add vmware-tools
This commit is contained in:
Your Name
+2433
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: reset_certificate_status
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking Certificate Status"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_certificate_status
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description: "Check machine SSL certificate"
|
||||||
|
title: "Checking STS Signing Certs & Signing Chains"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_sts_tenant_certificates
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking CA certificates in VMDir [by CN(id)]"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_ca_certificates_in_vmdir
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking CA certificates in VECS [by Alias]"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_ca_certificates_in_vecs
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking VECS Stores"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_configuration
|
||||||
|
method: check_vecs_store_permissions
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking Service Principals"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_service_principals
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking Certificate Revocation Lists"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_crls
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_identity_source_certificates
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking SSL Trust Anchors"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_ssl_trust_anchors
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking vCenter Extension Thumbprints"
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_vcenter_extension_thumbprints
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: 'Checking VMCA Configurations in VCDB'
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_configuration
|
||||||
|
method: check_vmca_configuration_vcdb
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_configuration
|
||||||
|
method: check_sts_configuration
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: show_check_result_summary
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking for SSL Interception"
|
||||||
|
label: "Check for SSL Interception"
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_certificate
|
||||||
|
method: check_ssl_interception
|
||||||
@@ -0,0 +1,9 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: 'Check STS server certificate and configuration'
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: 'config/op_prevalidate_credential.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/check_config/sts_config/op_check_sts_config.yaml'
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title: "Checking VECS Stores"
|
||||||
|
label: "Check VECS store status and permissions"
|
||||||
|
entry_point:
|
||||||
|
module: operation.check_configuration
|
||||||
|
method: check_vecs_store_permissions
|
||||||
|
arguments:
|
||||||
|
- name: check_only
|
||||||
|
value: false
|
||||||
+13
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description:
|
||||||
|
title: "SSL Interception Certificate Management"
|
||||||
|
label: "SSL Interception Certificate Management"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/check_config/ssl_interception/op_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
hidden: True
|
||||||
|
use_label_as_key: True
|
||||||
+11
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Download and import CA certificates from the proxy"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "download_proxy_ca_certificates"
|
||||||
+11
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Import CA certificate(s) from a file"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "import_proxy_ca_certificates"
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label:
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_configuration
|
||||||
|
method: manage_sts_configuration
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description: "Manage ESXi Certificates"
|
||||||
|
title: ""
|
||||||
|
label: "Check ESXi/vCenter certificate trust"
|
||||||
|
entry_point:
|
||||||
|
module: operation.esxi_certificate_operations
|
||||||
|
method: check_esxi_vcenter_trust
|
||||||
+7
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description: "Check ESXi certificate against vCenter database"
|
||||||
|
title: ""
|
||||||
|
label: "Check ESXi certificate against vCenter database"
|
||||||
|
entry_point:
|
||||||
|
module: operation.esxi_certificate_operations
|
||||||
|
method: check_esxi_certificate_against_vcdb
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description: "Replace ESXi certificate"
|
||||||
|
title: ""
|
||||||
|
label: "Replace ESXi certificate"
|
||||||
|
entry_point:
|
||||||
|
module: operation.esxi_certificate_operations
|
||||||
|
method: replace_esxi_certificate
|
||||||
