docs.rackspace.com/api

Transcription

1 docs.rackspace.com/api

2 Customer Handbook: Dedicated VMware vcenter Server v1.0 ( ) 2015 Rackspace US, Inc. Dedicated VMware vcenter Server (Dedicated vcenter), provides the ability to quickly expand DC capacity without the need for further CapEx investment. IT professionals can easily manage hosted VMware environments using existing scripts, direct access to the vsphere API, and existing VMware and third-party tools. Dedicated vcenter improves agility by eliminating long procurement lead times so that new business demands are met all while maintaining control. Rackspace provides 24x7x365 proactive support by our VMware Certified master professionals. The document is for informational purposes only and is provided AS IS. RACKSPACE MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, AS TO THE ACCURACY OR COM- PLETENESS OF THE CONTENTS OF THIS DOCUMENT AND RESERVES THE RIGHT TO MAKE CHANGES TO SPECIFICATIONS AND PROD- UCT/SERVICES DESCRIPTION AT ANY TIME WITHOUT NOTICE. RACKSPACE SERVICES OFFERINGS ARE SUBJECT TO CHANGE WITH- OUT NOTICE. USERS MUST TAKE FULL RESPONSIBILITY FOR APPLICATION OF ANY SERVICES MENTIONED HEREIN. EXCEPT AS SET FORTH IN RACKSPACE GENERAL TERMS AND CONDITIONS AND/OR CLOUD TERMS OF SERVICE, RACKSPACE ASSUMES NO LIABILITY WHATSOEVER, AND DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO ITS SERVICES INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. Except as expressly provided in any written license agreement from Rackspace, the furnishing of this document does not give you any license to patents, trademarks, copyrights, or other intellectual property. Rackspace, Rackspace logo and Fanatical Support are registered service marks of Rackspace US, Inc. All other product names and trademarks used in this document are for identification purposes only and are property of their respective owners. ii

3 Table of Contents 1. Preface Dedicated VMware vcenter Server support Getting started Product description Architecture Dedicated vcenter components Dedicated vcenter features Dedicated vcenter permissions Rackspace support services Authentication methods Billing Licensing, images, and patching Licensing Guest Operating System images Patching IP addresses API list Spheres of support FAQ Appendix: Dedicated vcenter Server permissions Additional resources iii

4 List of Figures 2.1. Architecture... 3 iv

5 List of Tables 2.1. VMware services Dedicated vcenter Server features Dedicated vcenter Server permissions Dedicated vcenter Server pricing Virtualized support Hardware support Network support Monitoring support Operating systems support Security support Dedicated vcenter permissions list v

6 1. Preface Dedicated VMware vcenter Server (Dedicated vcenter Server), provides the ability to quickly expand DC capacity without the need for further capex investment. Easily manage hosted VMware environments using existing scripts, direct access to the vsphere API, and existing VMware and third-party tools. Dedicated vcenter Server improves agility by eliminating long procurement lead times so that new business demands are met all while maintaining control. Rackspace provides 24x7x365 proactive support by our VMware Certified Professionals Dedicated VMware vcenter Server support Rackspace offers 24x7x365 support for Dedicated VMware vcenter Server. Rackspace completely manages and supports the management nodes; Rackspace manages and supports the physical infrastructure and the ESX hypervisors on the compute nodes, however, customers are expected to self-manage the virtual machines and guest OS. You can also visit the Rackspace Managed Virtualization community forums. The forum is open to all Dedicated VMware vcenter Server users and is moderated and maintained by Rackspace personnel: For more information about Dedicated VMware vcenter Server, please visit the following pages: Dedicated VMware vcenter Server product page Dedicated VMware vcenter Server resources 1

7 2. Getting started This chapter provides the following information: An overview of the Dedicated vcenter Server product Components and features Permissions Rackspace support Authentication methods 2.1. Product description Dedicated VMware vcenter Server (Dedicated vcenter Server), offers you the ability to quickly expand DC capacity without the need for further CapEx investment. With direct access to the vsphere API, you can use your existing scripts, and the same VMware and third-party tools to easily manage the hosted VMware environment. Dedicated vcenter Server improves agility by helping eliminate long procurement lead times so that you can readily meet new business demands while maintaining control. With over 14 years of managed hosting experience, Rackspace provides around-the-clock proactive support and the VMware Certified Professional expertise that you require Architecture The following diagram shows the architecture of the Dedicated vcenter Server, including firewalls, load balancers, storage, and VM locations. 2

