The Cloud Consumption Interface includes a command line interface that administrators and developers can use to perform Supervisor Namespace tasks programatically.

Note: As of April 2023, the Cloud Consumption Interface functionality is available upon request. Contact your VMware representative for more information.

To use the command line interface, you download a kubectl plug-in. The plug-in adds kubernetes Custom Resource Definitions (CRD) to the standard Kubernetes API server for CCI and provides CCI-specific commands that administrators and users can use to run CLI commands for configuration and troubleshooting.

Download the CCI kubectl plug-in

Note: Before downloading the CCI kubectl plug-in, you must have the Kubernetes tool installed. For information about the Kubernetes tool, see
To download the CCI kubectl executable:
  1. Use your My VMware credentials to log in to the Cloud Services Console.
  2. Click to launch VMware Cloud Consumption Service.
  3. On the Cloud Consumption Interface Launchpad, click DOWNLOAD PLUGIN.
Extract the application from the zip file and add the location of the application to your path. For example, if the application is in /Users/<username>/Downloads, then add Downloads to your path or:
export PATH=/Users/<username>/Downloads:$PATH

Administrators can use the CCI kubectl to create cloud accounts, create and configure projects, regions, and Supervisor namespace classes. Users have some limited access to the CCI kubectl CLI commands.

Obtain an API Token

Before you can use the CCI kubectl, you must obtain an API token. To generate the token, you use the VMware Aria Automation Console:
  1. Use your My VMware credentials to log in to
  2. Click the drop-down arrow by your name.
  3. Click My Account.
  4. Click the API Tokens tab.
    1. Enter a Token Name.
    2. Under Define Scopes, select the Organization Roles and Service Roles. The Service Role selections depend on the level of access for the user.
      Access level Organization Role Service Role
      admin Organization Member VMware Aria Automation > Service Broker > Service Broker Administrator


      vSphere+, vSAN+, and ... > Cloud Administrator
      user Organization Member VMware Aria Automation > Service Broker > Service Broker User
      Note: To access Supervisor Namespaces as an SSO user, the API token for the Automation Service Broker User is assigned permissions for vCenter Supervisor Proxy by default. Do not remove the permission if the API token will be used to access Supervisor Namespaces using the proxy.
    3. Click Generate.
    4. Select the OpenID check box.
    5. When the Token Generated window displays a token with the name that you specified, click COPY.

Log in and create context

Use your API token to log in to the CCI server and create Supervisor Namespace context.

kubectl cci login --server --token <YOUR_API_TOKEN>

To see CCI content, change the default context to CCI.

kubectl config use-context cci
Note: If your API token is configured with the Automation Service Broker admin role, you can choose to use the --skip-set-context argument. In this way, you will avoid logging into all supervisor namespaces.
The following example shows how to create a context for a specific Supervisor Namespace from a specific project.
kubectl cci set-context --project cci-explore --supervisor-namespace elastic-sky

To view additional information about a command, use kubectl cci [command] --help.