- 1. ManageIQ Lifecycle
- 2. Provisioning Requests
- 2.1. Requirements for Provisioning Virtual Machines and Instances
- 2.2. Requirements for Provisioning Virtual Machines from Red Hat Virtualization Manager
- 2.3. PXE Provisioning
- 2.4. ISO Provisioning
- 2.5. Customization Templates for Virtual Machine and Instance Provisioning
- 2.6. Customization Script Additions for Virtual Machine and Instance Provisioning
- 2.7. Adding a Customization Template
- 2.8. Provisioning Virtual Machines
- 2.9. Provisioning Instances
- 2.9.1. Provisioning an EC2 Instance from an Image
- 2.9.2. Provisioning an OpenStack Instance from an Image
- 2.9.3. Provisioning a Google Compute Engine Instance from an Image
- 2.9.4. Requirements for Provisioning a Host
- 2.9.5. Provisioning a Host
- 2.9.6. Customizing Provisioning Dialogs
- 2.9.7. Provisioning Profiles
- 2.9.8. Managing Key Pairs
- 3. Working with Requests
- 4. Fulfilling Requests
- 5. Catalogs and Services
- 6. Retirement
1. ManageIQ Lifecycle
This guide discusses lifecycle activities such as provisioning and retirement that are part of the ManageIQ Automate component. ManageIQ Automate enables real-time, bidirectional process integration and adaptive automation for management events and administrative or operational activities.
-
Operations Management with service level resource enforcement.
-
Resource Management including datastore cleanup, snapshot aging and enforcement, and virtual machine or instance aging and retirement.
-
Configuration and Change Management including enforced closed loop change management.
-
Lifecycle Management such as provisioning, customization, reconfiguration, approval, CMDB updates, and retirement.
Provisioning requires the Automation Engine server role enabled. Check your server role settings in the settings menu, . |
1.1. Provisioning
When a virtual machine or cloud instance is provisioned, it goes through multiple phases. First, the request must be made. The request includes ownership information, tags, virtual hardware requirements, the operating system, and any customization of the request. Second, the request must go through an approval phase, either automatic or manual. Finally, the request is executed. This part of provisioning consists of pre-processing and post-processing. Pre-processing acquires IP addresses for the user, creates CMDB instances, and creates the virtual machine or instance based on information in the request. Post-processing activates the CMDB instance and emails the user. The steps for provisioning may be modified at any time using ManageIQ.
2. Provisioning Requests
The following options are available when making provisioning requests:
-
Set an owner (User can do this using LDAP lookup)
-
Assign a purpose (tag)
-
Select a template or image from which to create a new virtual machine or instance respectively
-
Choose placement
-
Set hardware requirements
-
Specify the vLan
-
Customize the guest operating system
-
Schedule the provisioning
2.1. Requirements for Provisioning Virtual Machines and Instances
ManageIQ supports the provisioning of VMware ESX hosts/hypervisors. To provision a virtual machine from VMware providers, you must have an appliance with the Automation Engine role enabled.
If you are using a Windows template, the following configuration is required:
-
To customize settings that are inside the operating system, Sysprep must be copied to the appropriate directory on your vCenter computer. Usually this location is:
C:\Documents and Settings\All Users\Application Data\VMware\VMware VirtualCenter\sysprep
. Copy the Sysprep tools to the relevant operating system subdirectory. If you are running a standard Win2008 operating system, this step is unnecessary as Sysprep is included as standard. -
The Windows template must have the latest version of VMware tools for its ESX Server. Check the VMware Site for more information. If you are creating a new password for the Administrator account, the Administrators password must be blank on the template. This is a limitation of Microsoft Sysprep.
See the VMware documentation for a complete list of customization requirements.
2.2. Requirements for Provisioning Virtual Machines from Red Hat Virtualization Manager
Item | Requirements |
---|---|
Red Hat Virtualization Manager version 3.0 or higher |
Red Hat Virtualization Manager properly installed with API in default location https://server:8443/api |
Red Hat Virtualization Manager History Database |
Red Hat Virtualization Manager Data Warehouse (DWH) properly installed with access to the PostgreSQL database on the Red Hat Virtualization Manager server. Port 5432 open in iptables. md5 authentication allowed to ManageIQ appliances in PostgreSQL set to listen for connections on Credentials provided during database setup to be used in ManageIQ UI. |
Storage Supported for ManageIQ Virtual Machine Analysis |
NFS - ManageIQ server must be able to mount NFS storage domain. iSCSI / FCP - Cluster must use full Red Hat Enterprise Linux (not Red Hat Virtualization Hypervisor) Hosts. DirectLUN Hook installed on each host and registered to Red Hat Virtualization Managers. Must have ManageIQ appliance in each Cluster with this storage type. ManageIQ appliance virtual machine container must have DirectLUN attribute set. Local storage - Not yet supported (Red Hat does not recommend due to single point of failure). |
2.3. PXE Provisioning
PXE is a boot method that allows you to load files from across a network link. ManageIQ uses it for files required for provisioning virtual machines. PXE can be used for provisioning for either Red Hat Virtualization Manager or VMware.
Procedure Overview
-
Connect to the PXE Server.
-
Create a System Image Type.
-
Associate each PXE image with an image type.
-
Create a customization template.
Requirements for PXE Provisioning
-
DHCP server configured with required PXE implementation
-
PXE implementation for Linux virtual machine provisioning
-
NFS or SAMBA read and write access to create and modify files on the PXE server
-
ManageIQ Server uses NFS mount to read and write the response files
-
HTTP read access to the NFS share location as virtual machines use this URL to access PXE images and Kickstart or Cloud-Init configuration files
-
Operating system installation media available to be streamed from PXE server
-
Images configured for desired operating systems
-
Kickstart or Cloud-Init templates to configure operating systems with desired packages
Additional Requirements for Provisioning Linux Virtual Machines
-
Linux distribution kernel and ramdisk available over HTTP
-
Linux sources available over HTTP
-
Sample PXE menu item that boots this kernel
Additional Requirements for Provisioning Windows Virtual Machines
-
WinPE ISO built with rhev-agent-tools (for RHEV-M environments) and configured to mount shares for Windows source files and Sysprep files and configured to run customization script
-
Windows based WIM file with operating system installed and configured with Sysprep
-
Sample Sysprep unattend file to be used with the operating system
-
Sample PXE menu item that downloads WinPE ISO, mount in memdisk and boot into WinPE environment
2.3.1. Connecting to a PXE Server
The following procedure connects to a PXE server and adds its details to ManageIQ.
-
Navigate to
. -
Click (Configuration), then (Add a New PXE Server).
-
In Basic Information, type a Name that will be meaningful in your environment.
-
For Depot Type, select either Network File System (NFS) or Samba. The fields to enter in the dialog depend on the Depot Type.
-
For NFS, type in the URI, Access URL, PXE Directory, Windows Images Directory, and Customization Directory. When you provision, ManageIQ writes a text file to the PXE Directory. The file is named after the MAC address of the NIC that is assigned to the virtual machine. It contains where to get the kernel and initrd image. This file is removed after a successful provision. The Windows Images Directory is where the files are located on your NFS for the provisioning of Windows operating systems. The Customization Directory is where your Kickstart and Sysprep files are located.
-
If using a Depot Type of Samba, you will not need Access URL, but you will need a User ID, and Password, in addition to the items required for NFS.
-
-
For PXE Image Menus, type the Filename for the PXE Boot menu.
-
Click Add.
-
Select the new PXE server from the tree on the left, and click (Configuration), then (Refresh) to see your existing images.
Next, create PXE Image types to associate with the customization templates and to specify if the image type is for a virtual machine, a host, or both.
2.3.2. Creating System Image Types for PXE
The following procedure creates a system image type for PXE servers.
-
Navigate to
. -
Click the System Image Types accordion.
-
Click (Configuration), then (Add a new System Image Type).
