You deploy the host virtual machine and prepare the VMware Cloud Foundation instance before installing and configuring the PowerShell Module for VMware Cloud Foundation Reporting and Python Module for VMware Cloud Foundation Health Monitoring in vRealize Operations.
Deploy the Host Virtual Machine for Health Reporting and Monitoring for VMware Cloud Foundation
You deploy the host virtual machine within the management vCenter Server instance and use it to execute the PowerShell Module for VMware Cloud Foundation Reporting and the Python Module for VMware Cloud Foundation Health Monitoring in vRealize Operations.
The host virtual machine can use a Photon OS or Windows Server based operating system that adheres to your orgainzation's standards. For illustration purposes or use within non-production environment, this validated solution uses a sample Photon OS host virtual machine, available for download at Photon OS sample appliance.
UI Procedure
- Log in to the management domain vCenter Server at https://<management_vcenter_server_fqdn>/ui by using an account with Administrator privileges.
In the Hosts and clusters inventory, navigate to the default management data center and expand the data center.
Right-click the cluster, and select Deploy OVF template.
On the Select an OVF template page, select Local file, and click Upload files.
On the Open dialog page, navigate to the OVA file, click Open, and click Next.
On the Select a name and folder page, in the Virtual machine name text box, configure the settings according to your VMware Cloud Foundation Planning and Preparation Workbook, and click Next.
On the Select a compute resource page, select the compute resource, and click Next.
On the Review details page, review the settings, and click Next.
On the Select storage page, configure the settings according to your VMware Cloud Foundation Planning and Preparation Workbook, and click Next.
On the Select networks page, from the Destination network drop-down menu, select the management VLAN port group, and click Next.
On the Customize template page, configure the settings according to your VMware Cloud Foundation Planning and Preparation Workbook, and click Next.
(Video) How to build a hybrid cloud based on VMware Cloud Foundation and vRealize Suite.On the Ready to complete page, click Finish, and wait for the completion of the process.
Power on the host virtual machine.
In the Hosts and clusters inventory, navigate to the default management data center and expand the data center.
Expand the cluster.
Right-click the host virtual machine and, from the Actions drop-down menu, select Power > Power on.
Create Virtual Machine and Template Folder for the Host Virtual Machine for Health Reporting and Monitoring for VMware Cloud Foundation
To improve ease of management of the host virtual machine, you create a virtual machine folder in the management vCenter Server instance.
UI Procedure
- Log in to the management domain vCenter Server at https://<management_vcenter_server_fqdn>/ui by using an account with Administrator privileges.
In the VMs and templates inventory, navigate to the default management data center, right-click the data center, and select New folder > New VM and template folder.
In the New folder dialog box, enter a name for the folder according to the VMware Cloud Foundation Planning and Preparation Workbook, and click OK.
PowerShell Procedure
Start Windows PowerShell.
Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.
$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"$sddcManagerUser = "administrator@vsphere.local"$sddcManagerPass = "VMw@re1!VMw@re1!"$sddcDomainName = "sfo-m01"$hrmFolder = "sfo-m01-fd-hrm"
Perform the configuration by running the command in the PowerShell console.
Add-VMFolder -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -folderName $hrmFolder
Move the Host Virtual Machine to the Dedicated Folder for Health Reporting and Monitoring for VMware Cloud Foundation
Move the host virtual machine to the dedicated virtual machine folder you previously created.
UI Procedure
- Log in to the management domain vCenter Server at https://<management_vcenter_server_fqdn>/ui as administrator@vsphere.local.
In the VMs and templates inventory, expand the management domain vCenter Server tree and the management domain data center.
Right-click the host virtual machine and select Move to folder.
In the Move to folder dialog box, select the dedicated folder for the host virtual machine, and click OK.
PowerShell Procedure
Start Windows PowerShell.
Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.
$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"$sddcManagerUser = "administrator@vsphere.local"$sddcManagerPass = "VMw@re1!VMw@re1!"$sddcDomainName = "sfo-m01"$hrmVmList = "sfo-m01-hrm01"$hrmFolder = "sfo-m01-fd-hrm"
Perform the configuration by running the command in the PowerShell console.
Move-VMtoFolder -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -vmList $hrmVmList -folder $hrmFolder
Add the Host Virtual Machine to the First Availability Zone VM Group for Health Reporting and Monitoring for VMware Cloud Foundation
If the management domain is configured with two availability zones, to provide fail over to the second availability zone, move the host virtual machine to the VM group for the first availability zone. The virtual machine write operations are performed synchronously across both availability zones and each availability zone has a copy of the data.
UI Procedure
- Log in to the management domain vCenter Server at https://<management_vcenter_server_fqdn>/ui as administrator@vsphere.local.
- In the Hosts and clusters inventory, expand the management domain vCenter Server tree and expand the management domain data center.
Select the default management vSphere cluster and click the Configure tab.
In the left pane, select Configuration > VM/Host groups.
Select the VM group for the first availability zone according to your value in the VMware Cloud Foundation Planning and Preparation Workbook and click Add VM/Host group members.
In the Add group member dialog box, select the host virtual machine and click OK.
