WilliamLam.com

Using PowerCLI to automate the retrieval of VCSA Password Policies

by // Leave a Comment

I hope that every vSphere administrator or operator by now is familiar with the extremely powerful vSphere Guest Operations API functionality (details here and here), which can easily be consumed using PowerCLI's Invoke-VMScript cmdlet. If not, highly recommend you check out the links referenced. I know the GuestOps API is certainly my top favorite with sending VM keystrokes capability a very close second!

Not only does the GuestOps API unlock functionality that simply may not be possible (e.g. there's no API or automation interface) but it also enables automation within a VM without requiring any type of remote management services enabled (e.g. SSH or WinRM) or even networking to the VM for that matter!

The reason I am bringing all this up is that although there is not an API for managing and retrieving vCenter Single Sign-On (SSO) configurations which includes password policies, there is a way in which customers can still automate and retrieve this and other information by leveraging the GuestOps API. In fact, back in 2015 I demonstrated on how you can retrieve VCSA SSO password policy and configurations and we can simply apply the GuestOps API to help us automate this task. In addition, most customers do not enable SSH by default and we can still apply the GuestOps API technique and perform automation tasks to VSCSA without requiring SSH as described in this blog post back in 2016.

[Read more...]

Automate disabling @channel & @here notifications using private Slack API

by // Leave a Comment

Slack is a popular communication and collaboration tool which has been adopted by many organizations including the one I work for. I am a fan of Slack and use it on a regular basis. Like most users, I am a member of several different workspaces and a ton of different channels.

I think most Slack users would agree that one of the most commonly miss-used feature of Slack is the @channel and @here notifications which allows a user to broadcast a message that notifies everyone within a specific channel. I most often see this when a user is looking for immediate assistance and think that this is the best way to get help, it is not. In some cases, inpatient uses end up spamming multiple channels which can have up to 1K+ members! As you can imagine, this type of behavior is usually not well received.

This is the modern day "reply-all" email storms that I am sure many of you have at experienced at least once if not many more times within your organization 🙂 Slack does provide a few ways of disabling notification, either within the workspace but this would disable the feature completely and I do see value in this feature when used correctly or disabling notifications on a per-channel basis as shown in the screenshot below.

[Read more...]

Dynamic vSphere Health Checks in vSphere 6.7+

by // 14 Comments

One really neat feature of the vSphere HTML5 Client that was shipped in vSphere 6.7 is the ability to deliver new data applications that can run in the vSphere UI without requiring customers to update or upgrade their underlying vCenter Server. An example of this is the vSphere Health Check plugin that was included in vSphere 6.7, which I am guessing most folks probably did not even notice, including myself. The vSphere Health plugin is located at the vCenter Server level and under Monitor->Health as shown in the screenshot below.


Unlike a traditional vSphere Plugin, where the code and business logic is local to the vCenter Server and must be updated each time for new functionality, these data applications are actually delivered automatically and more importantly, out-of-band to a vCenter Server patch or upgrade. This means as new functionality is added, customers will automatically get the latest updates without having to do anything. So how does this actually work?

[Read more...]