8 Figure 2.1. Architecture 2.3. Dedicated vcenter components The Dedicated vcenter Server product comprises the VMware vsphere cluster for management and VMware vsphere cluster for compute. The following VMware services operate on a management cluster with two hypervisors, which increases availability. vcenter Server Dedicated Virtual Machine Recovery (VMR) Virtual Appliance (Backup Appliance) vrealize Operations (vrops) Virtual Appliance VMware Update Manager (VUM) Virtual Appliance IP Allocation for VMs 3

9 Note Access to these VMware services is limited to the user interface or API for vcenter Server, and vrops. Rackspace manages and maintains the servers running the Dedicated vcenter services. The following VMware services operate on the management cluster. Table 2.1. VMware services vcenter Server Dedicated Virtual Machine Recovery (VMR) Virtual Appliance (Backup Appliance) vrealize Operations Manager (vrops) Virtual Appliance VMware Update Manager (VUM) Virtual Appliance IP Allocation for VMs Provides centralized visibility, proactive management and extensibility for VMware vsphere from a single console. Accessible via the java VI client, the vsphere Web Client and the vsphere API. VMR appliance enables image-based backup of the management cluster VMs. This allows Rackspace to quickly recover management cluster VMs. This VMR appliance is for use only by Rackspace and will not back up any of the VMs created by customer on the compute cluster. No customer access is provided to the VMR appliance. vrops is a capacity management tool that the customer can use to check the health of the hosted VMware environment, perform capacity planning or proactively eliminate performance bottlenecks. VUM automates patch management and eliminates manual tracking and patching of vsphere hosts. It compares the state of vsphere hosts with baselines then updates and patches hosts to enforce compliance. Rackspace uses this system to maintain dedicated VMware services. No customer access is provided. Pre-determined IP blocks that are assigned to your account for the purpose of managing all virtual machines created Dedicated vcenter features The following table provides a list and description of Dedicated vcenter features. As a Dedicated vcenter Server customer, you are granted the permissions listed as "Customer" in the Responsibility column. Table 2.2. Dedicated vcenter Server features Feature Supported Responsibility Description vmotion Customer Set up by Rackspace but the customer is responsible for executing migrations Storage vmotion Customer Enables live migration of virtual machine disk files within and across storage arrays without service disruptions HA Rackspace HA clustering is set up by Rackspace. Data Protection No Fault Tolerance No vshield Endpoint No vsphere replication No 4

10 Feature Supported Responsibility Description Hot Add Customer If a VM has a hot-add set, you can add or remove memory or CPU. App HA No Big Data Extensions No Virtual Serial Port Concentrator No DRS Rackspace DRS clustering is set up by Rackspace. DPM No Storage DRS No Profile Driven Storage No Storage I/O Control No Network I/O Control No SR-IOV No Flash Read Cache No VAAI Rackspace VAAI is available if supported on the storage array. Ditrubuted Switch No Host Profiles No Auto Deploy No 2.5. Dedicated vcenter permissions Customers have the rights to create, delete, and manage VMs within their Dedicated vcenter Server. Rackspace manages the ESXi hosts and the vcenter Server. Customers therefore only have limited permissions on hosts and servers. See Chapter 9, Appendix: Dedicated vcenter Server permissions [17] for a full list of permissions. The following table lists a summary of vcenter Server permissions. Table 2.3. Dedicated vcenter Server permissions Privileges Alarms Datastore Folder Network Performance Profile-driven Storage Resource Scheduled Task Tasks vapp Virtual Machine Datacenter Global Host Type of Access Full Access Full Access Full Access Full Access Full Access Full Access Full Access Full Access Full Access Full Access Full Access Limited Access Limited Access Limited Access 5

