Hi,
Here is an example for development purposes in a non-production environment, the following code will export all WFA credentials of matchType "exact" to the local PowerShell Credential cache. If the credential is already added it will be removed and re-added (ensures that the credentials are updated in the powershell credential cache if you update them in WFA). Note that there is a pre-requisit to add administrative WFA credentials for the WFA server to ensure the REST API request for /rest/credentials is authenticated. You can then access the credentials in an external powershell session using the "Get-NcCredential" cmdlet. EG
Param(
[Parameter(Mandatory=$True, HelpMessage="The WFA Server name or IP Address")]
[String]$WFAServer,
[Parameter(Mandatory=$True, HelpMessage="The WFA Server name or IP Address")]
[ValidateSet("https","http")]
[String]$Protocol="https"
)
#'------------------------------------------------------------------------------
#'Enumerate the WFA Server credentials to authenticate the REST API request.
#'------------------------------------------------------------------------------
$credentials = Get-WFACredentials $WFAServer
#'------------------------------------------------------------------------------
[String]$uri = "$Protocol://$WFAServer/rest/credentials"
Try{
[xml]$results = Invoke-RestMethod -Uri $uri -Method GET -ContentType "application/XML" -Credential $credentials -ErrorAction Stop
}Catch{
Get-WFALogger -Error -Message $("Failed enumerating WFA Credential using URI ""$uri"". Error " + $_.Exception.Message)
Throw "Failed enumerating WFA Credential using URI ""$uri"""
}
#'------------------------------------------------------------------------------
#'Add the WFA credentials to the PowerShell credential cache for external WFA use.
#'------------------------------------------------------------------------------
[Int]$errorCount = 0
ForEach($result In $results.collection.credential){
Do{
#'------------------------------------------------------------------------
#'Ensure that only WFA credentials of the "exact" match type are exported.
#'------------------------------------------------------------------------
If($result.matchType -ne "exact"){
Get-WFALogger -Info -Message $("The WFA credential """ + $result.name + """ is not an exact match. Exiting")
Break;
}
#'------------------------------------------------------------------------
#'Enumerate the WFA credential
#'------------------------------------------------------------------------
Try{
$c = Get-NcCredential -Name $result.name -ErrorAction Stop
}Catch{
[Int]$errorCount++
Break;
}
#'------------------------------------------------------------------------
#'Remove the credential if it exists in the PowerShell credential cache.
#'------------------------------------------------------------------------
[Bool]$IsRemoved = $True
If($Null -ne $c){
Try{
Remove-NcCredential -Name $result.name -ErrorAction Stop
Get-WFALogger -Info -Message $("Removed """ + $result.name + """ from the PowerShell credential cache")
}Catch{
Get-WFALogger -Error -Message $("Failed Removing """ + $result.name + """ from the PowerShell credential cache")
[Int]$errorCount++
[Bool]$IsRemoved = $False
Break;
}
}
#'------------------------------------------------------------------------
#'Add the credential to the PowerShell credential cache for external WFA use.
#'------------------------------------------------------------------------
If($IsRemoved){
$wfaCredentials = Get-WFACredentials $result.ip
Try{
Add-NcCredential -Name $result.name -SystemScope -Credential $wfaCredentials -ErrorAction Stop
Get-WFALogger -Info -Message $("Added """ + $result.name + """ to the PowerShell credential cache")
}Catch{
Get-WFALogger -Error -Message $("Failed Adding """ + $result.name + """ to the PowerShell credential cache. Error " + $_.Exception.Message)
[Int]$errorCount++
Break;
}
}
}Until($True)
}
#'------------------------------------------------------------------------------
Then on your WFA server you can run the "profile.ps1" to load the PSTK and retrive the credentials from the powershell cache. EG
PS C:\Program Files\NetApp\WFA\PoSH> .\profile.ps1
PS C:\Program Files\NetApp\WFA\PoSH> $credentials = Get-NcCredential -Name cluster1.testlab.local
PS C:\Program Files\NetApp\WFA\PoSH> Connect-NcController -name cluster1.testlab.local -HTTPS -Credential $credentials.Credential
Also in your workflow you can use an MVEL function to enumerate the WFA servers FQDN rather than having to enter it. EG
def get_wfa_fqdn(hostname){
import java.net.InetAddress;
InetAddress addr = java.net.InetAddress.getLocalHost().getCanonicalHostName();
return toLower(addr);
}
On the input "WFAServer" use "get_wfa_fqdn('')"
Hope that gives you some ideas.
/Matt
P.S: Please Note the description for the "-Systemscope" parameter for the "Add-NcCredential" cmdlet ("This option should only be used on a system with limited user access").
-SystemScope
Specify to save the credentials such that any process or user on the local system can access them. This option should only be used on a system with limited user access.
If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.
