WilliamLam.com

Exploring new VCSA VAMI API w/PowerCLI: Part 1

by // 11 Comments

One of the most most exciting developments in vSphere 6.5 with respect to Automation is the introduction of several new REST APIs included in the vCenter Server Appliance (VCSA). In addition to covering some of the existing capabilities like vSphere Content Library and Tagging, customers will now have access to a new basic Virtual Machine management API that has been greatly simplified compared to the traditional vSphere SOAP API and access to the VCSA's Virtual Appliance Management Interface API, also known to most as the VAMI.

I am particular excited about the VAMI REST API as this is where customers will be able to manage the entire full lifecycle of their VCSA/PSC which will eventually include all Day 2 operations as well as Install, Upgrade, Migrate and Recovery capabilities. This initial release of the VAMI REST API covers most of the functionality found in the current VAMI UI by going to https://[VCSA]:5480 after your VCSA or PSC has been deployed.

Not having spent a whole lot of time with the new VAMI REST API, I figured a good way for me to learn more about the APIs was to consume it and what better way than using PowerCLI? With PowerCLI 6.5 R1 (Windows version) release, there is a new Connect-CisServer and Get-CisService cmdlet that provides you access to these new REST APIs including the VAMI APIs. As I explore the new VAMI APIs, I plan to create a new VAMI PowerCLI Module that contains functions exerising some of the new APIs that you see today in the VAMI UI.

[Read more...]

Automated deployment and setup of vRealize Network Insight (vRNI)

by // 8 Comments

Earlier last week I had deployed the latest version of vRealize Network Insight (vRNI) 3.2 in my home lab to learn more about the product and its capabilities. The vRNI setup involves involves deploying two Virtual Machines, the first being the main vRNI Platform OVA. Once the vRNI Platform VM has been deployed, you will need to activate it with a license key and then generate a shared secret which is then used to deploy the vRNI Proxy OVA. Using the share secret, the vRNI Platform VM will be able to automatically detect when the vRNI Proxy VM is on the network and associate it with the deployment.

The workflow is pretty straight forward but as many of you know me, if I need to manually do something once, it means I should probably automate it for the future 🙂 I had looked around the documentation and did not see any published APIs for the initial setup and configuration. Although a CLI exists, it was only available post-deployment and it required SSH which I did not want to have to rely upon. I ended up reverse engineering the UI to replicate the workflow from an automation standpoint. I created a small PowerCLI script called vRNI-Deploy.ps1 and below are the instructions on using the script.

Step 0 - Obtain a vRNI License Key, which is required to setup vRNI. You may need to work with your VMware Account team or contact VMware Sales to get an evaluation license key.

Step 1 - Download both the vRNI 3.2 Platform and Proxy OVA from here.

Step 2 - Download the vRNI-Deploy.ps1 script to a system that has the latest release of PowerCLI 6.5 R1 installed.

Step 3 - Edit the following sections of the script which you can find more details below:

The full path to both the vRNI Platform and Proxy OVAs:

$vRNIPlatformOVA
$vRNIProxyOVA

The vRNI License Key:

$vRNILicenseKey

The configuration of the vRNI Platform VM:

$vRNIPlatformVMName
$vRNIPlatformIPAddress
$vRNIPlatformNetmask
$vRNIPlatformGateway

The configuration of the vRNI Proxy VM:

$vRNIProxyVMName
$vRNIProxyIPAddress
$vRNIProxyNetmask
$vRNIProxyGateway

General deployment configuration for both VMs:

$DeploymentSize
$DNS
$DNSDomain
$NTPServer
$VMCluster
$VMDatastore
$VMNetwork

Note: The medium (smallest) deployment requires at least 42GB of memory (32GB reserved for Platform VM and 10GB reserved for the Proxy VM). Please ensure you have sufficient resources before deploying into your environment.

[Read more...]

Custom script bundle is now possible with Auto Deploy in vSphere 6.5

by // 10 Comments

It has been some time since I had looked at the Auto Deploy and Host Profile feature in vSphere. As a former customer, I still remember one of the challenges I had in evaluating Auto Deploy and specifically Host Profiles was the fact that it did not cover all the possible ESXi configurations. This made it very difficult to operationalize as you still needed to handle post-configurations through other mechanisms. Trying to keep both solutions did not make sense for me and I ended up opting for the traditional scripted installation method via Kickstart which I had hooks into automate the full ESXi configuration.

In vSphere 6.5, there was a huge effort to significantly improve both Auto Deploy and Host Profile to what customers had expected of this feature, especially around bringing parity between the configurations that could be done using the vSphere Clients and/or vSphere APIs into Host Profiles. In addition, there was also several UI enhancements that now makes it possible to use both Auto Deploy and Image Builder directly from the vSphere Web Client which was never possible before. For more details, be sure to check out the What's New vSphere 6.5 white paper here.

One new feature that I think is worth calling out is the new Script Bundle capability in Auto Deploy. Previously, if a particular configuration was not available via Host Profiles, there was nothing you could really do and you had to write your own custom post-deployment script to apply to the ESXi host. As I mentioned earlier, in vSphere 6.5, we have closed the gap on the ESXi configurations that were not possible using Host Profile and will ensure that will be in sync going forward. Having said that, there are still certain configurations that are not possible today such as creating a custom ESXi firewall rule for example. For these cases, you either had to either hack it up using a method like this or to create a custom ESXi VIB which would then force customers to lower their ESXi's software acceptance level which was not ideal nor acceptable, especially for customers that are security conscious.

[Read more...]