@@ -0,0 +1,37 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label:
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_ca_certs_in_vecs
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_ca_certs_in_vmdir
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_solution_user_certs_in_vmdir
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_sts_tenant_certs
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_ca_certs_sca
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_ca_certs_ad_ldaps
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_certs_in_filesystem
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_report_ssl_trust_anchors
|
||||||
@@ -0,0 +1,30 @@
|
|||||||
|
version: 1
|
||||||
|
|
||||||
|
disable_existing_loggers: false
|
||||||
|
|
||||||
|
formatters:
|
||||||
|
file_format:
|
||||||
|
format: '%(asctime)s - [%(name)s - %(funcName)s] - %(levelname)s - %(message)s'
|
||||||
|
datefmt: '%Y-%m-%dT%H:%M:%S'
|
||||||
|
console_format:
|
||||||
|
format: '%(asctime)s - %(levelname)s - %(message)s'
|
||||||
|
datefmt: '%Y-%m-%dT%H:%M:%S'
|
||||||
|
|
||||||
|
handlers:
|
||||||
|
console:
|
||||||
|
class: logging.StreamHandler
|
||||||
|
level: CRITICAL
|
||||||
|
formatter: console_format
|
||||||
|
stream: ext://sys.stdout
|
||||||
|
file:
|
||||||
|
class: logging.handlers.RotatingFileHandler
|
||||||
|
level: DEBUG
|
||||||
|
formatter: file_format
|
||||||
|
filename: /var/log/vmware/vCert/vCert.log
|
||||||
|
# 20MB file size
|
||||||
|
maxBytes: 20000000
|
||||||
|
backupCount: 5
|
||||||
|
|
||||||
|
root:
|
||||||
|
level: DEBUG
|
||||||
|
handlers: [console, file]
|
||||||
+12
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and Private Key"
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: generate_csr_and_private_key
|
||||||
|
arguments:
|
||||||
|
- name: cert_usage
|
||||||
|
value: "machine-ssl"
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: false
|
||||||
+12
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: generate_csr_and_private_key
|
||||||
|
arguments:
|
||||||
|
- name: cert_usage
|
||||||
|
value: "machine-ssl"
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: true
|
||||||
+11
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Import CA-signed Certificate and Key"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "import_custom_ca_signed_machine_ssl_certificate"
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description:
|
||||||
|
title: "Replace Machine SSL certificate with a custom CA-signed certificate"
|
||||||
|
label: "Replace Machine SSL certificate with a custom CA-signed certificate"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/manage_cert/machine_ssl/custom_ca_signed/op_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
hidden: True
|
||||||
|
use_label_as_key: True
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Replace Machine SSL certificate with a VMCA-signed certificate"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_machine_ssl_certificate_with_vmca_signed"
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
type: menu
|
||||||
|
description: "Manage Machine SSL certificate"
|
||||||
|
title: "Select Machine SSL Certificate Replacement Method"
|
||||||
|
label: "Machine SSL certificate"
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/machine_ssl/op_vmca-signed-cert.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/machine_ssl/menu_custom-ca-signed-cert.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: true
|
||||||
|
hidden: true
|
||||||
|
|
||||||
|
input:
|
||||||
|
text: "Select an option [Return to the previous menu]: "
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Manage CA certificate in the SMS VECS Store"
|
||||||
|
title:
|
||||||
|
label: "SMS certificates"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_sms_certificates"
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
type: menu
|
||||||
|
description: "Manage Solution User certificates"
|
||||||
|
title: "Select Solution User Certificate Replacement Method"
|
||||||
|
label: "Solution User certificates"
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/soluser/op_vmca-signed-cert.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/soluser/menu_custom-ca-signed-cert.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: true
|
||||||
|
hidden: true
|
||||||
|
|
||||||
|
input:
|
||||||
|
text: "Select an option [Return to the previous menu]: "
|
||||||
@@ -0,0 +1,20 @@
|
|||||||
|
type: menu
|
||||||
|
description: 'Manage VMCA certificate'
|
||||||
|
title: 'Select VMCA Certificate Replacement Method'
|
||||||
|
label: 'VMCA certificate'
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/vmca/op_replace-vmca-cert.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/vmca/op_replace-vmca-cert-and-reset-all.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/vmca/menu_custom-ca-signed-vmca-cert.yaml'
|
||||||
|
- type: navigation:return
|
||||||
|
label: 'Return to previous menu'
|