11 Privileges Sessions Storage Views Datastore Cluster Distributed Virtual Switch Distributed Virtual Port Group ESX Agent Manager Extension vcenter Inventory Service VMWare vsphere Update Manager VRM Policy vservice Type of Access Limited Access Limited Access No Access No Access No Access No Access No Access No Access No Access No Access No Access 2.6. Rackspace support services Rackspace provides specific support for the Dedicated vcenter Server environment and virtual machines that are built from vcenter environments. Infrastructure support VMware virtualization services Rackspace offers Fanatical Support for the hardware infrastructure resources including Network, Server, and Storage components. Rackspace is one of VMware's largest global vcloud Air Network partners, with elevated access to technical specialists for rapid resolution of unexpected software-related issues within the VMware stack. Virtual machines 2.7. Authentication methods Rackspace's VMware Certified Professionals (VCPs) assist in the architecture, deployment, and troubleshooting of the Dedicated vcenter Server environment. Rackspace monitors and maintains the VMware software stack, including installing and configuring the vcenter Server and vrops appliance, backing up the VMware service VMs, and monitoring the hypervisors. Virtual machines created by you within the Dedicated vcenter Server environment do not have Rackspace Guest OS support. Services such as monitoring, OS Patching, anti-virus and backups are your responsibility. You use either the Rackspace Intensive Domain as your Active Directory (AD) source or provide your own. If you use the Rackspace Intensive Authentication, then any requests to add users must be submitted through a ticket to Rackspace Support. If you use your own AD, Rackspace adds your AD as an authentication source and assigns any groups you request to specific roles within the Dedicated vcenter Server. 6

12 3. Billing Dedicated vcenter Server is billed based on monthly recurring fees for hardware, infrastructure, and support. Table 3.1. Dedicated vcenter Server pricing Management and compute hypervisors Dedicated VMware services Management and compute hypervisors in the environment incur a monthly recurring fee. This fee is set by a negotiated contract price. All virtual machines and appliances included in the management cluster incur a monthly recurring fee. This fee is set by a negotiated contract price. 7

13 4. Licensing, images, and patching This chapter provides the following information: Dedicated vcenter Server licensing Guest Operating System Images Operating System patching 4.1. Licensing This section describes the various licensing options for Dedicated vcenter Server. VMware licensing OS licensing You can provide your own VMware licenses, or purchase Rackspace provided VMWare licenses. VMware licenses purchased from Rackspace for Dedicated vcenter Server are installed during provisioning. Customer supplied VMware licenses are applied by Rackspace when Dedicated vcenter Server is provisioned. Prior to Rackspace applying a license, a VMware installation uses an evaluation license. You can provide your own OS licenses or purchase a Rackspace provided Windows Data Center license or RHEL 5 or 6 host-based license. Application licensing You will need to provide all application licensing Guest Operating System images If Rackspace provided OS (Operating System) licensing, Rackspace provides images to deploy when your initial deployment is complete. Rackspace does not update the images with patches and updates unless a specific request is made. During the initial deployment process, communicate the needed OS images to your dedicated account team and implementation team. Images are in an OVA format and will be imported into your storage resources. Images are uploaded as templates and can be viewed in the VM and Template view. OS images can be updated by submitting a request to your dedicated account team. Rackspace will schedule maintenance to disconnect the existing templates and reconnect new updated templates. During this maintenance window, accessing the existing templates will cause an error Patching This section describes how Dedicated vcenter Server is patched. OS patching You can can manage your patches using any external OS patching source or can opt into the Rackspace OS patching sources. If you run 8

14 into configuration issues or patching is not working, enter a ticket or call your dedicated account team. VMware patching Rackspace will patch the vsphere hosts using VMware vsphere Update Manager. The vcenter Server will be upgraded as needed as Rackspace adds further supported offerings. 9

15 5. IP addresses As a best practice, during the sales process and implementation call, your environment s IP address count and allocation is reviewed. When additional IP addresses are needed, contact your Rackspace Support team. 10

16 6. API list You can utilize the entire API within the boundaries of the permission set. See the VMware site for the most up-to-date API information: 11

