topic Re: Unattended installation/configuration/Token Mgmt in Dynatrace API

Unattended installation/configuration/Token Mgmt

xstreur — Mon, 10 Feb 2025 12:27:59 GMT

We need to do unattended installation/configuration of several Dynatrace instances (Cluster, Environment, oneAgents and activeGate). After the installation
of the Cluster Server, we get a API Token, which seems to be able to do things on a cluster level. We need a token here that also makes it possible to continue the install/configure on a Environment level. We seem to get stuck here.

curl -X 'POST' \

'https://10.0.22.24/api/cluster/v2/tokens' \

-H 'accept: application/json; charset=utf-8' \

-H 'Authorization: Api-Token <afterinstallation-Token> \

-H 'Content-Type: application/json; charset=utf-8' \

-d '{

"expiresIn": {

"unit": "DAYS",

"value": 0

"name": "EnvTknMgmt",

"scopes": [

"EnviromentTokenManagement"

]

Results:

{

"error": {

"code": 400,

"message": "Could not map JSON at 'scopes[0]' near line 8 column 5"

}

Re: Unattended installation/configuration/Token Mgmt

xstreur — Thu, 06 Feb 2025 14:35:52 GMT

Also the following does not work:

curl -X 'POST' \
'https://10.0.22.24/api/cluster/v2/environments/66bf6127-7a37-40d9-b687-183cba58c020/tokenManagementToken' \
-H 'accept: application/json; charset=utf-8' \
-H 'Authorization: Api-Token dt0c01.NIUWRR7LOH7K4JZOX27FYYZZ.GMXDP65SGHVXOPEMDWZS2QGLDSPK6JBIPEBFGII75J7ZGMMYUG35KKBT3CN3RWMR' \
-H 'Content-Type: application/json; charset=utf-8' \
-d '{
"expiresIn": {
"unit": "SECONDS",
"value": 3600
},
"name": "Token Management"
}'

This comes with a 403:

{
"error": {
"code": 403,
"message": "Token is missing required scope. Use one of: EnvironmentTokenManagement (\"Token Management\" Token creation for existing environments)"
}
}

Re: Unattended installation/configuration/Token Mgmt

mark_bley — Fri, 07 Feb 2025 01:09:59 GMT

You have typo (EnviromentTokenManagement), it should be EnvironmentTokenManagement for the scope.

For the follow up you are using a Cluster token without the right scope.

Also even if it is just local cluster I would advise against posting tokens publicly.

https://docs.dynatrace.com/managed/shortlink/api-cluster-tokens-create-new#request-body-objects