Platform9 and vSphere Integration

Platform9 recently announced a vSphere Integration product. If you haven’t heard of Platform9 before, they offer OpenStack-as-a-Service for management of private cloud installations. Platform9 manages the OpenStack platform and you manage your virtualized infrastructure. You don’t have to know or keep up with the inner workings of OpenStack to have a working platform. This new product announcement expands the platform from the KVM hypervisor to the vSphere hypervisor.

OpenStack is a very complicated platform. Gaining the knowledge needed to design, setup, and maintain an OpenStack system is time and effort not spent on fulfilling your business goals. As the platform grows, more time and effort is required to stay current and upgrade your implementation. The use of an externally managed system saves you that time and effort and that can be put directly toward your business goals.

Disclaimer: Platform9 provided me with an extended free trial account for the purposes of this article.

How does it work?

Platform9 deploys an OpenStack controller just for you. They install, monitor, troubleshoot, and upgrade it for you. With vSphere integration, a local VM, called a vSphere Gateway Appliance (VGA), deployed in your vSphere environment communicates with your vCenter server and Platform9’s hosted controller, eliminating the need for a VPN or other private communication channel between the controller and vCenter.

Continue reading

vCenter and Orchestrator compatibility note

I recently asked on twitter if the latest version of VMware’s Orchestrator, vRealize Orchestrator 6.0.1, would work with vCenter 5.5. I have not upgraded my hosts or vCenter to version 6 yet, but I wanted to save a step of having to upgrade vCenter Orchestrator to vRealize Orchestrator later if at all possible. I was directed to the VMware Product Interoperability Matrix. I selected VMware vRealize Orchestrator (Management Products), version 6.0.1 in step 1 and VMware vCenter Server (vCenter Server) and added it in step 2.

vRO Compat Fig 1 Continue reading

Updated vSphere Upgrade Order

On March 12, 2015, VMware released vSphere 6 for General Availability. I thought it would be a good time to recap, and pretty up, my older upgrade post. The previous post was based on vSphere 5.5 and the specifics of the software upgrades have changed, but the general order has not.

vSphere Upgrade OrderCheck Compatibility

Read all of the Hardware Compatibility List, Interoperability Matrix, and other similar documents for all your components. Make sure all hardware is supported with ESXi 6 and that all software solutions support both ESXi and vCenter 6. Repeat with all other vSphere suite components such as SRM and the vRealize products. Contact vendors of incompatible solutions and find out when their v6 support is expected. If anything in your list does NOT support the latest version, make a decision on whether to remove or replace the components or to halt the upgrade until they are available.

Continue reading

Auto Deploy Deep Dive, Part 4: Troubleshooting

Part 4 of the Auto Deploy Deep Dive Series details some of the issues I encountered along the way and how to troubleshoot them.

Troubleshooting

PXE

In a VLAN’ed environment (most production, and some home labs), the native VLAN and the destination VLAN for your host may be separate. You can of course boot the host on a port with no VLANs, the move/reconfigure the port to have the correct VLANs, but I would suggest entering the PXE manager at boot and setting the proper VLAN to eliminate possible failure points. If not, you may run into this situation…

Continue reading

Auto Deploy Deep Dive, Part 3: PowerCLI, Image Builder, and PXE Boot

Auto Deploy Deep Dive Series, Part Three focuses on PowerCLI and Image Builder, puts the wrap on DHCP, and brings the first auto-deployed VMhost to life!

PowerCLI and Image Builder

We are going to use some PowerCLI next. You can find plenty of PowerCLI primers elsewhere (I suggest Alan Renouf and Luc Dekens sites for the novice. I’ve also done a few articles on Power CLI…), so I’m going to assume some familiarity with it. Connect to your vCenter server with “Connect-VIServer <hostname>” and provide your credentials. The rule we are about to create relies on a host profile and a cluster name , so first we grab that information:

Continue reading

Auto Deploy Deep Dive, Part 2: Host Profiles

In part 2 of the Auto Deploy Deep Dive Series, I will show you how to build a host profile in preparation for the deployment. Launch the vSphere Web Client and we can get started.