-
In Basic Information, type in a Name and select a Type.
-
Use Host if you want this image type to only apply to hosts.
-
Use Vm if you want this image type to only apply to virtual machines.
-
Use Any if this image type can be used for either hosts or virtual machines.
-
-
Click Add.
After creating the System Image Types, assign the types to each image on your PXE servers. To do this, you will select each image on the PXE server and identify its type.
2.3.3. Setting the PXE Image Type for a PXE Image
The following procedure sets the image type for a chosen PXE image.
-
Navigate to
. -
Click the PXE Servers accordion and select the image that you want to set a type for.
-
Click (Configuration), then (Edit this PXE Image).
-
From the Basic Information area, select the correct type. If this PXE image will be used as the Windows Boot Environment, check Windows Boot Environment. At the time of this writing, only one PXE Image can be identified as the Windows Boot Environment. Therefore, checking one as the Windows Boot Environment, will remove that from any other PXE image with that check. Click Save.
2.4. ISO Provisioning
ManageIQ also allows ISO provisioning from Red Hat Virtualization Manager datastores. To use this feature, you will need to do the following before creating a provision request.
-
Add the ISO Datastore. The Red Hat Virtualization Manager system must have already been discovered or added into the VMDB. For more information, see Adding a Red Hat Enterprise Virtualization Manager Provider in Managing Providers.
-
Refresh the ISO Datastore.
-
Create a System Image Type.
-
Set the ISO Image Type.
-
Create a customization template.
2.4.1. Adding an ISO Datastore
The following procedure adds an ISO Datastore from your Red Hat Virtualization environment.
-
Navigate to
. -
Click the ISO Datastores accordion.
-
Click (Configuration), (Add a new ISO Datastore).
-
Select the Cloud or Infrastructure provider hosting the ISO Datastore.
-
Click Add.
The ISO datastore is added to ManageIQ.
2.4.2. Refreshing an ISO Datastore
The following procedure refreshes the chosen ISO datastore and updates ManageIQ with available ISOs.
-
Navigate to
. -
Click the ISO Datastores accordion, and select an ISO datastore.
-
Click (Configuration), then click (Refresh Relationships).
2.4.3. Creating System Image Types for ISO
The following procedure creates a system image type for ISO Servers.
-
Navigate to
. -
Click the System Image Types accordion.
-
Click (Configuration), then (Add a new System Image Type).
-
In Basic Information, type in a Name and select a Type.
-
Use Host if you want this image type to only apply to hosts.
-
Use Vm if you want this image type to only apply to virtual machines.
-
Use Any if this image type can be used for either hosts or virtual machines.
-
-
Click Add.
After creating the system image types, assign the types to each image on your ISO servers. To do this, you will select each image on the ISO server and identify its type.
2.4.4. Setting the Image Type for an ISO Image
The following procedure sets the image type for an ISO image.
-
Navigate to
. -
Click the ISO Datastores accordion, and select the image that you want to set a type for.
-
Click (Configuration), then (Edit this ISO Image).
-
From the Basic Information area, select the correct Type.
-
Click Save.
2.5. Customization Templates for Virtual Machine and Instance Provisioning
Add a customization template to provide Kickstart, Cloud-Init, or Sysprep files for the initial loading of the operating system.
-
When creating a template using Red Hat Virtualization, install the cloud-init package on the source virtual machine. This enables Cloud-Init to source configuration scripts when a virtual machine built on that template boots.
-
See Using Cloud-Init to Automate the Configuration of Virtual Machines in the Red Hat Virtualization Administration Guide for more information on using Cloud-Init in a Red Hat Virtualization environment.
-
See the Cloud-Init Documentation web site for example scripts.
-
The Kickstart file must be named ks.cfg.
-
Set the new virtual machine to power down after provisioning is complete.
-
ManageIQ must use the virtual machine payload feature of Red Hat Virtualization to create a floppy disk containing the data from the selected customization template.
-
Customize the installer to include the data written to the floppy disk payload.
-
isolinux.cfg
– add ks=cdrom to the append line -
ks.cfg
– which must minimally include:
### Pre Install Scripts %pre # Mount the floppy drive modprobe floppy mkdir /tmp/floppy mount /dev/floppy /tmp/floppy %end # Include ks.cfg file from the floppy (written by CFME based on selected customization template) %include /tmp/floppy/ks.cfg
2.6. Customization Script Additions for Virtual Machine and Instance Provisioning
Customization Type | Reason to Include | Script entries |
---|---|---|
Kickstart |
Takes the values from the Customize tab in Provisioning Dialog and substitutes them into the script. |
Configure Networking based on values from provisioning dialog <% if evm[:addr_mode].first == static %> <% network_string = "network --onboot yes --device=eth0 --bootproto=static --noipv6" %> <% ["ip", :ip_addr, "netmask", :subnet_mask, "gateway", :gateway, "hostname", :hostname, "nameserver", :dns_servers].each_slice(2) do |ks_key, evm_key| %> <% network_string << " --{ks_key} #{evm[evm_key]}" unless evm[evm_key].blank? %> <% end %> <%= network_string %> <% else %> network --device=eth0 --bootproto=dhcp <% end %> |
Kickstart |
Encrypts the root password from the Customize tab in the Provisioning Dialog. |
rootpw --iscrypted <%= MiqPassword.md5crypt(evm[:root_password]) %> |
Kickstart |
Sends status of the provision back to ManageIQ Server for display in the ManageIQ Console. |
|
Sysprep |
Encrypts the root password from the Customize tab in the Provisioning Dialog. The value for the AdministratorPassword line must be inserted to use the password from the Provision Dialog and encrypt it. |
<UserAccounts> <AdministratorPassword> <Value><%= MiqPassword.sysprep_crypt(evm[:root_password]) %></Value> <PlainText>false</PlainText> </AdministratorPassword> </UserAccounts> |
2.7. Adding a Customization Template
-
Navigate to
. -
Click the Customization Templates accordion.
-
Click (Configuration), (Add a new Customization Template).
-
In Basic Information, type in a Name and Description.
-
Select the Image Type. This list should include the PXE image types you created.
-
In Type, select Kickstart or CloudInit for Linux based systems, and Sysprep for Windows based system.
-
In the Script area, either paste the script from another source or type the script directly into the ManageIQ interface.
-
Click Add.
The default dialogs show all possible parameters for provisioning. To limit the options shown, see Customizing Provisioning Dialogs.
2.8. Provisioning Virtual Machines
There are three types of provisioning requests available in ManageIQ:
-
Provision a new virtual machine from a template
-
Clone a virtual machine
-
Publish a virtual machine to a template
2.8.1. Provisioning a Virtual Machine from a Template
You can provision virtual machines through various methods. One method is to provision a virtual machine directly from a template stored on a provider.
To provision a virtual machine, you must have the "Automation Engine" role enabled. |
To provision a virtual machine from a template:
-
Navigate to
. -
Click (Lifecycle), and then (Provision VMs).
-
Select a template from the list.
-
Click Continue.
-
On the Request tab, enter information about this provisioning request.
In Request Information, type in at least a First Name and Last Name and an email address. This email is used to send the requester status emails during the provisioning process for items such as auto-approval, quota, provision complete, retirement, request pending approval, and request denied. The other information is optional. If the ManageIQ server is configured to use LDAP, you can use the Look Up button to populate the other fields based on the email address.
Parameters with a * next to the label are required to submit the provisioning request. To change the required parameters, see Customizing Provisioning Dialogs.
-
Click the Purpose tab to select the appropriate tags for the provisioned virtual machines.
-
Click the Catalog tab to select the template to provision from. This tab is context sensitive based on provider.
-
For templates on VMware providers:
-
For Provision Type, select VMware or PXE.
-
If VMware is selected, select Linked Clone to create a linked clone to the virtual machine instead of a full clone. Since a snapshot is required to create a linked clone, this box is only enabled if a snapshot is present. Select the snapshot you want to use for the linked clone.