||||||
|
key: 'R'
|
||||||
|
default: true
|
||||||
|
hidden: true
|
||||||
|
|
||||||
|
input:
|
||||||
|
text: 'Select an option [Return to the previous menu]: '
|
||||||
|
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Manage CA certificate in VECS"
|
||||||
|
title:
|
||||||
|
label: "CA certificates in VECS Directory"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_ca_certificates_in_vecs"
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Manage CA certificate in VMware Directory"
|
||||||
|
title:
|
||||||
|
label: "CA certificates in VMware Directory"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_ca_certificates_in_vmdir"
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
title: 'Clear Expired Certificates in BACKUP_STORE in VECS'
|
||||||
|
label: 'Clear expired certificates in BACKUP_STORE in VECS'
|
||||||
|
condition: 'HAS_BACKUP_STORE'
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: manage_expired_backup_store
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
title:
|
||||||
|
label: 'Clear Machine SSL CSR in VECS'
|
||||||
|
condition: 'HAS_MACHINE_SSL_CSR'
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: manage_machine_ssl_csr
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
type: operation
|
||||||
|
title: 'Clear TRUSTED_ROOT_CRLS store in VECS'
|
||||||
|
label: 'Clear TRUSTED_ROOT_CRLS store in VECS'
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: clear_trusted_root_crls
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Manage Data Encipherment certificate"
|
||||||
|
title:
|
||||||
|
label: "Data Encipherment certificate"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_data_encipherment_certificate"
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: 'Manage LDAPS Identity Source certificates'
|
||||||
|
title:
|
||||||
|
label: 'LDAPS Identity Source certificates'
|
||||||
|
condition: 'HAS_LDAPS_IDENTITY_SOURCE'
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: 'config/op_prevalidate_credential.yaml'
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: 'operation.manage_certificate'
|
||||||
|
method: 'manage_ldaps_identity_source_certificates'
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "vCenter Extension thumbprints"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_vcenter_extension_thumbprints"
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: 'Manage Smart Card CA certificates'
|
||||||
|
title:
|
||||||
|
label: 'Smart Card CA certificates'
|
||||||
|
condition: 'CAC_CONFIGURED'
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: 'config/op_prevalidate_credential.yaml'
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: 'operation.manage_certificate'
|
||||||
|
method: 'manage_smart_card_certificates'
|
||||||
@@ -0,0 +1,16 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Manage STS signing certificates"
|
||||||
|
title:
|
||||||
|
label: "STS signing certificates"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/view_cert/op_view_11-sts.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "lib.menu"
|
||||||
|
method: "Menu.run_menu_from_config"
|
||||||
|
arguments:
|
||||||
|
- name: "config"
|
||||||
|
value: "config/manage_cert/sts_signing/menu_sts-signing-certs.yaml"
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description:
|
||||||
|
title: "Manage SMS Certificates"
|
||||||
|
label:
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/manage_cert/sms/op_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
hidden: True
|
||||||
|
use_label_as_key: True
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title: "Replace SMS self-signed certificate"
|
||||||
|
label: "Replace SMS self-signed certificate"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_sms_certificate_with_self_signed"
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Replace SPS-extension certificate"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_sps_certificate_with_vmca_signed"
|
||||||
+10
@@ -0,0 +1,10 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and Private Key"
|
||||||
|
entry_point:
|
||||||
|
module: operation.reset_certificate
|
||||||
|
method: generate_csr_and_private_key_of_soluser
|
||||||
|
arguments:
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: false
|
||||||
+10
@@ -0,0 +1,10 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
|
||||||
|
entry_point:
|
||||||
|
module: operation.reset_certificate
|
||||||
|
method: generate_csr_and_private_key_of_soluser
|
||||||
|
arguments:
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: true
|
||||||
+11
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Import CA-signed Certificate and Key"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: manage_solution_user_certificate_with_custom_ca_signed
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description:
|
||||||
|
title: "Replace Solution User certificates with CA-signed certificates (not recommended)"
|
||||||
|
