How I add a role
Copy roles/_template, leave main.yml alone, put the work in is_present.yml, and do not download anything inside the environment.
Blog
Automation, Customer Success Stories
When the NSX Manager Certificate Is Already Expired
An expired NSX Manager certificate is replaced through the API: one certificate per node, the cluster VIP last, plan by default. The data plane is not touched.
Automation, Customer Success Stories
NSX Federation Made the Same Segment Appear Twice
Global Manager and Local Manager both show Aria Automation the same segment. Network profiles fill with duplicates, and IPAM does not always agree with either of them. Analyze, then plan, then execute.
Automation, Customer Success Stories
Sixteen Hosts, Seven Requirements, One Command: Getting ESXi Hosts Ready for VCF Commissioning
Two sites on VCF 9.1.1, one of them on hardware that cannot run ESX 9. VCF host commissioning has seven boring requirements and a wizard that reports one failure at a time; one POSIX shell script and one hosts.yaml took the fleet from racked to ready, upgrades, reboots and stale vSAN partitions included, refused the hosts that were not really standalone, and named the next command in every error.
Automation, Customer Success Stories
Moving Avi from Blue to Green Without Ever Writing Back to Blue
A blue-to-green Avi move that converges 67 virtual services and 285 objects per site onto two new sites from one YAML file, builds a GSLB service for every application, never writes to blue or to DNS, and leaves a flip list and a one-name lever for the cutover.
Automation, Customer Success Stories
Moving NSX DFW Between Global Managers Without Turning the Rules On
A Global Manager to Global Manager firewall move should stage every policy disabled. API acceptance is not proof the rule is realized, and the tool refuses to recreate network objects it does not own.
Automation, Customer Success Stories
Avi GSLB Across Two Sites: Prove Failover Before the Production Names Move
Two VCF sites, two Avi controllers, one GSLB service. The build is a sequence of gates: a dedicated account, a DNS engine group, a DNS virtual service per site, a leader, a follower, a test name, then proof from outside either UI. What the proof found, how a name resolves, and what failover costs in seconds.
Automation, Customer Success Stories
When Regional Harbor Sticks, VKS Stops
In VCF 9.1, regional Harbor is the registry Supervisor services and VKS add-ons pull from. A region teardown can leave it mid-removal. Retrying the uninstall does not bring the cluster back.
Automation, Customer Success Stories
VCF on VxRail: What to Check First When the Estate Has Been Left Alone
A VCF on VxRail estate that has gone quiet does not need a credential rotation as the first move. It needs a fixed order of health checks, and a depot check that now applies even when the cluster is online.
Automation, Customer Success Stories
The VCF Workload Domain That Said It Was Already Upgraded
After the management domain reached VCF 9.1.1, the workload domains showed every component on target and greyed out the plan buttons. The domain was not upgraded. A customized BOM had pinned it.