-
If PXE is selected, select a PXE Server and Image to use for provisioning.
-
-
Under Count, select the number of virtual machines to create in this request.
-
Use Naming to specify a virtual machine name and virtual machine description. When provisioning multiple virtual machines, a number will be appended to the virtual machine name.
-
-
For templates on Red Hat providers:
-
Select the Name of a template to use.
-
For Provision Type, select either ISO, PXE, or Native Clone. You must select Native Clone in order to use a Cloud-Init template.
-
If Native Clone is selected, select Linked Clone to create a linked clone to the virtual machine instead of a full clone. This is equivalent to Thin Template Provisioning in Red Hat Virtualization. Since a snapshot is required to create a linked clone, this box is only enabled if a snapshot is present. Select the snapshot to use for the linked clone.
-
If ISO is selected, select an ISO Image to use for provisioning.
-
If PXE is selected, select a PXE Server and Image to use for provisioning.
-
-
Under Count, select the number of virtual machines you want to create in this request.
-
Use Naming to specify a VM Name and VM Description. When provisioning multiple virtual machines, a number will be appended to the VM Name.
-
-
Click the Environment tab to decide where you want the new virtual machines to reside.
-
If provisioning from a template on VMware, you can either let ManageIQ decide for you by checking Choose Automatically, or select a specific cluster, resource pool, folder, host, and datastore. VMware virtual machines can also be provisioned to a clustered datastore by selecting it under Datastore. Additionally, you can assign a storage profile to a VMware virtual machine under Datastore to configure the virtual machine to operate using a storage profile from that datastore.
Note, read-only datastores are excluded when provisioning a virtual machine.
-
If provisioning from a template on Red Hat, you can either let ManageIQ decide for you by checking Choose Automatically, or select a datacenter, cluster, host and datastore.
-
-
Click the Hardware tab to set hardware options.
-
In Hardware, set the number of sockets, cores per socket, memory in MB, and disk format: thin, pre-allocated/thick or same as the provisioning template (default).
-
For VMware provisioning, set the VM Limits of CPU and memory the virtual machine can use.
-
For VMware provisioning, set the VM Reservation amount of CPU and memory.
-
-
Click Network to set the vLan adapter. Additional networking settings that are internal to the operating system appear on the Customize tab.
-
In Network Adapter Information, select the vLan.
A VMware virtual machine can be provisioned to a DVPortgroup by selecting it from the vLan list. Prior to provisioning a virtual machine, the DVPortgroup must be created on a vSphere Distributed Switch (VDS) in VMware vCenter in order for ManageIQ to list the DVPortgroup under vLan.
-
-
Click Customize to customize the operating system of the new virtual machine. These options vary based on the operating system of the template.
-
For Windows provisioning:
-
To use a custom specification from the provider, click Specification. To select an appropriate template, choose from the list in the custom specification area. The values that are honored by ManageIQ display.
Any values in the specification that do not show in the ManageIQ console’s request dialogs are not used by ManageIQ. For example, for Windows operating systems, if you have any run once values in the specification, they are not used in creating the new virtual machines. Currently, for a Windows operating system, ManageIQ honors the unattended GUI, identification, workgroup information, user data, windows options, and server license. If more than one network card is specified, only the first is used.
To modify the specification, select Override Specification Values.
-
Select Sysprep Answer File, to upload a Sysprep file or use one that exists for a custom specification on the Provider where the template resides. To upload a file, click Browse to find the file, and then upload. To use an answer file in Customization Specification, click on the item. The answer file will automatically upload for viewing. You cannot make modifications to it.
-
-
For Linux provisioning:
-
Under Credentials, enter a Root Password for the root user to access the instance.
-
Enter a IP Address Information for the instance. Leave as DHCP for automatic IP assignment from the provider.
-
Enter any DNS information for the instance if necessary.
-
Select Customize Template for additional instance configuration. Select from the Kickstart or Cloud-Init customization templates stored on your appliance.
-
-
Click the Schedule tab to select when provisioning begins.
-
In Schedule Info, select when to start provisioning. If you select Schedule, you will be prompted to enter a date and time. Select Stateless if you do not want the files deleted after the provision completes. A stateless provision does not write to the disk so it requires the PXE files on the next boot.
-
In Lifespan, select to power on the virtual machines after they are created, and to set a retirement date. If you select a retirement period, you will be prompted for when you want a retirement warning.
-
-
Click Submit.
The provisioning request is sent for approval. For the provisioning to begin, a user with the administrator, approver, or super administrator account role must approve the request. The administrator and super administrator roles can also edit, delete, and deny the requests. You will be able to see all provisioning requests where you are either the requester or the approver.
After submission, the appliance assigns each provision request a Request ID. If an error occurs during the approval or provisioning process, use this ID to locate the request in the appliance logs. The Request ID consists of the region associated with the request followed by the request number. As regions define a range of one trillion database IDs, this number can be several digits long.
Request ID Format
Request 99 in region 123 results in Request ID 123000000000099.
2.8.2. Cloning a Virtual Machine
Virtual machines can be cloned in other providers as well.
-
Navigate to
, and check the virtual machine you want to clone. -
Click (Lifecycle), and then (Clone selected item).
-
Enter the requested information in the dialogs. Be sure to check the Catalog tab.
-
Schedule the request on the Schedule tab.
-
Click Submit.
2.8.3. Publishing a Virtual Machine to a Template (VMware Virtual Machines Only)
-
Navigate to
, and check the virtual machine you want to publish as a template. -
Click (Lifecycle), and then (Publish selected VM to a Template).
-
Enter the requested information in the dialogs. Be sure to check the Catalog tab.
-
Schedule the request on the Schedule tab.
-
Click Submit.
2.9. Provisioning Instances
Cloud instances follow the same process (Request, Approval, Deployment) as a standard virtual machine from virtualization infrastructure. First, a user makes a request for instances and specifies the image, tags, availability zone and hardware profile flavor. Second, the request goes through the approval phase. Finally, ManageIQ executes the request.
2.9.1. Provisioning an EC2 Instance from an Image
-
Navigate to
. -
Click (Lifecycle), then click (Provision Instances).
-
Select an image from the list presented.
-
Click Continue.
-
On the Request tab, enter information about this provisioning request. In Request Information, type in at least a first and last name and an email address. This email is used to send the requester status emails during the provisioning process for items such as auto-approval, quota, provision complete, retirement, request pending approval, and request denied. The other information is optional. If the ManageIQ Server is configured to use LDAP, you can use the Look Up button to populate the other fields based on the email address.
Parameters with a * next to the label are required to submit the provisioning request. To change the required parameters, see Customizing Provisioning Dialogs.
-
Click the Purpose tab to select the appropriate tags for the provisioned instance.
-
Click the Catalog tab for basic instance options.
-
To change the image to use as a basis for the instance, select it from the list of images.
-
Select the Number of VMs to provision.
-
Type a VM Name and VM Description.
-
-
Click the Environment tab to select the instance’s Availability Zone, Virtual Private Cloud, Cloud Subnet, Security Groups, and Elastic IP Address. If no specific availability zone is required, select the Choose Automatically checkbox.
-
Click the Properties tab to set provider options such as hardware flavor and security settings.
-
Select a flavor from the Instance Type list.
-
Select a Guest Access Key Pair for access to the instance.
-
Select the CloudWatch monitoring level. Leave as Basic for the default EC2 monitoring.
-
-
Click the Customize tab to set additional instance options.
-
Under Credentials, enter a Root Password for the root user access to the instance.
-
Enter a IP Address Information for the instance. Leave as DHCP for automatic IP assignment from the provider.
-
Enter any DNS information for the instance if necessary.
-
Select a Customize Template for additional instance configuration. Select from the Cloud-Init scripts stored on your appliance.
-
-
Click the Schedule tab to set the provisioning and retirement date and time.