label: "Replace Solution User certificates with CA-signed certificates (not recommended)"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/manage_cert/soluser/custom_ca_signed/op_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
hidden: True
|
||||||
|
use_label_as_key: True
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Replace Solution User certificate with a VMCA-signed certificate"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.reset_certificate"
|
||||||
|
method: "manage_solution_user_certificate_with_vmca_signed"
|
||||||
+12
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and Private Key"
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: generate_csr_and_private_key
|
||||||
|
arguments:
|
||||||
|
- name: cert_usage
|
||||||
|
value: "sso-sts"
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: false
|
||||||
+12
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: generate_csr_and_private_key
|
||||||
|
arguments:
|
||||||
|
- name: cert_usage
|
||||||
|
value: "sso-sts"
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: true
|
||||||
+11
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Import CA-signed Certificate and Key"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "import_custom_ca_signed_sts_signing_certificate"
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description:
|
||||||
|
title: "Replace STS Signing certificate with a custom CA-signed certificate"
|
||||||
|
label: "Replace STS Signing certificate with a custom CA-signed certificate"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/manage_cert/sts_signing/custom_ca_signed/op_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
hidden: True
|
||||||
|
use_label_as_key: True
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
type: menu
|
||||||
|
description: "Manage STS signing certificates"
|
||||||
|
title: "Select STS Signing Certificate Replacement Method"
|
||||||
|
label: "STS signing certificates"
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/sts_signing/op_vmca-signed-cert.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/sts_signing/menu_custom-ca-signed-cert.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
hidden: True
|
||||||
|
use_label_as_key: True
|
||||||
|
|
||||||
|
input:
|
||||||
|
text: "Select an option [Return to the previous menu]: "
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Replace STS Signing certificate with a VMCA-signed certificate"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_sts_signing_certificate_with_vmca_signed"
|
||||||
@@ -0,0 +1,21 @@
|
|||||||
|
type: menu
|
||||||
|
description: "Check SSL Trust Anchors"
|
||||||
|
title: "Check SSL Trust Anchors"
|
||||||
|
sub_title: "Additional output options:"
|
||||||
|
label: "Check SSL Trust Anchors"
|
||||||
|
run_once: True
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/trust_anchors/op_check_none.yaml"
|
||||||
|
default: True
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/trust_anchors/op_check_with_service_id.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/trust_anchors/op_check_with_ep_uri.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/trust_anchors/op_check_with_service_id_and_uri.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/trust_anchors/op_check_with_fingerprint.yaml"
|
||||||
|
|
||||||
|
input:
|
||||||
|
text: "Please select additional information options [{CURRENT_MENU[__DEFAULT__]}]: "
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Check SSL trust anchors"
|
||||||
|
title:
|
||||||
|
label: "None"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "check_ssl_trust_anchors"
|
||||||
|
|
||||||
@@ -0,0 +1,15 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Check SSL trust anchors"
|
||||||
|
title:
|
||||||
|
label: "Show associated endpoint URIs"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "check_ssl_trust_anchors"
|
||||||
|
arguments:
|
||||||
|
- name: "show_endpoint_uris"
|
||||||
|
value: true
|
||||||
|
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Check SSL trust anchors"
|
||||||
|
title:
|
||||||
|
label: "Show the SHA256 fingerprint of the certificates"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "check_ssl_trust_anchors"
|
||||||
|
arguments:
|
||||||
|
- name: "use_sha256_fingerprint"
|
||||||
|
value: true
|
||||||
@@ -0,0 +1,15 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Check SSL trust anchors"
|
||||||
|
title:
|
||||||
|
label: "Show associated Service IDs"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "check_ssl_trust_anchors"
|
||||||
|
arguments:
|
||||||
|
- name: "show_service_id"
|
||||||
|
value: true
|
||||||
|
|
||||||
+16
@@ -0,0 +1,16 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Check SSL trust anchors"
|
||||||
|
title:
|
||||||
|
label: "Show both associated Service IDs and endpoint URIs"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "check_ssl_trust_anchors"
|
||||||
|
arguments:
|
||||||
|
- name: "show_service_id"
