Shulou(Shulou.com)06/02 Report--

Infrastructure as a Service (Infrastructure as a Service, referred to as IaaS) is that consumers use processing, storage, network and a variety of basic computing resources to deploy and execute operating systems or applications and other software. VMware VRA can realize a series of processes such as automatic deployment and approval of basic resources. The following is the flow chart for this test of IaaS functionality. Test03 as a user application to create VM resources, Mark/test01 as an examination and approval administrator, when the VM CPU of the test03 application is greater than or equal to 3, the applied VM can only be created after the approval of the Mark administrator, otherwise, it cannot be created. By the same token, we can apply to memory, hard drives and other resources as a condition of audit.

This experiment mainly has the following four steps:

1. Create a virtual machine Blueprint

two。 Assign resource services to users

3. Create an audit policy

4. User login policy test

Let's not talk about gossip. let's do this experiment.

1. Create a virtual machine Blueprint.

Log in to vra using the mark administrator and click "Blueprint"-"New" to create the desired blueprint.

Fill in the name of Blueprint and other information

Click "Machine Type", select vSphere Machine, and drag it to the right margin.

Fill in the ID information and select Reservation policy and Machine prefix (these have already been set up in the previous article)

Here we choose to create a virtual machine by template cloning.

Set resources such as CPU memory of the virtual machine.

Here the blueprint of the virtual machine has been created.

Select Network&Security-Existing Network here to define the connected network for the virtual machine, and choose to connect to vlan20 here. (the network basic configuration also made the corresponding vlan in the previous article)

Set up the DNS and other information of this virtual network card.

Network address range enter the address of this vlan.

Click the virtual machine at Blueprint, and click New Network at the network.

Select the Network you just set up.

The virtual machine and network are associated successfully.

two。 Assign resource services to users.

Assign the Blueprint you just created to the user test03 for testing. Click "Administration"-"Catalog Management".

Create a service in "Services".

Fill in the name of the service here. Status selects active, the owner is test01, and the supporter is test03. Finally, click "OK" to complete the creation of Service.

Also in "administration", select create "Entitlements", fill in the name, status,Bussiness Group, and the user group uses the resource for test03. Click next.

Click the green plus sign here to add the service and Blueprint you just created.

Entitled Actions, check all the actions here. Finally, click finish.

3. Create an audit policy.

Log in as administrator test01 to create an audit policy. Click "Administration"-"Approval Policies"-"New" to create an audit policy.

Select "Service Catalog- Catalog Item Request-Virtual Machine" here (use this condition when creating a virtual machine. There are rich audit conditions here, and different actions can be done for different services. )

The "Required Based on conditions" setting is as follows (audit is required if the number of CPU is greater than or equal to 3). Fill in the auditor information Mark/test01, as set below. Finally, click finish.

The policy creation is completed as shown below.

Log in as an administrator test01 and edit the Entitlements to associate it with the audit policy.

Select "Modify Policy" in "Entitled Items".

Select the audit policy you just created, and then click OK to complete the association of the audit policy.

4. User login policy test.

Log in as a test03 user and click on the resource you just created to make the request.

The requested CPU is 4, which is greater than 3 of the audit policy. Click "Submit".

In "Requests", you can see that the resource status is "Pending Approval" (waiting for approval).

Log in as administrator test01, and you can see the resource request made by test03 in "Inbox".

Fill in the audit content and click "Approve" to allow the request to pass.

Return to the test03 user, in "Requests" you can see that the audit is passed and the creation of the VM resource is complete.

If the user test03 request CPU is 2.

Virtual machine resources are created directly without approval.

Complete the creation of 2 CPU virtual machines.

At this point, the virtual machine resource request is made by user test03, and the approval process and policy test of administrator test01 has been completed.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.