-
In Schedule Info, choose whether the provisioning begins upon approval, or at a specific time. If you select Schedule, you will be prompted to enter a date and time.
-
In Lifespan, select whether to power on the instances after they are created, and whether to set a retirement date. If you select a retirement period, you will be prompted for when to receive a retirement warning.
-
-
Click Submit.
The provisioning request is sent for approval. For the provisioning to begin, a user with the admin, approver, or super admin account role must approve the request. The admin and super admin roles can also edit, delete, and deny the requests. You will be able to see all provisioning requests where you are either the requester or the approver.
After submission, the appliance assigns each provision request a Request ID. If an error occurs during the approval or provisioning process, use this ID to locate the request in the appliance logs. The Request ID consists of the region associated with the request followed by the request number. As regions define a range of one trillion database IDs, this number can be several digits long.
Request ID Format
Request 99 in region 123 results in Request ID 123000000000099.
2.9.2. Provisioning an OpenStack Instance from an Image
-
Navigate to
. -
Click (Lifecycle), then click (Provision Instances).
-
Select an OpenStack image from the list presented. These images must be available on your OpenStack provider.
-
Click Continue.
-
On the Request tab, enter information about this provisioning request. In Request Information, type in at least a first and last name and an email address. This email is used to send the requester status emails during the provisioning process for items such as auto-approval, quota, provision complete, retirement, request pending approval, and request denied. The other information is optional. If the ManageIQ Server is configured to use LDAP, you can use the Look Up button to populate the other fields based on the email address.
Parameters with a * next to the label are required to submit the provisioning request. To change the required parameters, see Customizing Provisioning Dialogs.
-
Click the Purpose tab to select the appropriate tags for the provisioned instance.
-
Click the Catalog tab for basic instance options.
-
To change the image to use as a basis for the instance, select it from the list of images.
-
Select the Number of Instances to provision.
-
Type a Instance Name and Instance Description.
-
-
Click the Environment tab to select the instance’s Tenant, Availabilty Zones, Cloud Network, Security Groups, and Public IP Address. If no specific Tenant is required, select the Choose Automatically checkbox.
-
Click the Properties tab to set provider options such as flavors and security settings.
-
Select a flavor from the Instance Type list.
-
Select a Guest Access Key Pair for access to the instance. For more information about key pairs, see Managing Key Pairs.
-
-
Click the Volumes tab to provision any volumes with the instance. Volumes are useful for augmenting ephemeral storage of instances with persistent, general-purpose block storage:
-
Fill in the Volume Name and Size (gigabytes) fields.
-
If you want the volume to be deleted once the instance terminates (thereby making it non-persistent), check Delete on Instance Terminate.
-
To provision and add multiple volumes to the instance, click Add Volume. Doing so will add new fields you can fill in.
For more information about persistent storage in OpenStack, see the Red Hat OpenStack Platform Storage Guide.
-
-
Click the Customize tab to set additional instance options.
-
Under Credentials, enter a Root Password for the root user access to the instance.
-
Enter a IP Address Information for the instance. Leave as DHCP for automatic IP assignment from the provider.
-
Enter any DNS information for the instance if necessary.
-
Select a Customize Template for additional instance configuration. Select from the Cloud-Init scripts stored on your appliance.
-
-
Click the Schedule tab to set the provisioning and retirement date and time.
-
In Schedule Info, choose whether the provisioning begins upon approval, or at a specific time. If you select Schedule, you will be prompted to enter a date and time.
-
In Lifespan, select whether to power on the instances after they are created, and whether to set a retirement date. If you select a retirement period, you will be prompted for when to receive a retirement warning.
-
-
Click Submit.
The provisioning request is sent for approval. For the provisioning to begin, a user with the admin, approver, or super admin account role must approve the request. The admin and super admin roles can also edit, delete, and deny the requests. You will be able to see all provisioning requests where you are either the requester or the approver.
After submission, the appliance assigns each provision request a Request ID. If an error occurs during the approval or provisioning process, use this ID to locate the request in the appliance logs. The Request ID consists of the region associated with the request followed by the request number. As regions define a range of one trillion database IDs, this number can be several digits long.
Request ID Format
Request 99 in region 123 results in Request ID 123000000000099.
2.9.3. Provisioning a Google Compute Engine Instance from an Image
From Red Hat ManageIQ 4.2, a Google Compute Engine instance can be provisioned. Some functionality available in other cloud providers is currently unavailable when provisioning from Google Compute Engine.
-
Navigate to
. -
Click (Lifecycle), then click (Provision Instances).
-
Select an image from the list presented.
-
Click Continue.
-
On the Request tab, enter information about this provisioning request. In Request Information, type in at least a first and last name and an email address. This email is used to send the requester status emails during the provisioning process for items such as auto-approval, quota, provision complete, retirement, request pending approval, and request denied. The other information is optional. If the ManageIQ Server is configured to use LDAP, you can use the Look Up button to populate the other fields based on the email address.
Parameters with a * next to the label are required to submit the provisioning request. To change the required parameters, see Customizing Provisioning Dialogs.
-
Click the Purpose tab to select the appropriate tags for the provisioned instance.
-
Click the Catalog tab for basic instance options.
-
To change the image to use as a basis for the instance, select it from the list of images.
-
Select the Number of Instances to provision.
-
Type a Instance Name and Instance Description. For Google Compute Engine instances, the Instance Name cannot use upper case letters. Use a combination of lower case letters and numbers to create the name.
-
-
Click the Environment tab to select the instance’s Availability Zone and Cloud Network. If no specific availability zone is required, select the Choose Automatically checkbox.
-
Click the Properties tab to set provider options such as hardware flavor and boot disk settings.
-
Select a flavor from the Instance Type list.
-
Select a Boot Disk Size from the list.
-
-
Click the Schedule tab to set the provisioning and retirement date and time.
-
In Schedule Info, choose whether the provisioning begins upon approval, or at a specific time. If you select Schedule, you will be prompted to enter a date and time.
-
In Lifespan, select and whether to set a retirement date. If you select a retirement period, you will be prompted for when to receive a retirement warning.
-
-
Click Submit.
The provisioning request is sent for approval. For the provisioning to begin, a user with the admin, approver, or super admin account role must approve the request. The admin and super admin roles can also edit, delete, and deny the requests. You will be able to see all provisioning requests where you are either the requester or the approver.
After submission, the appliance assigns each provision request a Request ID. If an error occurs during the approval or provisioning process, use this ID to locate the request in the appliance logs. The Request ID consists of the region associated with the request followed by the request number. As regions define a range of one trillion database IDs, this number can be several digits long.
Request ID Format
Request 99 in region 123 results in Request ID 123000000000099.
2.9.4. Requirements for Provisioning a Host
ManageIQ can provision hosts using PXE and Intelligent Platform Management Interface (IPMI) technologies. Before you provision your first host, configure the following prerequisites:
-
Provisioning requires the Automation Engine server role be enabled. Confirm your server role settings in the settings menu, then
. -
Make a PXE server accessible to the ManageIQ server.
-
Create a customization template for hosts. This customization template must contain host-specific additions, documented in the Customization Templates for Host Provisioning section.
-
Create system image types for the host.
-
Associate images with the image types.
-
Enable IPMI on provisioning hosts and add them to the ManageIQ Infrastructure.
IPMI Hosts
There are two ways to get the Intelligent Platform Management Interface (IPMI) Host into the VMDB. You can either use the ManageIQ’s discovery process or add the host using its IP address and credentials.
Discovering the Management Interface for an IPMI Host
-
Navigate to
. -
Click (Configuration), then (Discover Items).
-
In Discover, check IPMI.
-
Optionally, in IPMI Credentials, type in a User ID and Password.
You can also add IPMI credentials after the host has been discovered. See section Adding IPMI Credentials to a Discovered Host.
