VMware Integrated OpenStack User's Guide - VMware .
VMware IntegratedOpenStack User's GuideVMware Integrated OpenStack 5.1
VMware Integrated OpenStack User's GuideYou can find the most up-to-date technical documentation on the VMware website at:https://docs.vmware.com/If you have comments about this documentation, submit your feedback todocfeedback@vmware.comVMware, Inc.3401 Hillview Ave.Palo Alto, CA 94304www.vmware.comCopyrightVMware, Inc. 2015-2018 VMware, Inc. All rights reserved. Copyright and trademark information.2
Contents1 VMware Integrated OpenStack User's Guide 52 Log In to the VMware Integrated OpenStack Dashboard 63 Working with Images 8Import Images Using the GUI8Import Images Using the CLI9Configure an Image for Windows Guest Customization104 Configuring Access and Security for Instances 12Working with Security GroupsCreate a Security Group1213Modify the Rules for an Existing Security GroupEnabling SSH and ICMP AccessWorking with Key PairsAdd a Key Pair13141515Import a Key Pair16Allocate a Floating IP to an Instance165 Working with Networks 18Create a NetworkCreate a Router1819Create a DNS Zone20Configuring LBaaS v2.021Configure LBaaS Using the CLI22Configure LBaaS Using the GUI246 Working with Instances in OpenStack 27Start an OpenStack Instance from an ImageStart an OpenStack Instance from a SnapshotConnect to an Instance by Using SSHTrack Instance Use27283030Create a Snapshot from an Instance30Use Affinity to Control OpenStack Instance Placement317 Working with Volumes 32Create a VolumeTransfer a VolumeVMware, Inc.32333
VMware Integrated OpenStack User's Guide9 Working with Object Storage 39VMware, Inc.4
VMware Integrated OpenStackUser's Guide1The VMware Integrated OpenStack User's Guide shows you how to perform cloud end-user tasks inVMware Integrated OpenStack, including how to create and manage instances, volumes, snapshots,images, and networks.Intended AudienceThis guide is for cloud users who want to work with an OpenStack deployment that is fully integrated with VMware vSphere . To do so successfully, you should be familiar with the OpenStack components andfunctions.VMware Technical Publications GlossaryVMware Technical Publications provides a glossary of terms that might be unfamiliar to you. Fordefinitions of terms as they are used in VMware technical documentation, go to http://www.vmware.com/support/pubs.VMware, Inc.5
Log In to the VMware IntegratedOpenStack Dashboard2You access the user and administrative controls for your VMware Integrated OpenStack deploymentthrough the VMware Integrated OpenStack dashboard. The dashboard enables you to create andmanage instances, images, user accounts, and volumes, among other tasks.To log in to the dashboard, you must obtain the host name or IP address for the VMware IntegratedOpenStack dashboard from your OpenStack operator. This is the public virtual IP created when deployingup the VMware Integrated OpenStack in vSphere.PrerequisitesnVerify that you have a user account that was set up by an administrative user.nVerify that you have a browser with JavaScript and cookies enabled.Procedure1In a browser window, navigate to the host name or IP address for the VMware Integrated OpenStackdashboard.A certificate warning might appear the first time you access the URL. To bypass the warning, verifythe certificate or add an exception.2On the Log In page, enter the domain name, your user name and password.3Click Sign In.You are now logged in. The Project tab appears, opened to the default Overview page.VMware, Inc.6
VMware Integrated OpenStack User's GuideFigure 2-1. VMware Integrated OpenStack Overview PageVMware, Inc.7
Working with Images3In the OpenStack context, an image is a file that contains a virtual disk from which you can install anoperating system on a virtual machine. You create an instance in your OpenStack cloud by using one ofthe images available.The VMware Integrated OpenStack image service component natively supports images that arepackaged in the ISO, OVA, and VMDK formats. You can also import RAW, QCOW2, VDI, and VHDimages, which are automatically converted to the VMDK format during the image creation process.This chapter includes the following topics:nImport Images Using the GUInImport Images Using the CLInConfigure an Image for Windows Guest CustomizationImport Images Using the GUIYou can import images in the VMware Integrated OpenStack dashboard.The following image formats are supported:nVMDKnISOnOVAnRAWnQCOW2nVDInVHDNote ISO images cannot be used to create volumes.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select your project from the drop-down menu in the title bar.3Select Project Compute Images and click Create Image.VMware, Inc.8
