VMware Cloud Community
dinakeano
Contributor
Contributor

[vRA8.0] Azure Cloud account

When I try to Validate my subscription to azure (New Coud Account), I receive the error :

Unable to validate the provided access credentials: Failed to validate credentials. Error: Unable to validate the provided access credentials Endpoint: null Task: /provisioning/endpoint-...

I believe it's a firewall problem, but can anyone tell me what is the destination (ip/url) ?

Thanks

Tags (2)
7 Replies
stevedrummond
Hot Shot
Hot Shot

The first hop is login.microsoftonline.com.

You can also find a list of endpoints Azure recommends you whitelist here (Safelist the Azure portal URLs | Microsoft Docs )

If are you behind a Proxy make sure you have configured vRA 8 to run under a Proxy (it does not currently support authenticated proxies)

Reply
0 Kudos
dinakeano
Contributor
Contributor

Hi,

To configure vRA8 to run under a proxy, is it enough to do the next thing : vracli proxy set --host https://<fqdn-proxy>:<port>

and enable the proxy?

stevedrummond
Hot Shot
Hot Shot

Yes. You also need to restart the services every time you change the proxy before the changes will take effect.

Reply
0 Kudos
forcerk
Enthusiast
Enthusiast

Hi,

To configure vRA8 to run under a proxy, is it enough to do the next thing : vracli proxy set --host https://<fqdn-proxy>:<port>

and enable the proxy?

Helped me already twice.

While vR LCM does have a option to set it at the webinterface you still have to use the cli for vRA 8.

Reply
0 Kudos
stevedrummond
Hot Shot
Hot Shot

Also be aware that Azure does ​not work with the proxy in 8.0.0. You must be running at least 8.0.1.

forcerk
Enthusiast
Enthusiast

Does anyone know a cli command to do a redeploy for applying the changes done to the proxy settings?

Well, it took me some time but I've found it myself Smiley Wink If you hit vracli proxy apply it even tells you how to do it.

you need to redeploy your environment with '/opt/scripts/deploy.sh

Reply
0 Kudos
stevedrummond
Hot Shot
Hot Shot

You only need to run deploy.sh if you make changes to the proxy-exclude list.

All other changes can be made live by running vracli proxy set, vracli proxy update-etcd, and vracli proxy apply.

Reply
0 Kudos