Quantcast
Channel: VMware Communities: Message List - VMware vCloud Director
Viewing all 7719 articles
Browse latest View live

Re: New 9.7 Appliance Install Issues

$
0
0

Hi

 

I tried command line below:

  • chown -R vcloud:vcloud /opt/vmware/vcloud-director/data/transfer
  • chmod -R 775 /opt/vmware/vcloud-director/data/transfer

which has brought appliance status to active but DB had same issue

 

No nodes found in cluster, this likely means PostgreSQL is not running on this node. Consult the management UI from another node where PostgreSQL is running. Otherwise, check /opt/vmware/var/log/vcd/vcd_ova_ui_app.log if you think this is an error.

 

Than I reinstalled once again and can't access any logs due to permission issues

 

root@vcloud [ ~ ]# /opt/vmware/var/log/vcd/setupvcd.log

-bash: /opt/vmware/var/log/vcd/setupvcd.log: Permission denied

root@vcloud [ ~ ]# /opt/vmware/var/log/vcd/setupvcd.log

-bash: /opt/vmware/var/log/vcd/setupvcd.log: Permission denied

root@vcloud [ ~ ]#

root@vcloud [ ~ ]# service vmware-vcd status

* vmware-vcd.service - LSB: The VMware vCloud Director service

   Loaded: loaded (/etc/rc.d/init.d/vmware-vcd; generated; vendor preset: enable

   Active: inactive (dead)

     Docs: man:systemd-sysv-generator(8)

lines 1-4/4 (END)

 

Any help would be appreciated.


API query AdminVM returns ACCESS_TO_RESOURCE_IS_FORBIDDEN (403)

$
0
0

Hi Experts,

 

In a use case running vCloud 9.1 (API v30.0) where we need to obtain all VM information for all vCloud Organisations, we need to query the AdminVM using GET requests such as:

 

  • /api/query?type=adminVM


as this will be executed by an external workflow process at set intervals, we are required to use a user with a limited set off permissions. Therefore we've tried to create some sort of "Read only Admin" on the "System" organization, having only read rights to all objects (using this as a guideline Predefined Roles and Their Rights ):

  • Name          : Provider vDC Storage Policy: View
  • Name          : Catalog: View ACL
  • Name          : UI Plugins: View
  • Name          : Organization vDC Gateway: View Load Balancer
  • Name          : vCenter: View
  • Name          : General: View Error Details
  • Name          : Organization vDC Gateway: View Static Routing
  • Name          : Custom entity: View custom entity definitions
  • Name          : Organization VDC: view metrics
  • Name          : Organization vDC Gateway: View NAT
  • Name          : Organization vDC Gateway: View IPSec VPN
  • Name          : Additional Services: View Running Workflows
  • Name          : Organization vDC Gateway: View Firewall
  • Name          : Organization vDC Gateway: View L2 VPN
  • Name          : Organization vDC: View
  • Name          : Network Pool: View
  • Name          : Cell Configuration: View
  • Name          : Organization vDC: Extended View
  • Name          : Access All Organization VDCs
  • Name          : Organization vDC Gateway: View
  • Name          : Host: View
  • Name          : Datastore: View
  • Name          : Custom entity: View custom entity instance
  • Name          : Organization vDC Distributed Firewall: View Rules
  • Name          : Service Library: View service libraries
  • Name          : Catalog: View Published Catalogs
  • Name          : Catalog: Shadow VM View
  • Name          : Organization vDC: View ACL
  • Name          : Custom entity: View all custom entity instances in org
  • Name          : Right: View
  • Name          : vApp: View VM metrics
  • Name          : Organization vDC Resource Pool: View
  • Name          : vApp: View ACL
  • Name          : VCD Extension: View
  • Name          : Organization vDC Gateway: View BGP Routing
  • Name          : vApp: Shadow VM View
  • Name          : Organization vDC Gateway: View SSL VPN
  • Name          : vApp: VM Check Compliance
  • Name          : Additional Services: View Workflows
  • Name          : Organization vDC Network: View Properties
  • Name          : Resource Pool: View
  • Name          : Organization: View
  • Name          : Organization: view metrics
  • Name          : Disk: View Properties
  • Name          : vApp Template / Media: View
  • Name          : General: Administrator View
  • Name          : Hybrid Cloud Operations: View to-the-cloud tunnel
  • Name          : Organization Network: View
  • Name          : Catalog: View Private and Shared Catalogs
  • Name          : Provider vDC: View
  • Name          : Organization vDC Gateway: View OSPF Routing
  • Name          : Provider vDC Resource Pool: View
  • Name          : Site: View
  • Name          : Organization vDC Gateway: View DHCP
  • Name          : Hybrid Cloud Operations: View from-the-cloud tunnel
  • Name          : Group / User: View
  • Name          : License Report: View
  • Name          : VDC Template: View
  • Name          : Provider Network: View
  • Name          : Organization vDC Gateway: View Remote Access


Unfortunetaly, we have been unable to create a user / role that has the required permissions, as we are always getting this result:

  • This operation is denied." minorErrorCode="ACCESS_TO_RESOURCE_IS_FORBIDDEN"


The only clue we've found is in this thread on github (Full list of required rights · Issue #139 · vmware/container-service-extension · GitHub ) where it mentions you need the following right:

  • Organization: Perform Administrator Queries

 

However, in the vCloud GUI this permission is nowhere to be found. Is this some sort of hidden permission, or only introduced in a more recent release of vCloud, or...?