VMware Integrated OpenStack User's Guide4Configure the image.OptionActionImage NameEnter a name for the image.Image DescriptionEnter a description for the image.Image SourceSelect the image file.FormatSelect ISO or VMDK.For images in other formats, including OVA, RAW, QCOW2, VDI, or VHD, selectVMDK as the disk format.Disk Adapter TypeFor VMDK images, select the adapter type.Minimum Disk (GB)Specify the minimum disk size for the image in gigabytes.Minimum RAM (MB)Specify the minimum RAM for the image in megabytes.ProtectedSelect Yes to prevent the image from being deleted.5(Optional) Click Next and configure metadata for the image.6Click Create Image.What to do nextYou can launch OpenStack instances using the imported image. See Start an OpenStack Instance froman Image.In the Actions column next to an image, you can also edit the image, update its metadata, delete theimage, or create a volume from the image.Import Images Using the CLIYou can import images using the command-line interface on the OpenStack Management Server.The following image formats are supported:nVMDKnISOnOVAnRAWnQCOW2nVDInVHDNote ISO images cannot be used to create volumes.Procedure1Log in to the OpenStack Management Server as viouser.VMware, Inc.9
VMware Integrated OpenStack User's Guide2Load the credentials file for your user account.source user-credentials.rc3Run the openstack image create command to obtain, define, and import the image.openstack image create image-name --disk-format {vmdk iso} --container-format bare --file imagefile {--public --private} [--property vmware adaptertype "vmdk-adapter-type" [--propertyvmware disktype "{sparse preallocated streamOptimized}"] --property vmware ostype "operatingsystem"OptionDescriptionimage-nameEnter the name of the source image.--disk-formatEnter the disk format of the source image. You can specify iso or vmdk.For images in other formats, including OVA, RAW, QCOW2, VDI, or VHD, use vmdkas the disk format.--container-formatEnter bare. The container format argument is not currently used by Glance.--fileSpecify the image file to upload.{--public --private}Include --public to make the image available to all users or --private to makethe image available only to the current user.--property vmware adaptertypeSpecify the adapter type of the VMDK disk.If you do not include this parameter, the adapter type is determined byintrospection.Note--property vmware disktypenFor disks using paravirtual adapters, include this parameter and set it toparaVirtual.nFor disks using LSI Logic SAS adapters, include this parameter and set it tolsiLogicsas.Specify sparse, preallocated, or streamOptimized.If you do not include this parameter, the disk type is determined by introspection.--property vmware ostypeSpecify the operating system on the image.What to do nextYou can launch OpenStack instances using the imported image. See Start an OpenStack Instance froman Image. You can also run the openstack image list command to see all images in your project.Configure an Image for Windows Guest CustomizationYou can configure images for Windows guest customization by applying guest customization metadata.Windows guest customization is an alternative to Cloudbase-Init. Do not use Windows guestcustomization metadata and Cloudbase-Init on the same image.VMware, Inc.10
VMware Integrated OpenStack User's GuidePrerequisitesnInstall the appropriate version of Microsoft System Preparation (Sysprep) for each guest operatingsystem that you want to customize.nInstall VMware Tools on the source image.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select your project from the drop-down menu in the title bar.3Select Project Compute Images.4Create a new Windows image or choose an existing image to customize.5Select Update Metadata next to the image that you want to use.6In the Available Metadata pane, expand Guest Customization Options.7Click the Add (plus sign) icon next to the metadata that you want to configure.OptionDescriptionAuto logon countEnter the number of times that the machine can be automatically logged in to asAdministrator. You can increase this value above 1 if your configuration requiresmultiple reboots. This value might be determined by the list of commands executedby the GuiRunOnce command.Automatic logonSelect the checkbox to automatically log in to