-
In Subnet Range, type in a range of IP addresses. For quickest results, use the actual IP address in both fields.
-
Click Start.
After the host is discovered, you can add credentials for IPMI.
Adding IPMI Credentials to a Discovered Host
After discovering an IPMI host, add the credentials using the following procedure.
-
Navigate to
. -
Click on the host you want to edit.
-
Click (Configuration), and then (Edit this Host).
-
In the Credentials area, IPMI tab, type in the IPMI credentials
-
Use User ID to specify a login ID.
-
Use Password to specify the password for the user ID.
-
Use Verify Password to confirm the password.
-
-
Click Validate to test the credentials.
-
Click Save.
Adding the Management Interface for an IPMI Host
-
Navigate to
. -
Click (Configuration), then (Add a New Item).
-
In Basic Information, type in a Name and the IPMI IP address.
-
In the Credentials area, under IPMI tab, type in the IPMI credentials
-
Use User ID to specify a login ID.
-
Use Password to specify the password for the User ID.
-
Use Verify Password to confirm the password.
-
-
Click Validate to test the credentials.
-
Click Add.
The IPMI host is added to the ManageIQ environment; an operating system can now be provisioned onto it.
Customization Templates for Host Provisioning
Add a customization template to provide Kickstart files for the initial loading of the operating system. There are certain sections to use to allow for interactions with the provisioning dialogs provided by ManageIQ.
Customization Script Additions
Customization Type | Reason to Include | Script entries |
---|---|---|
Kickstart |
Takes the values from the Customize tab in Provisioning Dialog and substitutes them into the script. |
#Configure Networking based on values from provisioning dialog <% if evm[:addr_mode].first == 'static' %> <% network_string = "network --onboot yes --device=eth0 --bootproto=static --noipv6" %> <% ["ip", :ip_addr, "netmask", :subnet_mask, "gateway", :gateway, "hostname", :hostname, "nameserver", :dns_servers].each_slice(2) do |ks_key, evm_key| %> <% network_string << " --#{ks_key} #{evm[evm_key]}" unless evm[evm_key].blank? %> <% end %> <%= network_string %> <% else %> network --device=eth0 --bootproto=dhcp <% end %> |
Kickstart |
Encrypts the root password from the Customize tab in the Provisioning Dialog. |
rootpw --iscrypted <%= MiqPassword.md5crypt(evm[:root_password]) %> |
Kickstart |
Sends status of the provision back to ManageIQ Server for display in the ManageIQ Console. |
# Callback to CFME during post-install wget --no-check-certificate <%= evm[:post_install_callback_url] %> |
Sysprep |
Encrypts the root password from the Customize tab in the Provisioning Dialog. The value for the AdministratorPassword line must be inserted to use the password from the Provision Dialog and encrypt it. |
<UserAccounts> <AdministratorPassword> <Value><%= MiqPassword.sysprep_crypt(evm[:root_password]) %></Value> <PlainText>false</PlainText> </AdministratorPassword> </UserAccounts> |
Adding a Customization Template
-
Navigate to
. -
Click the Customization Templates accordion.
-
Click (Configuration), then (Add a New Customization Template).
-
In Basic Information, type in a Name and Description.
-
Select the Image Type list. This list includes the PXE image types you created.
-
In Type, select Kickstart or CloudInit for Linux based systems, and Sysprep for Windows based system.
-
In the Script area, either paste the script from another source or type the script directly into the ManageIQ interface.
-
Click Add.
The default dialogs show all possible parameters for provisioning. To limit the options shown, see Customizing Provisioning Dialogs.
2.9.5. Provisioning a Host
After setting up the IPMI and PXE environments, you are ready to provision a host. Currently, you can only provision in the cluster where the template is located or you can create a template in each cluster and let a ManageIQ Automate method automatically switch the selected template in the provision object.
A customization template with host-specific script additions is required. Ensure especially that the customization template contains the post-installation callback to enable discovery in ManageIQ. |
-
Navigate to
. -
Select a host with IPMI enabled.
-
Click (Lifecycle), then (Provision Hosts).
-
In Request Information, type in at least a First Name and Last Name and an email address. This email is used to send the requester status emails during the provisioning. The other information is optional. If the ManageIQ server is configured to use LDAP, you can use the Look Up button to populate the other fields based on the email address.
-
On the Purpose tab, select the desired tags for the provisioned host.
-
On the Catalog tab, select the hosts to provision.
-
In the Host area, select the hosts to provision.
-
In the PXE area, select the PXE server and image.
-
-
On the Customize tab, you can select customizations for the operating system of the new host. These options vary based on the operating system to be provisioned.
-
Use Credentials to type in a root password
-
In the IP Address area, select either Static or DHCP and enter any other address information you need. If needed, type in DNS specifications.
-
Under Customize Template, select a script.
-
-
On the Schedule tab, select when to start the provisioning process.
-
In Schedule Info, select when to start the provisioning process. If you select Schedule, enter a date and time.
-
Select Stateless to retain files after the provision completes. A stateless provision does not write to the disk so it requires the PXE files on the next boot.
-
Click Submit.
The provisioning request is sent for approval. For the provisioning to begin, a user with the admin, approver, or super admin account role must approve the request. The admin and super admin roles can also edit, delete, and deny the requests. You will be able to see all provisioning requests where you are either the requester or the approver.
After submission, the appliance assigns each provision request a Request ID. If an error occurs during the approval or provisioning process, use this ID to locate the request in the appliance logs. The Request ID consists of the region associated with the request followed by the request number. As regions define a range of one trillion database IDs, this number can be several digits long.
Request ID Format
Request 99 in region 123 results in Request ID 123000000000099.
2.9.6. Customizing Provisioning Dialogs
The default set of provisioning dialogs shows all possible options. However, ManageIQ also provides the ability to customize which tabs and fields are shown. You can decide what fields are required to submit the provisioning request or set default values.
For each type of provisioning, there is a dialog that can be created to adjust what options are presented. While samples are provided containing all possible fields for provisioning, you can remove what fields and tabs are shown but cannot add new fields or tabs.
Edit the dialogs to:
-
Hide or show provisioning tabs.
-
Hide or show fields. If you hide an attribute, the default will be used, unless you specify otherwise.
-
Set default values for a field.
-
Specify if a field is required to submit the request.
-
Create custom dialogs for specific users.
Adding a Provision Dialog for All Users
-
Login to the ManageIQ console for the ManageIQ server where you want to change the dialog.
-
Navigate to
. -
Click the Provisioning Dialogs accordion.
-
Click the type of dialog you want to create: Host Provision, VM Provision or VM Migrate.
-
Select one of the default dialogs.
-
Click (Configuration), and then (Copy this Dialog).
-
Type a new Name and Description for the dialog.
-
In the Content field,
-
To remove a tab from display, change its display value to ignore. By choosing ignore, you not only hide the tab, but also skip any fields on that tab that were required. To show the tab, change the display value to show.
-
To hide a field, change its
:display:
value from:edit
to:hide
. To display fields of most data types, use:edit
. To display a button, use:show
. To set a default value for a field, add:default: defaultvalue
to the list of parameters for the field. Set the:required:
parameter to eithertrue
orfalse
based on your needs.If you set
:required:
totrue
, the field must have a value for the provision request to be submitted.
-
-
Click Add.
If you are using Provisioning Profiles, you can specify a specific file that holds the customizations. To do this, you must create an instance mapping to this file in the ManageIQ Applications/provisioning/profile/VM provisioning by group class. By default, if you are using provisioning profiles and the group does not have a defined instance, the appropriate default dialog file will be used based on the type of provisioning selected.
Creating a Custom Provision Dialog
-
Navigate to
. -
Click on the Provisioning Dialogs accordion.
-
Click on the type of dialog you want to create, Host Provision, VM Provision or VM Migrate.
-
Select one of the default dialogs.
-
Click (Configuration), and then (Copy this Dialog).
