Configuration

Field

JSON Key

Required

Description

Prism Central URL

prismCentralUrl

Yes

Full HTTPS URL of Prism Central. Any host/port is accepted (e.g. https://pc.example.com:9440, https://10.1.127.75).

Username

username

Yes

Nutanix user with at least Cluster Admin role (Cluster Viewer covers cluster/certificate APIs but not Security or IAM endpoints).

Password

password

Yes

Password for the user (write-only in the UI schema).

CA Bundle

caBundle

No

PEM-encoded CA certificate bundle to verify the Prism Central TLS certificate. Required when skipTlsVerify is false and Prism Central uses a private or self-signed certificate. When omitted, the system trust store is used.

Timeout Seconds

timeoutSeconds

No

HTTP request timeout in seconds (default 30, range 1–300).

Incremental Scan

incrementalScanEnabled

No

This plugin does not support incremental scanning. Every scan is a full scan regardless of this setting.

The plugin does not force a port onto the URL. Customers may front Prism Central with a domain name or load balancer, so whatever host/port you supply is used as-is (defaulting to 443 only when no port is present, for the raw TLS handshake).

Required roles: Cluster Viewer covers cluster discovery, SSL certificates, managed certificates, certificate authorities, CSRs, and SNMPv3 users. The Security v4.1 endpoints (KMS, credentials) and IAM v4.0 endpoints (cert-auth-providers, SAML identity providers) require Cluster Admin or an equivalent role. With only Cluster Viewer, those sections are skipped gracefully (HTTP 403) and the plugin still discovers all cluster-scoped assets.

Example input (example/input.json):

{
  "config": {
    "prismCentralUrl": "https://pc.example.com:9440",
    "username": "admin",
    "password": "REPLACE_ME",
    "skipTlsVerify": false,
    "caBundle": "",
    "timeoutSeconds": 30
  },
  "state": {
    "lastScanDate": ""
  }
}