|
||||||
|
value: true
|
||||||
|
- name: "show_endpoint_uris"
|
||||||
|
value: true
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Update SSL trust anchors"
|
||||||
|
title:
|
||||||
|
label: "Update SSL Trust Anchors"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.manage_certificate"
|
||||||
|
method: "manage_ssl_trust_anchors"
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and private key"
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: generate_csr_and_private_key
|
||||||
|
arguments:
|
||||||
|
- name: cert_usage
|
||||||
|
value: "vmca"
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: false
|
||||||
|
- name: is_CA
|
||||||
|
value: true
|
||||||
+12
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate Certificate Signing Request and private key \n from custom OpenSSL configuration file"
|
||||||
|
entry_point:
|
||||||
|
module: operation.manage_certificate
|
||||||
|
method: generate_csr_and_private_key
|
||||||
|
arguments:
|
||||||
|
- name: cert_usage
|
||||||
|
value: "vmca"
|
||||||
|
- name: custom_openssl_config
|
||||||
|
value: true
|
||||||
+11
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Import CA-signed certificate and private key"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.reset_certificate"
|
||||||
|
method: "import_custom_ca_signed_vmca_certificate"
|
||||||
+11
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Import CA-signed certificate and private key \n and regenerate all certificates"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.reset_certificate"
|
||||||
|
method: "import_custom_ca_signed_vmca_certificate_and_reset_all"
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description:
|
||||||
|
title: "Replace VMCA certificate with a CA-signed certificate"
|
||||||
|
label: "Replace VMCA certificate with a CA-signed certificate"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/manage_cert/vmca/custom_ca_signed/op_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: true
|
||||||
|
hidden: true
|
||||||
|
use_label_as_key: True
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Replace VMCA certificate with a self-signed certificate \n and regenerate all certificates"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.reset_certificate"
|
||||||
|
method: "replace_vmca_cert_and_regenerate_all"
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Replace VMCA certificate with a self-signed certificate"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.reset_certificate"
|
||||||
|
method: "replace_vmca_cert"
|
||||||
|
|
||||||
@@ -0,0 +1,8 @@
|
|||||||
|
type: operation-group
|
||||||
|
description: "Operation for checking certificates status"
|
||||||
|
title: "Check current certificates status"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: multiple
|
||||||
|
config: "config/check_cert/op_*.yaml"
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description: "Check configuration"
|
||||||
|
title: "Configuration Check Menu"
|
||||||
|
label: "Check configurations"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/check_config/*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to main menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
use_label_as_key: True
|
||||||
|
hidden: True
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description:
|
||||||
|
title: "Manage ESXi Certificates"
|
||||||
|
label: "ESXi certificate operations"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/esxi_cert_actions/op_esxi_action*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to main menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
hidden: true
|
||||||
|
use_label_as_key: True
|
||||||
@@ -0,0 +1,28 @@
|
|||||||
|
type: menu
|
||||||
|
description: "vCert main menu"
|
||||||
|
title: "{VCERT_DESC}"
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_check_cert.yaml"
|
||||||
|
default: True
|
||||||
|
- type: single
|
||||||
|
config: "config/menu_view_cert.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/menu_manage_cert.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/menu_manage_trust_anchors.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/menu_check_config.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/op_reset_cert_vmca.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/menu_esxi_cert.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/menu_restart_service.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/op_generate_report.yaml"
|
||||||
|
- type: navigation:exit
|
||||||
|
label: "Exit"
|
||||||
|
key: "E"
|
||||||
|
input:
|
||||||
|
text: "Select an option [{CURRENT_MENU[__DEFAULT__]}]: "
|
||||||
@@ -0,0 +1,39 @@
|
|||||||
|
type: menu
|
||||||
|
description: 'Manage certificate'
|
||||||
|
title: 'Manage vCenter Certificates'
|
||||||
|
label: 'Manage certificates'
