 831, in SmartConnect    supportedVersion = __FindSupportedVersion(protocol,  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 714, in __FindSupportedVersion    serviceVersionDescription = __GetServiceVersionDescription(protocol,  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 637, in __GetServiceVersionDescription    tree = __GetElementTree(protocol, server, port,  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 604, in __GetElementTree    conn.request("GET", path)  File "/usr/lib/python3.8/http/client.py", line 1240, in request    self._send_request(method, url, body, headers, encode_chunked)  File "/usr/lib/python3.8/http/client.py", line 1286, in _send_request    self.endheaders(body, encode_chunked=encode_chunked)  File "/usr/lib/python3.8/http/client.py", line 1235, in endheaders    self._send_output(message_body, encode_chunked=encode_chunked)  File "/usr/lib/python3.8/http/client.py", line 1006, in _send_output    self.send(msg)  File "/usr/lib/python3.8/http/client.py", line 946, in send    self.connect()  File "/usr/lib/python3.8/http/client.py", line 1409, in connect    self.sock = self._context.wrap_socket(self.sock,  File "/usr/lib/python3.8/ssl.py", line 500, in wrap_socket    return self.sslsocket_class._create(  File "/usr/lib/python3.8/ssl.py", line 1040, in _create    self.do_handshake()  File "/usr/lib/python3.8/ssl.py", line 1309, in do_handshake    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1108)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/vminfo/PycharmProjects/VMware/connect_db.py", line 11, in <module>    c = SmartConnect(host="host", user="user", pwd="password', sslContext=s)  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 831, in SmartConnect    supportedVersion = __FiSuppondrted ersion(protocol,  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 714, in __FindSupportedVersion    serviceVersionDescription = __GetServiceVersionDescription(protocol,  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 637, in __GetServiceVersionDescription    tree = __GetElementTree(protocol, server, port,  File "/usr/lib/python3/dist-packages/pyVim/connect.py", line 604, in __GetElementTree    conn.request("GET", path)  File "/usr/lib/python3.8/http/client.py", line 1240, in request    self._send_request(method, url, body, headers, encode_chunked)  File "/usr/lib/python3.8/http/client.py", line 1286, in _send_request    self.endheaders(body, encode_chunked=encode_chunked)  File "/usr/lib/python3.8/http/client.py", line 1235, in endheaders    self._send_output(message_body, encode_chunked=encode_chunked)  File "/usr/lib/python3.8/http/client.py", line 1006, in _send_output    self.send(msg)  File "/usr/lib/python3.8/http/client.py", line 946, in send    self.connect()  File "/usr/lib/python3.8/http/client.py", line 1409, in connect    self.sock = self._context.wrap_socket(self.sock,  File "/usr/lib/python3.8/ssl.py", line 500, in wrap_socket    return self.sslsocket_class._create(  File "/usr/lib/python3.8/ssl.py", line 1040, in _create    self.do_handshake()  File "/usr/lib/python3.8/ssl.py", line 1309, in do_handshake    self._sslobj.do_handshake()
ssl.SSLError: [SSL] internal error (_ssl.c:1108)

Process finished with exit code 1

I will be glad to any of your help.