In vCD System Admin can manage everything, but this is not the same case in other cloud products from other vendors as well as vRA. Is there any plan to make changes in System Admin Role Management in vCD in any new version?
↧
Better System Admin Role Management like vRA in vCD
↧
Task Status in vCD?
What will happen to the task, if task started from vCD is started on vCenter too and then suddenly connection between vCD and vCenter is lost and after 10-15 mins connection is back. It will fail at vCD or Completed? (what would be the status of this task in vCD)?
↧
↧
Re: Tenant options for Performance statistics
Hi Malcolm,
In vCloud Director releases from 5.60 through v8.20 (inclusive) you can retrieve performance metrics for VMs via the vCloud API. The provider needs to configure a couple of databases (Cassandra and KairosDB) in their platform for this to work. The API calls are reasonably straightforward and can extract common metrics (CPU, Memory, Network etc.) for each VM. There are some details on this here: https://blogs.vmware.com/vcat/2015/08/vmware-vcloud-director-virtual-machine-metric-database.html
In the latest (v9) release of vCloud Director, the requirement for KairosDB at the provider is removed (just Apache Cassandra is now required) and the performance metrics can be viewed 'live' in the new HTML5 tenant UI. See Louis Liu's post here:
Regards, Jon.
↧
Re: Create global metadata
I don't think you can pre-create these - the only way I can see would be to create a blocking task which adds the appropriate metadata before allowing the operation to proceed. See here for reference on blocking tasks in vCloud Director:
Configuring Blocking Tasks and Notifications
If all you want to do is ensure that metadata is created if not already present, you may be able to use something like my PowerShell module ( https://kiwicloud.ninja/2016/02/working-with-vcloud-metadata-in-powercli-part-1/ and https://kiwicloud.ninja/2016/03/working-with-vcloud-metadata-in-powercli-part-2/ ) on a scheduled basis to identify objects which don't have a particular key/value set and create these entries.
I've also written some scripting internally to synchronise vCloud metadata with vCenter tags - we needed to do this as we have some 3rd party software which updates vSphere tags but doesn't understand vCD metadata, I should probably write a followup article on this when I get some time as may be useful to others...
Regards, Jon
↧
Re: VMs LOSING Network Interfaces - Require Help
Hmm, this sounds suspiciously like an issue I had in an RDS environment where users had elevated privilege and kept removing virtual hardware from the Windows 'disconnect USB device' menu - simple oversight, but maybe they'd be able to do the same thing with vNICs(?) - not tried it, but could be possible. Can't think of anything else that would remove configured virtual hardware like that.
↧
↧
Re: Client Integration Plugin - macOS
I am having the same issue. i am unable to upload any media despite having installed the client plugins, this is a vcd 9.0 install.
What was the fix for the problem?
↧
VMware vCD tenant portal in 9.0
When i try to access the new tenant UI via the https://<vcd>/tenant/<tenant name>, i get a "Cannot contact server, you seem to be offline" error message. The vcd webconsole works fine and so does all the other functionality. Is there something that i need to set specifically to access the new tenant portal UI?
Gak
↧
vCDNI to VXLAN Migration
Hi
We are migrating our infrastructure from vCDNI to VXLAN, as we have to upgrade our infrastructure to vSphere6.5.
We have migrated more than 90% of organization to VXLAN successfully.
Issue we are facing is with some organizations, which is showing as migrated to VXLAN in vCloud director but on vSphere-still resides on vCDNI Port Group.
Ideally it should be on vxlan virtual wire.
↧
Re: Task Status in vCD?
The task is passed to vCenter and should be completed on that end. vCD may not reflect this completion though as it may no longer be tracking the task.
↧
↧
Re: Create global metadata
Thanks jonathanw,
yous metadata Module is quite useful!
Are your Scripts to synchronise vCloud metadata with vCenter tags also in PowerShell?
Are you able to share these Scripts?
Best Regards,
Markus
↧
Re: Create global metadata
Hi Markus,
Yes the sync scripts are also in PowerShell, but they're quite specific to some of our internal processes, I'll tidy them up and make them more generic and share them on my blog when I get time.
Regards, Jon.
↧
vCloud Director 9.0 Access
How would I get access to the vCloud Director 9.0 ISO to test in a lab. I'm not part of a VSPP agreement, but as a vExpert I'd like to evaluate the software for use within a Service Provider environment - every "Try it Free" link just takes me to the homepage.
↧
Design question about Multi-Tenant customers
I have a solution i want our web team to provide separate customers from vcloud.