-
Rename the dialog as shown in the examples below.
Type of Provision Dialog Name Provision Virtual Machine from a template
miq_provision_dialogs_groupname_template Example: miq_provision_dialogs_ EvmGroup-user_self_service _template
Clone a Virtual Machine
miq_provision_dialogs_groupname_clone_to_vm Example: miq_provision_dialogs_ EvmGroup-user_self_service _clone_to_vm
Publish a Virtual Machine to a template
miq_provision_dialogs_groupname_clone_to_template Example: miq_provision_dialogs_ EvmGroup-user_self_service _clone_to_template
-
Make any changes you need.
-
In the Content field,
-
To remove a tab from display, change its display value to ignore. By choosing ignore, you not only hide the tab, but also skip any fields on that tab that were required. To show the tab, change the display value to show.
-
To hide a field, change its
:display:
value from:edit
to:hide
. To ensure the field does not get turned back on by a workflow model, use:display_override: :hide
. To display fields of most data types, use:edit
. To display a button, use:show
. To set a default value for a field, add:default: defaultvalue
to the list of parameters for the field. Set the:required:
parameter to eithertrue
orfalse
based on your needs.If you set
:required:
totrue
, the field must have a value for the provision request to be submitted.
-
-
Click Add.
Enter the name of the new dialog into the dialog name field in the appropriate ManageIQ Applications/provisioning/profile instance. This dialog can now be referred to in an instance in the Provisioning Profiles class so that it can be used for groups of users.
2.9.7. Provisioning Profiles
Provisioning profiles can be used to customize the dialogs and the state machine (steps used to provision the machine). Profiles can be created for LDAP or ManageIQ groups. To use provisioning profiles:
-
Create a Provisioning Profile instance for the LDAP or ManageIQ group. If no instance exists, then default settings will be used.
-
If customizing dialogs, create a custom dialog file, and specify the name of that file in the provisioning profile instance. If customizing the states for provisioning, create a state instance and set the name of the state instance in the provisioning profile instance.
The diagram below shows where provisioning profiles are called during the entire provisioning process.
Creating a Provisioning Profile Instance
-
Navigate to
. -
Using the tree located in the accordion, click
.DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
This example uses the Cloud Namespace, but can also use the Infrastructure namespace.
-
Click (Configuration), (Add a New Instance).
-
Make the name of the tag identical to the name of the LDAP or ManageIQ group you are creating the instance for, replacing spaces in the group name with underscores. For example, change ManageIQ-test group to ManageIQ-test_group.
-
In the dialog name field, enter the name of the customized dialog file. This file must reside on the ManageIQ appliance in the
/var/www/miq/vmdb/db/fixtures
directory. Red Hat recommends naming the file in the formatmiq_provision_dialogs-groupname.rb
and copying this file to all ManageIQ appliances. For instructions on creating a custom dialog file, see Customizing Provisioning Dialogs.Be sure that the custom dialog file exists. If it does not, an error will appear when the user clicks on the Provisioning button in the ManageIQ console.
-
Click Add.
Setting Provisioning Scope Tags
Some non-default placement methods, for example the redhat_best_placement_with_scope or vmware_best_fit_with_scope methods, may require you to set Provisioning Scope tags for a host and a datastore.
To enable these resources for all groups, set the scope to All. To limit access to a select group, create a tag in the Provisioning Scope category with the exact name of the user group and set this tag on the desired resources. See Tags in General Configuration for information on creating tags.
To set the scope for a host:
-
Navigate to
. -
Select the host to set the provisioning scope for.
-
Click (Policy), and then (Edit Tags).
-
From the Select a customer tag to assign drop down, select Provisioning Scope and then a value for the tag from the next drop down menu.
-
Click Save.
To set the scope for a datastore:
-
Navigate to
. -
Select the datastore to set the provisioning scope for.
-
Click (Policy), and then (Edit Tags).
-
From the Select a customer tag to assign drop down, select Provisioning Scope and then a value for the tag from the next drop down menu.
-
Click Save.
2.9.8. Managing Key Pairs
Key pairs allow you to manage SSH access between a user and provisioned instance. For more information about key pairs in OpenStack, see Manage Key Pairs from the Red Hat OpenStack Platform Instances and Images Guide.
To manage key pairs, navigate to
. From there, you can view a list of available key pairs. Click on a key pair to view its details.To create a new key pair:
-
Navigate to
. -
Click (Configuration), (Add a new Key Pair).
-
Enter a Name for the key pair.
-
If you want to use a public key, copy its contents into the Public Key (optional) field.
-
Select which cloud provider on which to create the key pair. The key pair will then be available for use by instances in that provider.
-
Click Add.
3. Working with Requests
3.1. Provisioning Request Approval Methods
In this chapter, you will learn about the different approval methods. The request can be approved manually in the ManageIQ console, set for automatic approval by setting options in the Automate Explorer, or by using an external method. When using an external method, the approval actually takes place on the external system and is sent directly for execution. This chapter discusses how to view and edit requests in the ManageIQ Console, how to approve a request, and how to set automatic approval parameters.
3.2. Working with Provisioning Requests
After a provisioning request is sent, if you have proper authority, you can copy, edit, delete, approve, or deny a request.
After submission, the appliance assigns each provision request a Request ID. If an error occurs during the approval or provisioning process, use this ID to locate the request in the appliance logs. The Request ID consists of the region associated with the request followed by the request number. As regions define a range of one trillion database IDs, this number can be several digits long.
Request ID Format
Request 99 in region 123 results in Request ID 123000000000099.
3.2.1. Reloading the Status of Provisioning Requests
-
Navigate to
. -
Click (Reload the current display).
3.2.2. Approving a Provisioning Request
After a user creates provisioning request, administrators have the ability to approve the request and allow ManageIQ to complete virtual machine or instance creation.
-
Navigate to
. -
Click on the request you want to approve.
-
Type in a Reason for the approval.
-
Click (Approve this request).
3.2.3. Denying a Provisioning Request
-
Navigate to
. -
Click on the request you want to deny.
-
Type in a Reason for the denial.
-
Click (Deny this request).
3.2.4. Copying a Provisioning Request
-
Navigate to
. -
Click on the request you want to copy.
-
Click (Copy original provision request).
-
Make changes to the request.
-
Click Submit.
If the logged in user is not same as the requester or the request has been already approved or denied, you cannot edit or delete the request.
3.2.5. Editing a Provisioning Request
-
Navigate to
. -
Click on the request you want to edit.
-
Click (Edit the original provision request).
-
Make changes to the request.
-
Click Submit.
3.2.6. Deleting a Provisioning Request
-
Navigate to
. -
Click on the request you want to delete.
-
Click (Delete this request).
-
Click OK to confirm.
3.2.7. Automatically Approving Requests
You can set thresholds for automatic approval of provisioning requests and, therefore, remove the requirement to manually approve the request. You can do this either as a global default or on a per template basis.
Enabling Global Defaults for Automatic Approval
To enable a global set of default approval values, edit the defaults instance by navigating to
, then in the accordion menu. The parameters in this instance are used by the methods in that same class. By default, the maximum number of virtual machines or instances that can be automatically approved for provisioning is 1. To skip the check for the maximum number of virtual machines, set this field to 0. Set this field to -1 to force manual approval. At a minimum, you must change this parameter for all others to be validated.-
Navigate to
. -
From the tree in the accordion menu, select
.DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
This example uses the Cloud Namespace but can also use the Infrastructure namespace.
-
Click (Configuration), then (Edit this instance).
Do not change any values other than those listed below. Doing so may prevent the automatic approval process from running.
-
Use max_cpus to set the number of CPUs allowed to approve automatically the provisioning request.
-
Use max_vms to set the maximum number of virtual machines or instances that are allowed to be provisioned automatically approve the request. If this is set to blank, no requests will be automatically approved.
-
Use max_memory to set the maximum memory allowed to approve automatically the provisioning request.
