Before you can create an on-premises extensibility action integration or Automation Orchestrator 8.x integration for VMware Aria Automation, you must deploy a cloud extensibility proxy on your vCenter Server or VMware Cloud on AWS (VMC) library.
The cloud extensibility proxy is a virtual appliance (VA) used in the configuration of the on-premises extensibility action integrations and VMware Aria Automation Orchestrator 8.x integrations in Automation Assembler.
Prerequisites
- Verify that you have cloud administrator credentials. See Credentials required for working with cloud accounts in VMware Aria Automation.
- Verify that you have the cloud administrator user role. See What are the VMware Aria Automation user roles.
- Verify that the following URLs are accessible:
- ci-data-collector.s3.amazonaws.com – enables Amazon Web Services S3 access for cloud proxy OVA download.
- symphony-docker-external.jfrog.io – allows JFrog Artifactory to access Docker images.
- console.cloud.vmware.com – enables the Web API and cloud proxy service connection to the VMware Cloud service.
- data.mgmt.cloud.vmware.com – enables the data pipeline service connection to VMware Cloud services for secure data communication between cloud and on-premises elements. For non-US regions, substitute the region value. For example, for the UK, use uk.data.mgmt.cloud.vmware.com and for Japan, use ja.data.mgmt.cloud.vmware.com. Other non-US region values include sg (Singapore), br (Brazil), and ca (Canada).
- api.mgmt.cloud.vmware.com – enables the Web API and cloud proxy service connection to VMware Cloud services. For non-US regions, substitute the region value. For example, for the UK, use uk.api.mgmt.cloud.vmware.com and for Japan, use ja.api.mgmt.cloud.vmware.com. Other non-US region values include sg (Singapore), br (Brazil), and ca (Canada).
- The cloud extensibility proxy connects to VMware Cloud services through the API gateway or through the data pipeline service. All connections require TLS 1.2 over communications port 443.
- Verify that the broadcom.com domain is whitelisted on the network where you are deploying your cloud extensibility proxy.
Procedure
Results
You can now use the deployed cloud extensibility proxy in configuring your on-premises extensibility action integration or VMware Aria Automation Orchestrator 8.x integration.
What to do next
You can configure your cloud extensibility proxy to use an external network proxy.
- Log in to the cloud extensibility proxy command line as root.
- Run the /opt/scripts/updateProxy.sh script.
Note: The only required parameter in the /opt/scripts/updateProxy.sh script is
--proxy
. You can see all available script parameters by running the /opt/scripts/updateProxy.sh --help command. For example, the optional parameternoProxy
is used to specify a list of hosts you want to exclude from the configured proxy. The following example includes several of the optional parameters you can include in the /opt/scripts/updateProxy.sh script:updateProxy.sh --proxy <your_proxy_URL> --user <your_proxy_user> --pass <your_proxy_password> --updateInternalProxy --redeploy
You can also back up your cloud extensibility proxy with a snapshot which you can use to restore the proxy.
- Log in to the vSphere Client.
- Take a snapshot of the cloud extensibility proxy.
Note: Verify that the Include the virtual machine's memory and Quiesce guest file system(requires VM tools) option values are set to No.
- To restore your cloud extensibility proxy, revert the node from the snapshot you took.
- Power on the cloud extensibility proxy node.
If you encounter problems with your cloud extensibility proxy, go to KB 93142.