Renew Access Token When AI Center Is Using External Orchestrator As Identity

News Knowledge Base
1

How to renew access token?

Issue Description:
This article addresses the scenario where AI Center is installed in the Automation Suite and it is later decided to use a standalone Orchestrator connected as the Identity.
When installing it, there is a requirement to provide an identity token from the Identity Hub in Orchestrator when the host level is accessed for the first time and this token can expire. Hence the need to renew it.

There is a manual approach, but this access token can be renewed using the installation script from the Linux terminal.

Resolution:

  1. Access the external Orchestrator at the host level at the Identity Hub, and click Management.

  1. In management, click on Security settings and generate a new installation key, this is the access token.

  1. When this is ready, access Argo and get the password from the Linux terminal, so the first thing to do will be to export the kubectl config file with the following command:
  • export KUBECONFIG="/etc/rancher/rke2/rke2.yaml" \ && export PATH="$PATH:/usr/local/bin:/var/lib/rancher/rke2/bin"

  1. Get the Argo password with the following command:
  • kubectl get secrets/argocd-admin-password -n argocd -o "jsonpath={.data['password']}" | echo $(base64 -d)

  1. When the password is obtained, access the following URL:
  1. The username is admin and the password is the one obtained from the Linux terminal.

  1. Inside Argo, search for AICenter and click:

  1. Once inside the app, click app details in the top left:

  1. Click on parameters click edit first, then press Ctrl + F to search for global access.


  1. Click in the box, paste the access token obtained from the Orchestrator and click Save.

  1. Click sync at the top left, a menu will pop up, and then click synchronize:

  1. Access will be provided to AI Center once again.