terraform-provider-vra icon indicating copy to clipboard operation
terraform-provider-vra copied to clipboard

vrealize automation cloud - authentication should use the csp api instead of the iaas

Open hobovirtual opened this issue 3 years ago • 0 comments

vRA version vrealize automation cloud

Terraform version 0.15+

terraform-provider-vra plugin version 0.3.7

Is your feature request related to a problem? Please describe. the current version of the provider is using the same authentication mechanism for vra on prem and vra cloud.

this is causing issue when enterprises wish to configure ip auth policies to restrict from where users can authenticate

Describe the solution you'd like for vra cloud instead of using

  • /iaas/api/login

we should use

  • /csp/gateway/am/api/auth/api-tokens/authorize (as documented here)

Describe alternatives you've considered the only solution is to ask vmware to provide the ip's of the services but this is opening access from everywhere since it bypass the csp ip auth policy

hobovirtual avatar Aug 03 '21 19:08 hobovirtual