-
Use max_retirement_days to set the maximum number of days until the virtual machine or instance is retired to automatically approve this request.
-
If a value is blank or 0, the parameter is ignored.
-
-
Click Save.
The thresholds for automatic approval are set. The next time a provision request is created these thresholds will be checked. If the requirements are met, the provisioning request will be approved with no user intervention.
Template Specific Approval Defaults
ManageIQ provides tags that can be used to set default automatic approval values on a per template or image basis. These values supersede those in the Automate model. Use these tags to eliminate the need for manual approval for all provisioning requests. To enable automatic approval, assign the tags directly to templates or images.
Category Display Name (Name) | Use (Sample values) |
---|---|
Auto Approve Max CPU (prov_max_cpus) |
Sets the maximum number of CPUs that can be automatically approved in a single provisioning request. Sample Values: 1, 2, 3, 4, 5 |
Auto Approve Max Memory (prov_max_memory) |
Sets the maximum number of memory that can be automatically approved in a single provisioning request. Sample Values: 1, 2, 4, 8 (in GB) |
Auto Approve Max Retirement Days (prov_max_retirement_days) |
Sets the maximum number of days until retirement that can be automatically approved in a single provisioning request. Sample Values: 30, 60, 90, 180 (in days) |
Auto Approve Max VM (prov_max_vms) |
Sets the maximum number of virtual machines or instances that can be automatically approved in a single provisioning request. Sample Values: 1, 2, 3, 4, 5 |
Assigning Tags to a Template for Auto Approval
-
Navigate to
. -
Click the Templates accordion, and select the templates that you want to tag.
-
Click (Policy), and then (Edit Tags).
-
Select a customer tag from the first dropdown, and then a value for the tag.
The thresholds for automatic approval for a specific template are set. The next time a provision request is created for this template these thresholds will be checked. If the requirements are met, the provisioning request will be approved with no user intervention.
Setting Provisioning Notification Email Addresses
ManageIQ contains a set of Automate instances for provisioning. These Automate instances also include email fields to set the sender and recipient of provisioning notifications, such as requests. These fields are set to evmadmin@company.com as a default.
-
Navigate to
. -
Choose the following Namespace:
.DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
This example uses the Cloud Namespace, but can also use the Infrastructure namespace.
-
Select an instance within the chosen class.
-
Click (Configuration), then (Edit this instance).
-
Type the desired email addresses in the to_email_address and from_email_address fields.
-
Click Save.
4. Fulfilling Requests
4.1. Fulfilling a Request
After a request has been approved, ManageIQ then goes through the steps required to complete the request. The steps followed for a regular provision from a virtual machine to a virtual machine (not to a template) are found by navigating to State Machines.
, then listed under . The value for each state shows where the instance resides in the Datastore accordion. The default set of execution steps is shown below. For more information on state machines, see4.2. Default Execution Steps in States Instance
Step | Description |
---|---|
Customize Request |
Apply customizations. |
Acquire IP Address |
Integrates with IPAM (IP Address Management) to get an IP Address. |
Acquire MAC Address |
Integrates with IPAM to get a MAC Address. |
Register DNS |
Integrates with IPAM to register with DNS. |
Register CMDB |
Integrates with CMDB (Configuration Management Database) to register with the CMDB. |
Register AD |
Integrates with IPAM to register with active directory. |
PreProvision |
Pre-provisioning steps. |
Provision |
Create the virtual machine or instance. |
CheckProvisioned |
Check that the new virtual machine or instance is in the VMDB. |
PostProvision |
Post-provisioning steps. |
Register DHCP |
Integrate with IPAM to register the IP address with DHCP Server. |
Activate CMDB |
Integrate with IPAM to activate the virtual machine or instance in the CMDB. |
Email owner |
Send email to owner that the virtual machine or instance has been provisioned. |
4.2.1. Quotas
Quotas allow you to establish maximum usage thresholds for an user, group, or tenant for provisioned virtual machines or instances and are integrated into provisioning profiles. These maximums are checked after the approval but before the actual provision request is started. The quota is set for the tenant or group as a whole.
Applying User or Group Quotas
-
Log in as a user with administrator or super administrator rights to the ManageIQ console.
-
Navigate to
. -
Copy the
instance to a custom DOMAIN. -
From the accordion menu, click
.By default, quotas are applied to tenants and do not require any change in
. -
Click (Configuration), (Edit this instance).
-
Set the value for Quota Source Type to user or group.
-
Set the values for VM Warning Count, VM Maximum Count, Storage Warning Limit, Storage Maximum Limit, CPU Warning Count, CPU Maximum Count, Memory Warning Limit, or Memory Maximum Limit to be the maximums for a specific user or group.
-
-
Click Save.
Using Tags for Owner and Group Quotas
ManageIQ provides tags for enforcing quotas for the owners of virtual machines or instances. Ownership of a virtual machine or instance can be set either during the provisioning process or by using the Configuration Set Ownership button. If a virtual machine or instance has an owner, the value is displayed in the Lifecycle section of the virtual machine or instance summary page.
Quota tags can be assigned directly to either a group or owner not to a configuration item. The table below shows the tags for use in quotas.
Category Display Name (Name) | Use |
---|---|
Quota Max CPU (quota_max_cpu) |
Sets the maximum number of CPUs summed over all virtual machines and instances owned by the group or user. Sample Values: 1, 2, 3, 4, 5, 10, 20, 30, 40, 50 |
Quota Max Memory (quota_max_memory) |
Sets the maximum memory summed over all virtual machines and instances owned by the group or user. Sample Values: 1024, 2048, 4096, 8192, 10240, 20480, 40960, 81920 (in MB) |
Quota Max Storage (quota_max_storage) |
Sets the maximum storage summed over virtual machines and instances owned by the group or user. Sample Values: 10, 100, 1000, 20, 200, 40, 400 (in GB) |
Applying a Tag to a User or User Group
-
From the settings menu, select Configuration.
-
Click the Access Control accordion, and select the user or group that you want to tag.
-
Click (Policy), then click (Edit Tags).
-
Select the appropriate customer tag to assign, then the value.
-
Click Save.
When quotas are applied by both automate instance and tagging, the tagged values will have higher precedence. |
State Machines
The automate state machine processes an ordered list of states. It can ensure the successful completion of a step before the next step is run, permit steps to be retried, allow setting a maximum time to retry the state before exiting, and number of retries before exiting the state. Before each state is executed, the On_Entry
method is executed and after the state ends the On_Exit
or On_Error
method is executed based on how the state ends.
The following components make up a ManageIQ automate state machine:
Component | Description |
---|---|
On_Entry |
Method to run when entering the state. It enables you to execute an automate method to do some pre-processing before the state of the state machine is processed. |
On_Exit |
Method to run when exiting the state. |
On_Error |
Method to run if an error is encountered when running the state. It enables you to execute an automate method to do some final processing before the state machine finally exits (MIQ_ABORT) due to the error. |
Default Value |
Runs after the On_Entry method completes (The actual state being processed). |
Max Retries |
Maximum number of times to retry the state before exiting. |
Max Time |
Maximum time in seconds to retry the state before exiting. |
In the diagram below, you can see how these components combine to create a state machine workflow.
The retry logic, |
Code snippet demonstrating the state machine retry logic:
# Get current provisioning status task = $evm.root['service_template_provision_task'] task_status = task['status'] result = task.status Then check the result to see how it should proceed: case result when 'error' $evm.root['ae_result'] = 'error' ..... when 'retry' $evm.root['ae_result'] = 'retry' $evm.root['ae_retry_interval'] = '1.minute' when 'ok' $evm.root['ae_result'] = 'ok' end When the result is "retry", it sets: $evm.root['ae_result'] = 'retry' $evm.root['ae_retry_interval'] = '1.minute'
The following image shows a simple state machine pertaining to approving a provision request. This instance can be found in
.-
The attribute max_vms has a value of 1. State machine processing can use the attributes of the state machine instance to make logic decisions. In this case, the validate_request method, which is processed during the On_Entry portion of the ValidateRequest state, evaluates the max_vms attribute. If the number of virtual machines requested is less than the max_vms value, the request can be auto-approved.
