voltron/NodeMgmt
1
1
Fork 0
Code Issues Pull Requests Releases 1 Activity

Update vCenter-SSL.ps1

Browse Source
This commit is contained in:
David Schroeder
2025-11-15 20:19:02 -06:00
parent 4dc5a0e52d
commit b5cb65cf98
1 changed files with 15 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
inc/vCenter-SSL.ps1
View File

@@ -1,6 +1,6 @@
#!/usr/bin/env pwsh #!/usr/bin/env pwsh
# ----------------------------------------------------------------------------------- # -----------------------------------------------------------------------------------
# vCenter + Posh-ACME Script (Fully Automated with Verbose Logging) # vCenter + Posh-ACME Script (Fully Automated with Verbose Logging and SSH Fallback)
# ----------------------------------------------------------------------------------- # -----------------------------------------------------------------------------------
. /opt/idssys/nodemgmt/conf/powerwall/settings.ps1 . /opt/idssys/nodemgmt/conf/powerwall/settings.ps1
@@ -36,8 +36,6 @@ if (-not (Get-Module -ListAvailable -Name VMware.PowerCLI)) {
Install-Module -Name VMware.PowerCLI -Force -Scope AllUsers Install-Module -Name VMware.PowerCLI -Force -Scope AllUsers
} }
Import-Module VMware.PowerCLI -ErrorAction Stop Import-Module VMware.PowerCLI -ErrorAction Stop
# Ignore self-signed cert warnings
Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false | Out-Null Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false | Out-Null
# ---------------------------- # ----------------------------
@@ -104,7 +102,6 @@ try {
# Collect certificate paths dynamically # Collect certificate paths dynamically
# ---------------------------- # ----------------------------
if ($certSuccess) { if ($certSuccess) {
# Get the most recent order
$paOrder = Get-PAOrder | Sort-Object Created -Descending | Select-Object -First 1 $paOrder = Get-PAOrder | Sort-Object Created -Descending | Select-Object -First 1
$certFolder = $paOrder.CertFolder $certFolder = $paOrder.CertFolder
@@ -153,7 +150,7 @@ if ($certSuccess) {
} }
# ---------------------------- # ----------------------------
# Automatic vpxd restart via REST with verbose logging # Automatic vpxd restart via REST with retries, fallback to SSH
# ---------------------------- # ----------------------------
$maxRetries = 20 $maxRetries = 20
$retryCount = 0 $retryCount = 0
@@ -161,16 +158,14 @@ $restartSucceeded = $false
while ($retryCount -lt $maxRetries -and -not $restartSucceeded) { while ($retryCount -lt $maxRetries -and -not $restartSucceeded) {
try { try {
# Test if REST endpoint is available
$healthUri = "https://$VCENTERHOST/rest/appliance/health/system" $healthUri = "https://$VCENTERHOST/rest/appliance/health/system"
Write-Host "Checking vCenter REST health endpoint..." -ForegroundColor Cyan Write-Host "Checking vCenter REST health endpoint..." -ForegroundColor Cyan
$resp = Invoke-RestMethod -Uri $healthUri -Method Get -SkipCertificateCheck -ErrorAction Stop $resp = Invoke-RestMethod -Uri $healthUri -Method Get -SkipCertificateCheck -ErrorAction Stop
# Restart vpxd service
$restartUri = "https://$VCENTERHOST/rest/appliance/system/services/vpxd?action=restart" $restartUri = "https://$VCENTERHOST/rest/appliance/system/services/vpxd?action=restart"
Write-Host "Requesting vpxd service restart via REST..." -ForegroundColor Cyan Write-Host "Requesting vpxd service restart via REST..." -ForegroundColor Cyan
Invoke-RestMethod -Uri $restartUri -Method Post -SkipCertificateCheck -ErrorAction Stop Invoke-RestMethod -Uri $restartUri -Method Post -SkipCertificateCheck -ErrorAction Stop
Write-Host "vpxd service restart requested successfully." -ForegroundColor Green Write-Host "vpxd service restart requested successfully via REST." -ForegroundColor Green
$restartSucceeded = $true $restartSucceeded = $true
} catch { } catch {
Write-Host "vpxd REST endpoint not ready yet, retrying in 15 seconds... (Attempt $($retryCount+1)/$maxRetries)" -ForegroundColor Yellow Write-Host "vpxd REST endpoint not ready yet, retrying in 15 seconds... (Attempt $($retryCount+1)/$maxRetries)" -ForegroundColor Yellow
@@ -180,9 +175,18 @@ while ($retryCount -lt $maxRetries -and -not $restartSucceeded) {
} }
if (-not $restartSucceeded) { if (-not $restartSucceeded) {
Write-Host "Automatic vpxd restart failed after $maxRetries attempts." -ForegroundColor Red Write-Host "REST endpoint failed after $maxRetries attempts, falling back to SSH restart..." -ForegroundColor Yellow
Write-Host "Please restart manually via SSH:" -ForegroundColor Red try {
Write-Host "ssh root@$VCENTERHOST 'service-control --stop vpxd; service-control --start vpxd'" -ForegroundColor Red Write-Host "Restarting vpxd via SSH..." -ForegroundColor Cyan
$sshCommand = "service-control --stop vpxd; service-control --start vpxd"
ssh root@$VCENTERHOST $sshCommand
Write-Host "vpxd service restarted successfully via SSH." -ForegroundColor Green
$restartSucceeded = $true
} catch {
Write-Host "SSH fallback restart failed: $($_.Exception.Message)" -ForegroundColor Red
Write-Host "Please restart manually via SSH:" -ForegroundColor Red
Write-Host "ssh root@$VCENTERHOST 'service-control --stop vpxd; service-control --start vpxd'" -ForegroundColor Red
}
} }
# ---------------------------- # ----------------------------