Configuring Multi-Org Tenancy in vRA 8.x - Part 8: Integrating the Embedded Orchestrator
vRealize Automation vRealize Orchestrator vRA vRO Multi-Tenancy
Published on 4 November 2020 by Christopher Lewis. Words: 352. Reading Time: 2 mins.
In this post, we will walk through how to configure the integration for the embedded (shared) vRealize Orchestrator into the additional customer tenants.
In this series of posts, we will be taking a look at how to configure a Multi-Organization Tenancy (aka Multi-Tenancy) in vRealize Automation (vRA) 8.x.
For more information on the rest of the posts in this series, click here .
The “Problem”
Unfortunately, once vRA Multi-Tenancy has been enabled and a new tenant has been configured, the embedded vRO gets decoupled due to the changes to the platform (including the creation of a new vIDM tenant for each additional vRA tenant).
If you try to access the shared Orchestrator service from within any of the additional tenants, you should get the following error:
Don’t worry, there is an easy fix for this. We just need to configure a new vRO Integration endpoint for each of the vRA tenants (or at least each tenant where we want to do something with vRO). So let’s go ahead and do that.
Configuration
- Navigate to https://tenant.vra.fqdn and click GO TO LOGIN PAGE.
- Enter the Username and Password for a Cloud Assembly Administrator and then click Sign in.
- Click Cloud Assembly.
- Click Infrastructure.
- Click Integrations.
- Click ADD INTEGRATIONS.
- Click vRealize Orchestrator.
- At the Name field, type a friendly name for this integration.
- At the vRealize Orchestrator URL field, type https://tenant.vra.fqdn:443 and click VALIDATE.
- If prompted with an Untrusted Certificate Found dialog, click ACCEPT.
- Click ADD.
Now when we try and access the Orchestrator Service from within a tenant (assuming you have been given access through RBAC), you will be able to access it just like you did before.
Summary
In this post we have covered how to configure the embedded vRO instance on a per tenant basis. If we take atep back from the detail, we can see that the configuration of the integration for an external vRO is not any different. That is, assuming you have deployed the external vRO instance and configured vRO to use vRA as an authentication source (rather than vCenter Server). It is just a URL change after all.
Published on 4 November 2020 by Christopher Lewis. Words: 352. Reading Time: 2 mins.
- Configuring Multi-Org Tenancy in vRA 8.x - Part 7: Understanding vRealize Orchestrator Options ()
- Configuring Multi-Org Tenancy in vRA 8.x - Part 6: Configuring Tenant Administrators ()
- Configuring Multi-Org Tenancy in vRA 8.x - Part 5: Configuring Directories ()
- Configuring Multi-Organization Tenancy in vRealize Automation 8.x ()
- Configuring Multi-Org Tenancy in vRA 8.x - Part 4: Configuring Multi-Tenancy ()
- Operating a Private Cloud - Part 3: Creating a Pricing Card in VMware Aria Automation
- Operating a Private Cloud - Part 2: Creating a Pricing Card in VMware Aria Operations
- Operating a Private Cloud - Part 1: Understanding Pricing Cards in VMware Aria
- Zero2Hero - Using Aria Automation to Deploy Multiple Machines with Multiple Disks - Part 5
- Zero2Hero - Using Aria Automation to Deploy Multiple Machines with Multiple Disks - Part 4