Host Profiles

Host Profiles are a very powerful, complicated, and finicky tool that vCenter offers. These profiles are useful for compliance checking of your hosts, to ensure settings are consistent across a cluster, and in our case, Auto Deploy. We’re only going to use a small part of the host profile’s capability, which is to allow stateful installs on the new hosts, and ignore the rest – a tale for another time.

You cannot simply create a blank host profile, but you can use an existing host to create a populated profile. This can be done a number of ways, the easiest of which is to extract a host profile from an existing host. If you don’t already have an existing host in your vCenter, you’re going to need one to continue. You can extract the profile by going to the Hosts and Clusters page and selecting the highlighted option:

Continue reading

vCenter Upgrade Order

Since vSphere 5.5 was released in September, I’ve seen a lot of blog articles related to the upgrade process. Most of these articles deal with the implementation details of some specific step – upgrading the vCSA, migrating from an older version of vCSA, fixing SSO, etc. However, it seems like one of the most common questions in the freenode #vmware channel is still, “In what order do I upgrade my vCenter without breaking things?” Let’s answer that question at a high level, without getting into the implementation details.

This info is based on VMworld 2013 sessions VSVC5690 (YouTube) and VSVC4945 (requires VMworld login) taught by Justin King, Josh Gray, and Kyle Gleed, be sure to watch the presentations for additional details.

Continue reading

Auto Deploy Deep Dive, Part 1: Auto Deploy, TFTP, DHCP

Over Christmas, I expanded my home lab with another ESXi host. It seemed like the perfect time to set up Auto Deploy so my new host could be brought online with a minimum of effort. The process requires some assembly and I ran into a few minor issues along the way, so I thought I would detail those issues for others. The process is also quite lengthy, and this will be a multi-part series. Stay tuned, and check back at Auto Deploy Deep Dive Series for the rest of the articles. Credit goes to Vladan Seget’s Auto Deploy post and VMware’s own documentation for getting me started.

Auto Deploy requires multiple components – Image Builder, PowerCLI, Host Profiles, TFTP, DHCP, and vSphere Enterprise Plus licensing for your vCenter server. You have your choice of the TFTP and DHCP providers, the rest are provided by vCenter and VMware.  For TFTP, I used SolarWinds’s TFTP server (you do not have to provide a valid email address to access the download) for Windows and ISC tftp for CentOS. I had an existing CentOS server running ISC DHCP; Windows DHCP server on Server 2003+ is fine but I skipped over it because it’s familiar to most and easy to pick up by the rest.

Continue reading

vCenter Provisioning Roles

At work, one of our vSphere datacenters has a relatively static VM count maintained by a single group operating under the vCenter Administrator role. Recently, another group has joined this datacenter and will need to provision 60+ VMs, then hand over the VMs to us for ongoing maintenance and occasional provisioning of 1-2 VMs at a time. We do not want to make these users Administrators, nor do we want to provision 60+ VMs. To make this work, these new users need more rights than the VM Power User role during initial provisioning; some rights will be taken back when they move to maintenance mode. vCenter doesn’t provide any roles that match either need, so I had to create one that had all the correct permissions.

As the built-in roles do not provide the proper permissions, some trial and error was required to determine the correct combination of permissions for our situation. I do not expect that these permissions fit everyone’s needs. Please take the time to test and ensure whatever settings you do choose hit the right balance between your user’s needs and security considerations.

Continue reading

Creating consistent Distributed Port Groups with PowerCLI

I recently had to create a new vDS to replicate a standard vSwitch from another vCenter install. I wanted to create my vDS Distribute Port Groups (DPG) simply, but consistently. As I have a low number of DPGs to create, I could probably have done this manually, but scripting the creation ensures consistency. Plus, it’s a subset of PowerCLI that I wanted to familiarize myself with.

First, I created a vDS and a reference DPG through the vSphere Web Client. You can do this with PowerCLI, but you have to go down the rabbit hole of Views to touch some of the advanced settings, something that’s not well documented and would have been very time consuming for me to explore. I also didn’t mind creating the initial vDS and DPG as the visual view of the Web Client made it easy for me to verify the settings whereas a long string of PowerShell (PoSH) would have been a little more difficult to interpret.

Continue reading