17 7. Spheres of support Refer to the following tables as a guide for areas that are considered supported by Rackspace, and the areas that require your support: Virtualization Hardware Network Monitoring Operating systems Security Table 7.1. Virtualized support Virtualization Rackspace Customer VM troubleshooting x vcenter Server Appliance Support x VMware vrealize Operations (vrops) x Remote Administration for VM's x Table 7.2. Hardware support Hardware Rackspace Customer Manage delivery of equipment x Procure, inventory spare parts, and break-fix equipment Rackspace Fully Managed Dedicated NAS x Rackspace Fully Managed Dedicated SAN x Rackspace Fully Managed Shared SAN x Table 7.3. Network support Network Rackspace Customer Architecture design, review, and consultation x Configure routing and switching equipment x Allocation of IP blocks for guest OS VMs x IP management for IP blocks assigned for all guest OS VMs Manage firewall(s) x Manage load balancer(s) x Manage intrusion detection system(s) x Monitor bandwidth consumption x Troubleshoot network connectivity x Manage firewall rule set x x Manage virtual machine DNS x x x 12

18 Table 7.4. Monitoring support Monitoring Rackspace Customer Provide monitoring for compute VMs OS and applications Configure monitoring for compute VMs OS and applications Respond to monitoring for compute VMs OS and applications Configure and respond to infrastructure monitoring (ping and port) Configure and respond to vcenter monitoring Configure and respond to vrops monitoring (ping and port) Configure and respond to Infrastructure Connectivity Suite (ping and port) Table 7.5. Operating systems support Operating Systems Rackspace Customer Provision guest operating system image x Ensure OS licensing compliance x OS patching x Table 7.6. Security support Security Rackspace Customer Maintain security specifications for VMs x x x x x x x x 13

19 8. FAQ General Q: How do I access the Dedicated vcenter Server? A: You can access the Dedicated vcenter Server using the java VI client, vsphere Web Client and the vsphere API. The vsphere hypervisors (ESXi) are not available for admin access. Any requests for changes to the hypervisor must be made to Rackspace by opening a Support ticket. Q: How do I know if resources are low? A: Dedicated vcenter Server includes VMware vrealize Operations (vrops) which has advanced monitoring, forecasting and reporting capabilities. By viewing the vrops dashboard or by setting certain alerts, you will be able to know when resources will run out and how best to optimize and eliminate bottlenecks. Additional third party software can be installed on a time and materials basis. Q: Are there backups and antivirus agents included? A: The VMware services and managment cluster VMs are protected using the Dedicated Virtual Machine Recovery (VMR) Virtual Appliance for backups and antivirus. It is installed and configured using the latest Rackspace-supported platform. Backups and antivirus are not provided or supported for any VMs created by you in the compute cluster. Q: How do I migrate my data? A: When migrating data into a Rackspace environment, you can use VMware vcloud Connector, a free tool to move VMs from your on-premise VMware environment to the Rackspace-hosted Dedicated vcenter Server environment. Additionally, you can directly upload to a datastore or import an OVF/OVA-formatted VM. For moving VMs into Dedicated vcenter or migrating existing virtual machines from a Rackspace Server Virtualization environment, please contact Rackspace Support. Access control Q: How are the permissions for users controlled in Dedicated vcenter Server? A: Rackspace retains admin access to the Dedicated vcenter Server and vsphere hypervisors. However, over 300 permissions are enabled so that you can manage the hosted VMs as you would on-premise. If you need more access, it will be handled on a caseby-case basis to ensure that the requested permission does not put the health of the environment at risk. Q: Can I use the same login information if I have multiple Dedicated vcenter Servers in a single data center? A: Each vcenter is deployed autonomously, so each will have its own set of accounts. Rackspace can provide a single authentication source for all environments (for example, Rackspace Intensive Domain). 14