the VM as Administrator.Maximum number of connectionsEnter the number of client licenses purchased for the Windows server beinginstalled.Note This parameter is used only if the server licensing mode is set toPerServer.Product KeyEnter the serial number to include in the answer file when mini-setup runs.Note If the guest operating system was installed using a volume-licensed CD, thisparameter is not required.8Server licensing modeSelect PerServer or PerSeat as the server licensing mode.Windows workgroup to joinSelect the workgroup that the virtual machine will join.Click Save.When you launch instances from the image, the specified Windows guest customization options areapplied.VMware, Inc.11
Configuring Access and Securityfor Instances4Before you start instances, configure access and security settings. For example, SSH access and ICMPaccess are not enabled by default.Security groupsEnable users to ping and use SSH to connect to the instance. Securitygroups are sets of IP filter rules that define networking access and areapplied to all instances in a project.Key pairsSSH credentials that are injected into an instance when it starts. To use keypair injection, the image that the instance is based on must contain thecloud-init package. Each project must have at least one key pair. If yougenerated a key pair with an external tool, you can import it intoOpenStack. You can use the key pair for multiple instances that belong to aproject.Floating IPsWhen you create an instance in OpenStack, it is assigned a fixed IPaddress in the network. This IP address is permanently associated with theinstance until the instance is terminated. You can also attach to an instancea floating IP address whose association can be modified.This chapter includes the following topics:nWorking with Security GroupsnWorking with Key PairsnAllocate a Floating IP to an InstanceWorking with Security GroupsA security group is a set of IP address filtering rules that define networking access for instances in aproject. Security group rules are project-specific.Each OpenStack project has a default security group. All instances in a project are included in the defaultsecurity group unless you specify a different security group for them. By default, the default security grouppermits outgoing traffic but denies all incoming traffic to instances.VMware, Inc.12
VMware Integrated OpenStack User's GuideTo change IP address filtering rules for instances in your project, you can create a new security groupwith the desired rules or modify the rules set in the default security group.Note For NSX-T Data Center deployments, each port can have a maximum of nine security groups.Create a Security GroupSecurity groups are sets of IP filter rules that define networking access and are applied to all instanceswithin a project. You can either modify the rules in the default security group or create a security groupwith custom rules.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select the project from the drop-down menu in the title bar.3Select Project Compute Access & Security.4Click the Security Groups tab.5Click Create Security Group.6Enter a name and description for the new group, and click Create Security Group.The new group appears in the list on the Security Group tab.7Configure the rules for the new group.aSelect the new security group and click Manage Rules.bClick Add Rule.cFrom the Rule drop-down menu, select the rule to add.The subsequent fields might change depending on the rule you select.dIf applicable, specify Ingress or Egress from the Direction drop-down menu.eAfter you complete the rule definition, click Add.8Configure additional rules if necessary.9Click the Access & Security tab to return to the main page.Modify the Rules for an Existing Security GroupYou can modify a security group by adding and removing rules assigned to that group. Rules define whichtraffic is allowed to instances that are assigned to the security group.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select the project from the drop-down menu in the title bar.3Select Project Compute Access & Security.VMware, Inc.13
