Using the Command Line Interface to perform Supervisor Namespace tasks

The Cloud Consumption Interface includes a command line interface that administrators and developers can use to perform Supervisor Namespace tasks programatically.

To use the command line interface, you download a kubectl plug-in. The plug-in adds kubernetes Custom Resource Definitions (CRD) to the standard Kubernetes API server for CCI and provides CCI-specific commands that administrators and users can use to run CLI commands for configuration and troubleshooting.

Download the CCI kubectl plug-in

Note: Before downloading the CCI kubectl plug-in, you must have the Kubernetes tool installed. For information about the Kubernetes tool, see https://kubernetes.io/docs/tasks/tools/.

To download the CCI kubectl executable:

1. Use your My VMware credentials to log in to the Cloud Services Console.
2. Click to launch VMware Cloud Consumption Service.
3. On the Cloud Consumption Interface Launchpad, click DOWNLOAD PLUGIN.

Extract the application from the zip file and add the location of the application to your path. For example, if the application is in /Users/<username>/Downloads, then add Downloads to your path or:

export PATH=/Users/<username>/Downloads:$PATH

Administrators can use the CCI kubectl to create cloud accounts, create and configure projects, regions, and Supervisor namespace classes. Users have some limited access to the CCI kubectl CLI commands.

Obtain an API Token

Before you can use the CCI kubectl, you must obtain an API token. To generate the token, you use the VMware Aria Automation Console:

1. Use your My VMware credentials to log in to https://console.cloud.vmware.com/csp/gateway/discovery.
2. Click the drop-down arrow by your name.
3. Click My Account.
4. Click the API Tokens tab.
5. Click GENERATE A NEW API TOKEN.
   1. Enter a Token Name.
   2. Under Define Scopes, select the Organization Roles and Service Roles. The Service Role selections depend on the level of access for the user.

      Access level	Organization Role	Service Role
      admin	Organization Member	VMware Aria Automation > Service Broker > Service Broker Administrator and vSphere+, vSAN+, and ... > Cloud Administrator
      user	Organization Member	VMware Aria Automation > Service Broker > Service Broker User

      Note: To access Supervisor Namespaces as an SSO user, the API token for the Automation Service Broker User is assigned permissions for vCenter Supervisor Proxy by default. Do not remove the permission if the API token will be used to access Supervisor Namespaces using the proxy.
   3. Click Generate.
   4. Select the OpenID check box.
   5. When the Token Generated window displays a token with the name that you specified, click COPY.

Log in and create context

Use your API token to log in to the CCI server and create Supervisor Namespace context.

kubectl cci login --server api.mgmt.cloud.vmware.com --token <YOUR_API_TOKEN>

To see CCI content, change the default context to CCI.

kubectl config use-context cci

Note: If your API token is configured with the Automation Service Broker admin role, you can choose to use the --skip-set-context argument. In this way, you will avoid logging into all supervisor namespaces.

The following example shows how to create a context for a specific Supervisor Namespace from a specific project.

kubectl cci set-context --project cci-explore --supervisor-namespace elastic-sky

To view additional information about a command, use kubectl cci [command] --help.