The tenant/customer may or may not ever login to vcloud to manage these provided servers. To start it would just be me and my web team managing it for the customers.
I am reading the vmware vcloud director for service providers document here.
I have created my Organization for this solution as "Web Team". Where i am stuck is should i be creating 1 VDC and putting all my customers in it? I notice i can have many edge gateways deployed off of one VDC. This is good as i want each customer to have its own ESG.
Organization VDCs get put under the organization. This makes sense. I want our web team to be an organization providing its "service" to all tenants under it.
The guide states:
An Organization Virtual Datacenter (Org vDC) is a subgrouping of compute and storage resources allocated from a provider VDC and assigned to a single organization. An organization VDC is provisioned resources using vCloud Director resource allocation models. These are represented in vSphere by “resource pools,” defined in Table 2.
Does that verbage mean then i should be creating a single VDC with 100s of customers / vapps and an ESG for each customer attached to this one VDC .........or should i create a vDC for each customer/tenant and put their vAPPs in it....and attach a single edge to each vcd for each customer?
It think the second option of a VDC per tenant sounds the most correct for my use case but i could be thinking about this wrong.
↧
↧
Re: VMware vCD tenant portal in 9.0
Has the public addresses been configured? Seen something similar if that had not been configured. Otherwise is there any hits in the logs for this login?
↧
Not able to reconfigure VM for mutiple section
I have tried to make a POST request as per the example ( https://pubs.vmware.com/vca/index.jsp#com.vmware.vcloud.api.doc_56/GUID-4759B018-86C2-4C91-8176-3EC73CD7122B.html ) to update multiple sections of the VM. But i always get error 415
I always get the below error even if i try to update atleast one section, like either "name and description" or just "network connection section"
<?xml version="1.0" encoding="UTF-8"?>
<Error xmlns="http://www.vmware.com/vcloud/v1.5" majorErrorCode="415" message="Unsupported Media Type" minorErrorCode="UNSUPPORTED_MEDIA_TYPE" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.vmware.com/vcloud/v1.5http://vcloud-url/api/v1.5/schema/master.xsd"></Error>
Is it possible to do "reconfigureVM" action request ? and if yes, could anyone help with updating vm name and network section
Note: I can do PUT request to update each section separately.
And yes the "test_vapp1-network" in Network Section in below XML which is the vapp network name does exist.
Here is my XML:
<?xml version="1.0" encoding="UTF-8"?><Vm xmlns="http://www.vmware.com/vcloud/v1.5" name="test_vm_1"> <Description>A test VM</Description> <NetworkConnectionSection type="application/vnd.vmware.vcloud.networkConnectionSection+xml" xmlns="http://www.vmware.com/vcloud/v1.5" xmlns:ovf="http://schemas.dmtf.org/ovf/envelope/1"> <ovf:Info>Firewall allows access to this address.</ovf:Info> <PrimaryNetworkConnectionIndex>0</PrimaryNetworkConnectionIndex> <NetworkConnection network="test_vapp1-network"> <NetworkConnectionIndex>0</NetworkConnectionIndex> <IsConnected>true</IsConnected> <IpAddressAllocationMode>POOL</IpAddressAllocationMode> </NetworkConnection> </NetworkConnectionSection> <GuestCustomizationSection xmlns="http://www.vmware.com/vcloud/v1.5" xmlns:ovf="http://schemas.dmtf.org/ovf/envelope/1" ovf:required="false"> <ovf:Info>Specifies Guest OS Customization Settings</ovf:Info> <Enabled>true</Enabled> <ChangeSid>true</ChangeSid> <VirtualMachineId>hddhdhdhd</VirtualMachineId> <AdminPasswordEnabled>true</AdminPasswordEnabled> <AdminPassword>test123456</AdminPassword> <ResetPasswordRequired>false</ResetPasswordRequired> <CustomizationScript /> <ComputerName>test_vm_1</ComputerName> </GuestCustomizationSection></Vm>
↧
Re: Not able to reconfigure VM for mutiple section
I've often found 'Unsupported Media Type' means that you are submitting a body document without specifying the correct 'Content-Type' header in your POST request, for the example you reference this must be set to 'application/vnd.vmware.vcloud.vm+xml'.
Regards, Jon.
↧
Re: Design question about Multi-Tenant customers
Typically in vCD-SP you create an Organization for each tenant/customer and then 1 or more VDCs for each Organization to provide their resources.