20 Q: Is the Dedicated vcenter Server a VM or is it dedicated hardware? A: The Dedicated vcenter Server is a VM appliance. Additional VMware services are also be installed as VMs. Q: Which edition of Microsoft SQL Server is used? A: The vcenter Server uses an embedded Postgres database. The vsphere Update Manager server uses a SQL database Q: Can I manage the vsphere hypervisors (ESXi) if I have Dedicated vcenter Server? A: No. You will not have direct access to the vsphere hypervisor and thus cannot manage it. All hypervisor change requests will need to be made to Rackspace by submitting a Support ticket. Q: Can I add vsphere hypervisors (ESXi) in my on-premise data center to the Dedicated vcenter Server in a Dedicated vcenter Server environment? A: This is currently not supported. Only vsphere hypervisors hosted at Rackspace as part of the Dedicated vcenter Server environment can be managed by the Dedicated vcenter Server. Q: With Dedicated vcenter Server, do I have full control over ESXi hypervisors to import/export my own VMs? A: You have full import and export capability of your VMs. However, Rackspace-provided images will not work outside of the Rackspace data center. Q: Can I manage the Dedicated vcenter Server plugins and add my own third-party plugins? A: You can instal Rackspace endorsed plugins. Rackspace does not support or configure anything that Rackspace is not actively using. The support of endorsed plugins is limited to install and basic configuration. Q: What kind of Single Sign-On (SSO) capabilities can we use? A: By default, your Dedicated vcenter Server authenticates against the Rackspace Intensive Domain. If you want to add your domain as another authentication source, then Rackspace can add it into the VMware SSO service. Architecture Q: Can I connect the Rackspace hosted Dedicated vcenter Server to a Dedicated vcenter Server in a different data center? A: No. Enabling Link Mode across any appreciable distance is not supported due to networking latency concerns. For specific requests, submit a ticket to Rackspace Support. Q: Which modules are included with Dedicated vcenter Server? A: vcenter Server (with VMware Infrastructure (VI) Client, vsphere Web Client, vsphere (API access), Dedicated Virtual Machine Recovery (VMR) backup appliance, vrealize 15

21 Operations (vrops) appliance and VMware Update Manager (VUM) appliance are included. Additional services outside the core offering (for example, unsupported 3rdparty tools that require administrator permissions) can be installed on a time and materials basis, but are not be covered by the SLA. Q: Are automation APIs and VMware vsphere PowerCLI available? A:, but the permissions, as they are set, may not allow certain actions. Q: Is Dedicated vcenter compatible with third-party products? A: In the future, Rackspace may certify third-party products for use with Dedicated vcenter Server. Rackspace will provide details about the compatibility level and requirements as they become available. Q: Can I install a third-party tool that requires elevated permissions? A: In some cases, existing role permissions provided by Rackspace do not allow a custom or third-party tool to function. Contact the Rackspace Virtualization Team to determine if role permission adjustments are possible. 16

22 9. Appendix: Dedicated vcenter Server permissions The following table lists the permissions and privileges available to users Dedicated vcenter Server. Table 9.1. Dedicated vcenter permissions list Category Privilege Available? Alarms Datacenter Datastore Datastore cluster Distributed switch Acknowledge an alarm Create alarm Disable alarm action Modify alarm Remove alarm Set alarm status Create datacenter Move datacenter Network protocol profile configuration Query IP pool of allocation Reconfigure Datacenter Release IP allocation Remove datacenter Rename datacenter Allocate space Browse datastore Configure datastore Perform low level file operations Move datastore Remove datastore Remove file Rename datastore Update virtual machine files Configure a datastore cluster Create Delete Host operation Modify Move Network I/O Control operation Policy operation 17

23 Category Privilege Available? Port configuration operation Port setting operation VSPAN operation dvport Group Create Delete Modify Policy Operation Scope Operation ESX Agent Manager Config Modify View Extension Register extensions Unregister extensions Update extensions Folder Create folder Delete folder Move folder Rename folder Global Act as a vcenter Server Cancel Task Capacity Planning Diagnostics Disable Methods Enable Methods Global tags Health Licences Log event Manage customer attributes Proxy Script action Service managers Set custom attribute Settings System tag vcenter Operations Manager Admin vcenter Operations Manager User Host CIM CIM Interaction 18

24 Category Privilege Available? Host Configuration Advance Settings Authentication Store Change date and time settings Change PciPassthru settings Change settings Modify SNMP settings Connection Firmware Hyperthreading Image configuration Maintenance Memory configuration Network configuration Power Query patch Security profile and firewall Storage partition configuration System Management System resources resource hierarchy Virtual machine autostart configuration Host Inventory Add a host to cluster Add standalone host Create cluster Modify cluster Move cluster or standalone host Move host Remove cluster Remove host Rename cluster Host Local Operations Add host to vcenter Create virtual machine Delete virtual machine Extract NVRAM content Manage user groups Reconfigure virtual machine Relayout snapshots Host vsphere Replication Manage replication Host Profile Clear Create 19