 

Please advise, we're breaking our heads on this one.

 

Cheers,

 

Tim

VCD Cells communication with Cassandra DB

$
0
0

Hi, we execute the procedure to store VM metrics in cassandra using VCD Virtual Appliance

 

1. How long is going to take the metrics to show in the GUI?

2. Is there a command to verify VCD and Cassandra are getting along?  I checked the cell-management-tool cassandra  but I did'nt finnd anyhting related

2. We're only seeing the main VCD cell (we deployed 3 cells per best practices) talking to the Cassandra Cluster, is that normal?

 

thanks in advance

 

Andy

Change location in vCD 10

$
0
0

I need change location in vcloud director 10 for example - mycloud.per.zettagrid.com, now is IP address.

In vCloud Director GUI is not view this option.

vCloud director appliance backup

$
0
0

I need to take a backup of my vCloud director appliance running with SQL database.

 

What is the procedure to take backup of my vCloud director appliance using FTP ?

 

I dont think we have VAMI option in vCloud director appliance.

 

I can see VMware article provides "Create-DB-Backup" script for taking backup of embedded postgres of VCD. But no articles available for VCD with SQL.

Re: Problems trying to undeploy vapp using rest api on vcloud director 9.5

$
0
0

$obj_content=@"

<UndeployVAppParams xmlns="http://www.vmware.com/vcloud/v1.5">

<UndeployPowerAction>powerOff</UndeployPowerAction>

</UndeployVAppParams>

 

$url = 'https://myvcdfqdn/api/vapp/{vappuuid}/action/undeploy"

$headers.'Content-Type' = "application/vnd.vmware.vcloud.undeployVAppParams+xml"

$task = Invoke-RestMethod -Uri $url -Headers $headers -Method POST -Body $obj_content  

 

My VCD Version is 9.7  this script(Powershell) is working. I use POST method.

Re: VCloud Diretor - cloud.uuid

$
0
0

Connect-VIServer VCSA_SERVER_NAME

Get-VM | % {Write-Host "$_; $((Get-AdvancedSetting -entity $_ -Name cloud.uuid).Value)"}

Re: vCD 10 installation issues

$
0
0

Unfortunately I can't access cloud appliance as it keeps asking me to login again even when using correct loggin details, only accessible appliance is :5480 which showing that postageDB not running on this server.


Re: VCloud Diretor - cloud.uuid

$
0
0

I have done export from vcenter via powershel but now I need export cloud.uuid of VMs from Vcloud director. Probably I have to connect to Vcloud director via API but I dont now how to export all of VMs with item cloud.uuid.

Creating Security Tags with vCD API

$
0
0

Has anyone been able to create security tags with the vCD API? 

 

If I use the Uri in this documentation (POST API-URL/network/services/securitytags/id/tag) I get a 404 error. (Security Tags )

 

The Uri referenced in that documentation (GET API-URL/services/securitytags/id/tag/) doesn't work to list security tags either.  After some searching here, I found that "GET API-URL/services/security/tag/scope/id" does work.  When I use the same Uri with a Post, I'm now getting a 403 error.  In the vCD logs it says:

 

"errorCode":125020,"details":"User is not authorized to access object universalroot-0 and feature library.tagging on node STANDALONE, please check object access scope and feature permissions for the user."

 

I tried using an admin account and I'm still getting the same error.  Any ideas?

 

Thanks!

 

 

vCD 10.0 - Provider UI connexion issued

$
0
0

HI,

 

i'm just finish a vCD 10.0 installation :

- 1 Server with NFS server on centos 7 (firewall on, nfs service allow)

- 1 Server with Postgres 10 listening on (vcd-db) 172.25.25.148, vCD 10 (1 ip adresse (vcd-01) 172.25.25.150 console, (vcd-db) 172.25.25.148 proxy) on centos 7 (firewall off and disabled)

- 1 windows Domain controller for DNS resolution

 

the installation and configuration finished successfully!

when i try to connect to the provider UI, i have a error message after success login : (translate for the french error message)

An error occurred during initialization.This may be due to issues such as accessing the application via an unsupported public URL or problems with a bad connection

 

I would appreciate any help as I can't find a way forward.