VMware Integrated OpenStack User's Guide4Click the Security Groups tab.5Select the security group to modify and click Manage Rules.6To remove a rule, select the rule and click Delete Rule.7To add a rule, click Add Rule and select the custom rule to add from the Rule drop-down menu.OptionDescriptionCustom TCP RuleUsed to exchange data between systems and for end-user communication.Custom UDP RuleUsed to exchange data between systems, for example, at the application level.Custom ICMP RuleUsed by network devices, such as routers, to send error or monitoring messages.Other ProtocolYou can manually configure a rule if the rule protocol is not included in the list.aFrom the Remote drop-down list, select CIDR or Security Group.bIf applicable, select Ingress or Egress from the Direction drop-down menu.For TCP and UDP rules, you can open either a single port or a range of ports. Depending on yourselection, different fields appear below the Open Port list.cSelect the kind of access to allow.OptionDescriptionCIDR (Classless Inter-DomainRouting)Limits access only to IP addresses within the specified block.Security GroupAllows any instance in the specified security group to access any other groupinstance.You can choose between IPv4 or IPv6 in the Ether Type list.8Click Add.The new rule appears on the Manage Security Group Rules page for the security group.Enabling SSH and ICMP AccessYou can modify the default security group to enable SSH and ICMP access to instances. The rules in thedefault security group apply to all instances in the currently selected project.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select the project from the drop-down menu in the title bar.3Select Project Compute Access & Security.4Click the Security Groups tab, select the default security group, and click Manage Rules.VMware, Inc.14
VMware Integrated OpenStack User's Guide5Click Add Rule and configure the rules to allow SSH o accept requests from a particular range of IP addresses, specify the IP address block in the CIDRtext box.Instances will now have SSH port 22 open for requests from any IP address.6Click Add.7From the Manage Security Group Rules page, click Add Rule and configure the rules to allow ICMPaccess.8ControlValueRuleAll ICMPDirectionIngressRemoteCIDRCIDR0.0.0.0/0Click Add.Instances will now accept all incoming ICMP packets.Working with Key PairsKey pairs are SSH credentials that are injected into an instance when it starts.To use key pair injection, the image that the instance is based on must contain the cloud-init package.Each project should have at least one key pair. If you generated a key pair with an external tool, you canimport it into OpenStack. You can use the key pair for multiple instances that belong to a project.Add a Key PairKey pairs are SSH credentials that are injected into an instance when it starts. You can create or importkey pairs.You must provide at least one key pair for each project.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select the project from the drop-down menu in the title bar.3Select Project Compute Access & Security.VMware, Inc.15
VMware Integrated OpenStack User's Guide4Click the Key Pairs tab, which lists the key pairs available for the current project.5Click Create Key Pair.6Enter a name for the new key pair, and click Create Key Pair.7Download the new key pair at the prompt.8On the main Key Pairs tab, confirm that the new key pair is listed.Import a Key PairKey pairs are SSH credentials that are injected into an instance when it starts. You can create or importkey pairs.You must provide at least one key pair for each project.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select the project from the drop-down menu in the title bar.3Select Project Compute Access & Security.4Click the Key Pairs tab, which lists the key pairs available for the current project.5Click Import Key Pair.6Enter the name of the key pair.7Copy the public key to the Public Key text box and click Import Key Pair.8Return to the main Key Pairs tab to confirm that the imported key pair is listed.Allocate a Floating IP to an InstanceYou can attach a floating IP address to an instance in addition to the fixed IP address that is assignedwhen it is created. Unlike fixed IP addresses, you can modify floating IP address associations at any time,regardless of the state of the instances involved.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select the project from the drop-down menu in the title bar.3Select Project Compute Access & Security.4Click the Floating IPs tab, and click Allocate IP to Project.5Choose the pool from which to pick the IP address and click Allocate IP.VMware, Inc.16