PowerShell Procedure
Start Windows PowerShell.
Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.
$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"$sddcManagerUser = "administrator@vsphere.local"$sddcManagerPass = "VMw@re1!VMw@re1!"$sddcDomainName = "sfo-m01"$groupName = "primary_az_vmgroup"$vmList = "sfo-m01-hrm01"
Perform the configuration by running the command in the PowerShell console.
Add-VmGroup -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -name $groupName -vmList $vmList
Assign SDDC Manager Role to a Service Account for the PowerShell Module for VMware Cloud Foundation Reporting
To provide the necessary privileges to the service account for the PowerShell Module for VMware Cloud Foundation Reporting, you assign the ADMIN role to a service account in SDDC Manager.
The cmdlets in this PowerShell module, and its dependencies, return data from SDDC management components. SDDC Manager provides the credentials for the platform components. For cmdlets that connect to SDDC Manager, you use the VMware Cloud Foundation API and a user or service account with the ADMIN role in SDDC Manager.
UI Procedure
- Log in to SDDC Manager at https://<sddc_manager_fqdn> with a user assigned the Admin role.
- For VMware Cloud Foundation 4.4.x, in the navigation pane, click Administration user.
- For VMware Cloud Foundation 4.5 or later, in the navigation pane, click Administration > Single sign on.
- On the Manage users page, click Add user or group.
- On the Add user or group page, in the Search user text box, enter the name of the service account according to the value in your VMware Cloud Foundation Planning and Preparation Workbook.
- In the User / group name column, select the check box for the service account.
- In the Role column, from the Choose role drop-down menu, select the ADMIN role.
- Click Add.
PowerShell Procedure
Start Windows PowerShell.
Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.
$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"$sddcManagerUser = "administrator@vsphere.local"$sddcManagerPass = "VMw@re1!VMw@re1!"$domainFqdn = "sfo.rainpole.io"$domainBindUser = "svc-vsphere-ad"$domainBindPass = "VMw@re1!"$hrmServiceAccount = "svc-hrm-vcf"
Perform the configuration by running the command in the PowerShell console.
Add-SddcManagerRole -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $domainFqdn -domainBindUser $domainBindUser -domainBindPass $domainBindPass -principal $hrmServiceAccount -role ADMIN -type user
Synchronize the Active Directory Users for vRealize Operations for Health Reporting and Monitoring for VMware Cloud Foundation
You synchronize the Active Directory users for use by vRealize Operations in the clustered Workspace ONE Access.
UI Procedure
- Log in to the clustered Workspace ONE Access deployment at https://<clustered_workspace_one_access_fqdn>/admin with a user assigned the administrator role.
- On the main navigation bar, click Identity and access management.
- Click the Directories tab and select your directory name according to the values in your VMware Cloud Foundation Planning and Preparation Workbook.
- On the Settings tab, click Sync settings.
- Click the Users tab.
- Under Specify the user DNs, click Add.
- In the text box, enter the base DN for Active Directory users according to the values in your VMware Cloud Foundation Planning and Preparation Workbook.
- Click Save and sync.
- Click Sync directory.
Define a Custom Role in vRealize Operations for the Python Module for VMware Cloud Foundation Reporting
To provide the necessary permissions, you create a custom role for the Python module in vRealize Operations. These permissions provide least privilege access to vRealize Operations REST APIs.
UI Procedure
- Log in to the vRealize Operations interface at https://<vrealize_operations_fqdn> with a user assigned the Administrator role.
- In the left pane, click Administration.
- Click Access control and click the Roles tab.
- Click Add.
- Configure the new custom role.
- On the Create Role page, configure the settings according to the values in your VMware Cloud Foundation Planning and Preparation Workbook, and click OK.
- Select new role and in the Permissions section, click Edit.
- In the Assign permissions to role, configure the settings and click Update.
Category
Permissions
Administration.REST APIs
All other read, write APIs
Read access to APIs
Assign vRealize Operations Custom Role to a Service Account for the Python Module for VMware Cloud Foundation Reporting
Import and assign a role to the service account in vRealize Operations. This allows the service account access to NSX, SDDC Health, vCenter, and vSAN adapter instance objects.
UI Procedure
- Log in to the vRealize Operations interface at https://<vrealize_operations_fqdn> with a user assigned the Administrator role.
- In the left pane, click Administration.
Click Access control and click the User accounts tab.
To import a service account, from the elliptical drop-down menu, select Import from source.
-
Assign the custom role to the service account.
(Video) Operationalizing VMware Cloud Foundation and vSphere with VMware vRealize Cloud Management- On the Import users page, configure the settings according to the values in your VMware Cloud Foundation Planning and Preparation Workbook and click Next.
- On the Assign groups and permissions page, click the Objects tab and, from the Select role drop-down menu, select the custom role according to the value in your VMware Cloud Foundation Planning and Preparation Workbook.
- Select the Assign this role to the user check box.
- In the Select object section, select following objects.
Object Hierarchies
Object
Adapter instance
NSX-T
SDDC Health Adapter
vCenter Adapter
vSAN Adapter
Click Finish.