Thank you.

replacing vGateway (Edge gw) in vCloud director with Fortigate or Sophos VM

$
0
0

Hello,

didn't play a lot with vCloud director but now something came up where I have to replace vGateway from Vmware with 3rd party firewall like Sophos XG or Fortinet FG. Went over some videos but there is no mentioning that this is possible. It is always refered back to vGW,

Is there some links or docs where best practice for this type of deployment???

EdgeReplacement.PNG

So, is this setup doable where Edge GW is replaced with our VM (Fortinet or Sophos)?

What is best practice for this setup?

 

Tnx

Edited Jan 3, 2020 at 7:50 PM

vCloud director on single host

$
0
0

Hi,

 

I wonder if vcd10 deployment and running is possible on single esxi host, as it seems must have DRS enabled, which potentially requires more than one host. Also will VSAN is necessary for vcloud or local storage can be used?

How to view X_Forwarded-For log in a cell

$
0
0

 

 

vCloud Director Appliance:  9.7.0.3

nsx-v : 6.4.5

load balancer HTTPS Application Profile: HTTPS End-to-End with SSL

Only view load balancer vip connection information in the Cell log.

How do find the X_Forwarded-For ip header in the cell log?

Re: vCD 10 installation issues

$
0
0

I'm running into the same problem,

 

setupvcd.log shows this

[ERROR] Unsupported DB HA type found. DB HA type provided through OVA properties should be one of these three types: primary, standby, cell. Aborting.

I'm assuming this is the same thing


vCD and Chargeback (long read, many Q's)

$
0
0

Hi there!

 

I've spent way too much time on trying to figure out how to do proper chargeback in vCD, and now I'm turning here for some help and insights.

 

First, a bit about our environment;

It's vCD 9.7 (latest build) running on vSphere 6.0/6.5/6.7, with NSX and all components. (we're unable to upgrade to v10 due to Veeam integrations)

vRealize Operations 8.0.1 with Tenant App 2.3 (plus hotfix for vCPU policy issue), and all the latest MPs.

We have a couple of different orgs that are running as test.

 

Now, I'm trying to figure out how to do billing/chargeback properly. So far, my experience with the Tenant App is horrible and I've found most things quite difficult to customize.

 

A couple of questions regarding pricing policies:

(I have reviewed the docs; Creating and Assigning Pricing Policies but to no luck..)

1) For charge periods we can choose Hourly, Daily, Monthly. How does this affect the billing? If I use Monthly as a period, how will the customer be billed for something that's only used for parts of the month; Only for the time consumed or for the entire month?

2) Guest OS Rate feels like it's made for licensing compliance, but it's not extensive enough to cover MS licensing scenarios (for example, it should be able to accept rates based on no of vCPU etc.). I guess there needs to be external computing as well done in order to do proper billing?

3) I'd like a base fee for a VM (for example, just having a VM should cost like €1 per month), should I set this as a CPU policy?

4) There's nothing dynamically for RAM - I'd like to have option to have one cost for hardware and one for VMware licensing since there is a cap on vmw licensing for 24GB on the VM, it's not fair to let the customer pay licensing here as well.

 

In terms of billing, the Bills leave quite a lot to wish for..

1) There's no mention on the amount of resources consumed for a VM/vApp. It only shows the currency amount to pay.

2) Storage billing is de-coupled from the VM, and there's no way to tell in the Bill what VM/vApp/Media etc that is consuming said resources

3) Why is all VMs represented in a vApp for billing? This is generally not something customers will see, so this is extra confusing for them.

4) Will it show deleted items as well - for example, if a customer creates a Vm, uses it for a couple of days, then deletes it?

 

I'd buy in to the above if there's an detailed report that easily could be attached to the bill, but so far all the report templates seems to miss in delivering this info.

 

Speaking of reports, here's some missing parts I've found as well.

1) There's no option to run reports for specific time periods.

2) It's hard to get one single report that customers can relate directly to the bill.

 

What are your thoughts on the chargeback provided by VMware? Are you using any third party services for this (if so - which ones?)?

 

/Andreas

Re: replacing vGateway (Edge gw) in vCloud director with Fortigate or Sophos VM

$
0
0

Hi,

 

It should be possible - just deploy a VM/vApp with the new firewall, connect it to both networks (make sure the networks are isolated) and use it as default gateway. You can provide a direct connected external network for your Org in order to use with the VM.

 

Using it in other ways is not possible I'm afraid.

 

/Andreas

Re: vCloud director on single host

$
0
0

Hi,

 

Local storage can be used, and you can create a cluster with a single host with DRS enabled.

 

/Andreas

Re: vCloud director appliance backup

$
0
0

Have you tried using third party applications such as Veeam B&R to take an image backup?

Re: vCloud director appliance backup

$
0
0

We are creating Veeam backups for the cells and SQL server. With SQL manager we are using a maintenance plan for the SQL database.

Viewing all 7719 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>