VMware Integrated OpenStack User's Guide6Click Associate in the Floating IPs list and configure the floating IP associations settings.OptionDescriptionIP AddressClick the plus sign to add an IP address.Ports to be associatedSelect a port from the list. The list shows all the instances with their fixed IPaddresses.7Click Associate.8(Optional) To disassociate a floating IP address from an instance, click the Floating IPs tab, and clickDisassociate in the Actions column for the IP address. .9To release the floating IP address back into the pool of addresses, click More and select ReleaseFloating IP.10 Click the Floating IPs tab and select the IP address.11 Click Release Floating IPs.VMware, Inc.17
Working with Networks5The OpenStack Networking service provides a scalable system for managing the network connectivity inan OpenStack cloud deployment. It can react to changing network needs, for example, creating andassigning new IP addresses. You can also configure logical routers to connect the different networkswithin your VMware Integrated OpenStack deployment.For more information about how to manage networks, see the VMware Integrated OpenStackAdministrator Guide.This chapter includes the following topics:nCreate a NetworknCreate a RouternCreate a DNS ZonenConfiguring LBaaS v2.0Create a NetworkThe OpenStack Networking service component is a scalable system for managing network connectivitywithin your VMware Integrated OpenStack deployment. With the VMware Integrated OpenStackdashboard, you can quickly create logical networks.Procedure1Log in to the VMware Integrated OpenStack dashboard.2Select the project from the drop-down menu in the title bar.3Select Project Network Networks.The Networks page lists the networks that are currently configured.4Click Create Network.5On the Network tab, enter a name for the new network.6(Optional) Select Admin State to have the network forward packets.7Click Next.VMware, Inc.18
VMware I
In the OpenStack context, an image is a file that contains a virtual disk from which you can install an . Option Action Image Name Enter a name for the image. Image Description Enter a description for the image. Image Source Select the image file. Format Select ISO or VMDK.
1.4. set environment variables using the openstack rc file c a t o e st c o an - i e c n 2.1. openstack usage 2.2. openstack optional arguments 2.3. openstack acl delete 2.4. openstack acl get 2.5. openstack acl submit 2.6. openstack acl user add 2.7. openstack acl user remove 2.8. openstack action definition create 2.9. openstack action .
VMware's OpenStack Initiative Contribute to OpenStack Integrate VMware compute, network, storage SW with OpenStack. Make OpenStack better, helping customers succeed with their cloud effort. Help customers understand how VMware technology helps them build the best possible OpenStack cloud.
2.7 VMware vCenter Support Assistant 22 2.8 VMware Continuent 23 2.9 VMware Hyper-Converged Infrastructure Kits 23 2.10 VMware Site Recovery Manager 23 2.11 VMware NSX 24 2.12 VMware NSX Advanced Load Balancer 28 2.13 VMware SD-WAN by VeloCloud 29 2.14 VMware Edge Network Intelligence 30 2.15 VMware NSX Firewall 30
The following OpenStack distributions support the VMware ESXi hypervisor in a cloud environment. They offer OpenStack CLI and REST API control of VMware compute, storage and networking resources for simplified, more agile cloud automation while retaining use of VMware tools like vMotion. Each OpenStack ecosystem member and VMware partner
Web-based Lab Guide Presentation PDF 3. Agenda Module 1 SDN In OpenStack Module 2 OpenStack Networking Module 3 Neutron L2 Module 4 OpenStack Services Module 5 Cisco & OpenStack A Short History of SDN Dynamic 'overlay' networks SDN Controllers SDN in OpenStack
OpenStack Summit, Paris, Nov. 3-7, 2014 15 Workforce Transformation Organized structured tiered trainings for new team members OpenStack Basics OpenStack Boot Camp for the product team OpenStack on OpenStack DevOps, CI/CD philosophy All hands-on deck testing approach Bi-weekly sharing sessions open to all
Oracle OpenStack is based on the OpenStack Kolla project, which aims to simplify deployments by using Docker containers to run OpenStack clouds. Oracle provides Docker images for OpenStack services based on Oracle Linux 7. In line with Docker best practices, each OpenStack service is broken down into its components (sometimes
Oracle OpenStack is based on the OpenStack Kolla project, which aims to simplify deployments by using Docker containers to run OpenStack clouds. Oracle provides Docker images for OpenStack services based on Oracle Linux 7. In line with Docker best practices, each OpenStack service is broken down into its components (sometimes