25 Category Privilege Available? Delete Edit Export View Network Assign network Configure Move network Remove Performance Modify intervals Permissions Modify permission Modify role Reassign role permissions Profile-driven Storage Profile-driven storage update Profile-driven storage view Resource Apply recommendation Assign vapp to resource pool Assign a virtual machine to resource pool Create resource pool Migrate powered off virtual machine Migrate powered on virtual machine Modify resource pool Move resource pool Query vmotion Remove resource pool Rename resource pool Scheduled task Create tasks Modify task Remove task Run task Sessions Impersonate user Message Validate Session View and stop sessions Storage Views Configure service View Tasks 20

26 Category Privilege Available? vapp vcenter Inventory Service Tagging Virtual Machine Configuration Create task Update task Add a virtual machine Assign resource pool Assign vapp Clone Create Delete Export Import Move Power off Power on Rename Suspend Unregister vapp application configuration vapp instance configuration vapp managedby configuration vapp resource configuration View OVF environment Assign or Unassign Inventory Service Tag Create Inventory Service Tag Create Inventory Service Tag Category Delete Infentory Service Tag Delete Inventory Service Tag Category Edit Inventory Service Tag Edit Invenroy Service Tag Category Add existing disk Add new disk Add or remove device Advanced Change CPU count Change resource Configure managedby Disk change tracking Disk lease Display connection settings Extend virtual disk Host USB device 21

27 Category Privilege Available? Virtual Machine Guest Operations Virtual Machine Interaction Virtual Machine Inventory Memory Modify device settings Query Fault Tolerance compatibility Query unowned files Raw device Reload from path Remove disk Rename Reset guest information Set annotation Settings Swapfile placement Unlock virtual machine Upgrade virtual machine compatibility Guest Operation Modifications Guest Operation Program Execution Guest Operation Queries Answer question Backup operations on a virtual machine Configure CD media Configure floppy device Console interation Create screenshot Defragment all disks Device connection Disable Fault Tolerance Enable Fault Tolerance Guest operating system management by VIX API Inject USB HID scan codes Perform wipe or shrink operation Power off Power on Record a session on virtual machine Replay session on virtual machine Reset Suspend Test failover Test restert Secondary VM Turn off Fault Tolerance Turn on Fault Tolerance VMware Tools install 22

28 Category Privilege Available? Virtual Machine Provisioning Virtual Machine State Virtual Machine Service Configuration Snapshot management Virtual Machine vsphere Replication Create from existing Create new Move Register Remove Unregister Allow disk access Allow read-only disk access Allow virtual machine download Allow virtual machine file upload Clone template Clone virtual machine Create a template from virtual machine Customize Deploy template Mark as template Mark as virtual machine Modify customization specification Promote disks Read customization specification Create a snapshot of the VMs state Remove a snapshot from history Rename a snapshot Make a snapshot current Allow notifications Allow polling of global event notifications Manage service configurations Modify service configuration Query service configuration Read service configuration Create snapshot Remove Snapshot Rename Snapshot Revert to snapshot Configure replication Manage replication Monitor replication 23

29 Category Privilege Available? VMware vsphere Update Manager Configure VMware vsphere Update Manager Manage Baseline VMware vsphere Update Manager Manage Patches and Upgrades VMware vsphere Update Manager Upload file VRM Policy vservices Configure Service Attach Baseline Manage Baseline Remediate to Apply Patches, Extensions, and Upgrades Scan for Applicable Patches, Extensions, and Upgrades Stage Patches and Extensions View Compliance Status Upload file Query VRMPolicy Update VRMPolicy Create dependency Destroy dependency Reconfigure dependency configuration Update dependency 24

30 10. Additional resources These additional resources are designed to help you learn more about Dedicated VMware vcenter Server. Dedicated VMware vcenter Server product page Dedicated VMware vcenter Server terms and conditions Rackspace resources VMware site 25