In your use-case where tenants may or may not need to log in there are a number of ways you could achieve this, the main ones being:
1) Single Organization / 1 VDC - shared by every tenant
2) Single Organization / VDC for each tenant
3) Organization per tenant / 1 (or more) VDCs each
Worth noting that:
- Storage is allocated per VDC, so if you split each tenant into its own Org/VDC you'll need to administer storage allocations for each separately.
- OrgVDC networks can only be shared between VDCs inside a single Organization, so if you need the hosted VMs to share an internal network they need to be in the same Organization.
- External networks can be used by multiple tenants/Organizations (e.g. the 'uplink' interface on your Edges).
You may have issues allowing a customer to administer 'just their own' Edge Gateway in 1) and 2) since the edge gateway roles assignment in the security model will apply to ALL edges in the VDC.
I would also strongly advise you not to do 2), setting security permissions in this scenario will be awkward since the 'Organizational Administrator' role will see all Org VDCs and you will need to create custom roles to limit scope to a single VDC.
It sounds like the 'best' fit for your requirement would be option 3, if your web team are 'system' level administrators they will automatically be able to see and administer all the tenant Organizations and VDCs, but tenants will only ever see their own resources (VMs and Edge Gateway). Doing it this way also allows your tenants to federate access back to their own directory service (e.g. ADFS) if they want to.
↧
↧
Re: Task Status in vCD?
The status of task in vCD is most likely to be reflect as failed. The task may be completed at vCenter level, but since connection between vCD and vCenter was broken, vCD is not informed about task status.
You can check the task status in VCDDB to see whats the status code assigned to task.
You can fire following queries in DB:
1: Find The Org ID from DB
SELECT * FROM organization WHERE name LIKE '%Org_Name9%';
Note down the Org ID and supply in next query. Org id will be similar to 0xBDC5FF75F4424D9982.........
2: Find all tasks that are currently running in this Org
SELECT * FROM task WHERE org_id in (0xBDC5FF75F4424D9982..............)
Also if the task status is vCD is showing as busy and not failed then
SELECT * FROM busy_object bo INNER JOIN task t ON bo.task_id = t.id WHERE t.org_id in (0xBDC5FF75F4424D9982.......................)
SELECT * FROM jobs WHERE org_id in (0xBDC5FF75F4424D9982...........................) AND stoptime LIKE '%9999%' ORDER BY starttime
So if a task has completed at vCenter and status of same task is busy in vCD then either via API call we have to kill the task force status oft ask to be completed via DB edit.
↧
Re: vCloud Director 9.0 Access
vCD is not available for download to normal users. Only service providers have ability to download it from myvmware.com.
Talk to me offline on this subject and I will see what I can do to help you with this.
↧
Re: vCD PowerCLI Create an Edge Gateway
Hi guys.
imho, this piece of code don't work or out of date (checked in vCD 8.20.0.2):
#Create an Internal network on the Edge gateway
$edgeGateway = Search-Cloud -QueryType EdgeGateway -Name $orgName | Get-CIView | where {$_.name -like "$orgName*"}
$ExNetnetwork = New-Object VMware.VimAutomation.Cloud.Views.OrgVdcNetwork
$ExNetnetwork.EdgeGateway = $edgeGateway.Id
$ExNetnetwork.isShared = $false
$ExNetnetwork.Configuration = New-Object VMware.VimAutomation.Cloud.Views.NetworkConfiguration
$ExNetnetwork.Name = "ExNet-Inside"
$ExNetnetwork.Configuration.IpScopes = New-Object VMware.VimAutomation.Cloud.Views.IpScopes
$ExNetnetwork.Configuration.FenceMode = "natRouted"
$IpScope = New-Object VMware.VimAutomation.Cloud.Views.IpScope
$IpScope.Gateway = $ExNetinternalGateway
$IpScope.Netmask = $ExNetinternalNetmask
$IpScope.Dns1 = $ExNetinternalGateway
$IpScope.DnsSuffix = 'mv.rackspace.com'
$IpScope.IpRanges = New-Object VMware.VimAutomation.Cloud.Views.IpRanges
$IpScope.IpRanges.IpRange = New-Object VMware.VimAutomation.Cloud.Views.IpRange
$IpScope.IpRanges.IpRange[0].StartAddress = $ExNetfirstInternalIP
$IpScope.IpRanges.IpRange[0].EndAddress = $ExNetlastInternalIP
$ExNetnetwork.Configuration.IpScopes.IpScope += $IpScope
$orgVdc.ExtensionData.CreateNetwork($ExNetnetwork)
↧