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/menu_machine_ssl_cert.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/menu_solution_user_cert.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_ca_certs_in_vmdir.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_ca_certs_in_vecs.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/menu_sms_certs.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_data-encipherment.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_manage-vc-ext-thumbprints.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_sts_signing_certs.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/menu_vmca_cert.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_smart_card.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_ldaps_identity_source.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_clear_expired_backup_store.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_clear_trusted_root_crls.yaml'
|
||||||
|
- type: single
|
||||||
|
config: 'config/manage_cert/op_clear_machine_ssl_csr.yaml'
|
||||||
|
- type: navigation:return
|
||||||
|
label: 'Return to main menu'
|
||||||
|
key: 'R'
|
||||||
|
default: True
|
||||||
|
use_label_as_key: True
|
||||||
|
hidden: True
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
type: menu
|
||||||
|
description: "Manage SSL Trust Anchors"
|
||||||
|
title: "Manage SSL Trust Anchors"
|
||||||
|
label: "Manage SSL trust anchors"
|
||||||
|
items:
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/trust_anchors/menu_check_trust_anchors.yaml"
|
||||||
|
- type: single
|
||||||
|
config: "config/manage_cert/trust_anchors/op_update_trust_anchors.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to previous menu"
|
||||||
|
key: "R"
|
||||||
|
default: true
|
||||||
|
hidden: true
|
||||||
|
|
||||||
|
input:
|
||||||
|
text: "Select an option [Return to the previous menu]: "
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description: "Operation for restarting services"
|
||||||
|
title: "Restart VMware Services"
|
||||||
|
label: "Restart services"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/restart_service/op_restart_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to main menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
use_label_as_key: True
|
||||||
|
hidden: True
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
type: menu
|
||||||
|
description: "View certificate info"
|
||||||
|
title: "View vCenter Certificates"
|
||||||
|
label: "View certificate info"
|
||||||
|
items:
|
||||||
|
- type: multiple
|
||||||
|
config: "config/view_cert/op_view_*.yaml"
|
||||||
|
- type: navigation:return
|
||||||
|
label: "Return to main menu"
|
||||||
|
key: "R"
|
||||||
|
default: True
|
||||||
|
use_label_as_key: True
|
||||||
|
hidden: True
|
||||||
@@ -0,0 +1,9 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
label: "Check current certificate status"
|
||||||
|
title:
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: multiple
|
||||||
|
config: "config/check_cert/op_*.yaml"
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
type: operation
|
||||||
|
title:
|
||||||
|
label: Check Machine SSL certificate
|
||||||
|
entry_point:
|
||||||
|
module: operation.checks_certificates
|
||||||
|
method: check_machine_ssl_certificate
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
title:
|
||||||
|
label: "Generate certificate report"
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: generate_header
|
||||||
|
- type: multiple
|
||||||
|
config: config/generate_report/op_*.yaml
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: operation.generate_report
|
||||||
|
method: finalize_report
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description:
|
||||||
|
label:
|
||||||
|
title:
|
||||||
|
entry_point:
|
||||||
|
module: "operation.common"
|
||||||
|
method: "prevalidate_credential"
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
type: operation-group
|
||||||
|
description:
|
||||||
|
label: "Reset all certificates with VMCA-signed certificates"
|
||||||
|
title:
|
||||||
|
operations:
|
||||||
|
- type: single
|
||||||
|
config: "config/op_prevalidate_credential.yaml"
|
||||||
|
- type: single
|
||||||
|
entry_point:
|
||||||
|
module: "operation.reset_certificate"
|
||||||
|
method: "reset_all_certificates"
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description: "Restart all VMware services"
|
||||||
|
title:
|
||||||
|
label: "Restart all VMware services"
|
||||||
|
entry_point:
|
||||||
|
module: operation.restart_service
|
||||||
|
method: restart_vmware_services
|
||||||
+7
@@ -0,0 +1,7 @@
|
|||||||
|
type: operation
|
||||||
|
description: "Restart specific VMware service"
|
||||||
|
title:
|
||||||
|
label: "Restart specific VMware service"
|
||||||
|
entry_point:
|
||||||
|
module: operation.restart_service
|
||||||
|
method: restart_specific_vmware_service
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vsan-health", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vsan-health", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user