-
ValidateRequest is the first state to be executed.
-
ApproveRequest is the next state to be executed.
Grayed out items reflect values that are set in the class schema. These values can be overwritten on a per instance basis. |
Customizing Provisioning States
The steps followed when provisioning a virtual machine or cloud instance are completed based on instances from the
class. Depending on your environment you can remove, change, or add steps to the provisioning process. For example, if you are not integrating with IPAM or a CMDB, then you can remove those execution steps.Editing the Default State Instance
-
Navigate to
. -
From the accordion menu, click
.DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
This example uses the Cloud Namespace, but can also use the Infrastructure namespace.
-
Click (Configuration), then (Edit this instance).
-
For each step that you want to remove, clear the entries in the Value, On Entry, On Exit, and On Error columns.
-
Click Save.
Viewing the Status of a Provisioning Request
After a request has been approved, the various stages of fulfillment are executed. You can see the progress of the provisioning process by viewing its status.
-
Navigate to
. The list of requests is shown. -
Click on a specific request for more information. Once the provisioning begins, if the request was supposed to create more than one virtual machine or instance, a field will appear called Provisioned VMs. Click on the number that appears next to it for information on each of the individual provisions.
Viewing a Provisioned Virtual Machine or Instance
When a virtual machine or instance is created as a result of a provisioning request, its summary screen will show when it was provisioned in the Lifecycle area of the respective summary.
-
From
, click the virtual machine or instance that you want to view.
5. Catalogs and Services
5.1. About Catalogs and Services
Through the use of catalogs, ManageIQ provides support for multi-tier service provisioning to deploy layered workloads across hybrid environments. You can create customized dialogs that will give consumers of the services the ability to input just a few parameters and provision the entire service.
5.2. Terminology
Terminology
- Catalog Bundle
-
A grouping of Templates.
- Catalog Item
-
A single Template or a group of Templates (catalog bundle).
- Dialog Tabs
-
Part of a Service Dialog.
- Element
-
An item on a tab in a Dialog. It can be a Button, Check Box, Drop Down List, Radio Button, Tag Control, Text Area Box, or a Text Box.
- Provisioning Dialogs
-
Dialogs created for Host Provisioning, VM Migration, or VM Provisioning. The dialog name must be added to the appropriate provision instance to be processed.
- Service Catalog
-
A catalog item or Catalog bundle that is available for provisioning.
- Service Dialogs
-
Made up of fully customizable tabs, items, and values for use with Service provisioning.
- Template
-
A template is a copy of a preconfigured virtual machine, designed to capture installed software and software configurations, as well as the hardware configuration, of the original virtual machine.
5.3. Catalogs
Catalogs are used to create groups of virtual machines or instances for provisioning. For example, a complete package of a database server, desktop with specialized software already on it, and a firewall. You will need to complete the following steps to create and provision a service catalog.
-
Create Catalog Items for each virtual machine or instance that will be part of the service.
-
Create a Service dialog. For example, create a dropdown with three options small, medium, and large.
-
Create a method for the Service Dialog. This method defines what each of the options means to each of the individual virtual machines or cloud instances for the service. This method is called from a service provisioning instance in the Automate model.
-
Create an instance in the
DOMAIN/Service/Provisioning/StateMachines/ServiceProvision_Template
class that calls the method.DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
-
Associate method with Automate instance.
-
Create a Catalog Bundle, adding each of the catalog items to it. Select the Service Dialog you created. Use the instance created in the
DOMAIN/Service/Provisioning/StateMachines/ServiceProvision_Template
class as the Entry Point. Check Display in Catalog box. -
Provision a service.
5.3.1. Creating a Catalog Item
Create a catalog item for each virtual machine or cloud instance that will be part of the service.
-
Navigate to
. -
Click the Catalog Items accordion.
-
Click (Configuration), and then (Add a New Catalog Item).
-
Select the Catalog Item Type you are adding. The dialogs that appear will be filtered based on the selected type of provider. For example, you will only see templates residing on Red Hat Providers, if the Catalog Item Type is Redhat.
-
In the Basic Info subtab:
-
Type a Name/Description.
-
Check Display in Catalog to edit Catalog, Dialog, and Entry Point(NS/Cls/Inst) options.
-
Provisioning Entry Point (Domain/NS/Cls/Inst) requires you to select an Automate instance to run upon provisioning.
-
Retirement Entry Point (Domain/NS/Cls/Inst) requires you to select an Automate instance to run upon retirement.
The entry point must be a State Machine since the Provisioning Entry Point list is filtered to only show State Machine class instances. No other entry points will be available from the Provisioning Entry Point field.
You can only choose from the catalogs and dialogs you have already created. If you haven’t done so, leave the values blank and edit later.
-
-
-
In the Details subtab, write a Long Description for the catalog item.
-
In the Request Info subtab, select provisioning options that apply to the provider chosen. For more information, refer to the sections on Provisioning Virtual Machines and Provisioning Instances.
-
Click Add.
5.3.2. Service Dialogs
When provisioning a service, input will be needed from the requester. Service Dialogs are used to take input from the user. This input is connected to a method in the Automate model that defines how the users input is translated into the provision request. Before creating a Service Dialog, be sure to plan what items you need the user to input.
Adding a Service Dialog
-
Navigate to
. -
Click the Service Dialogs accordion.
-
Click (Configuration), and then (Add a new Dialog).
-
In Dialog Information, type in a Label and Description. Check the boxes for the buttons you want available at the bottom of the dialog form. The description will appear as hover text.
As you type in the Label of the dialog, it should appear in the Dialog pane on the left. .. Click (Add), then (Add a New Tab to this Dialog). .. Type in a Label and Description for this tab.
+ As you type in the Label of the tab, it should appear in the Dialog pane on the left under the dialog you are creating.
-
Click (Add), then (Add a New Box to this Tab).
-
Type in a Label and Description for this box.
As you type in the Label of the box, it should appear in the Dialog pane on the left under the tab you are creating.
-
-
Add an element to this box. Elements are controls that accept input.
-
Click (Add), then (Add a New Element to this Box).
-
Type in a Label, Name, and Description for this element.
Name must use only alphanumeric characters and underscores without spaces. It is also used to retrieve the value of this element in the method used with the dialog and must start with dialog_service_type
-
Select a Type for an element type. All Type options have a Required and Default Value field. Check Required or set Required to true if the element is required to proceed. You can also specify a default value. The rest of the options presented are based on which type of element you select.
Element Types Additional Info Check Box
Check Default Value if you want this check box checked by default.
Date Control
Use Date Control to create a field where users can select a date. If you want users to be able to select a date and time, use the Date/Time Control option.
Date/Time Control
Use Date/Time Control to create a field where users can select a date and time. Only one Date Control or Date/Time Control element can be present in a dialog.
Drop Down Dynamic List
Use Drop Down Dynamic List if you want the list options to be created using automate methods. Use Entry Point (NS/Cls/Inst) to select an automate instance. Check Show Refresh Button to allow users to refresh the list options manually.
Radio Button
This element type serves the same purpose as Drop Down List but displays options using radio buttons.
Tag Control
Select a Category of tags you want assigned to the virtual machines associated with this service dialog. Check Single Select if only one tag can be selected.
Text Area Box
Provides text area for users to type in some text. You can also leave a message to users by typing in the Default Value field or leave it as blank.
Text Box
This element type serves the same purpose as Text Area Box with the option to check Protected so the text is shown as asterisks (*), instead of plain text.
-
-
Continue adding the dialog items you need. You can switch between dialogs, tabs, boxes, and elements by selecting their respective labels from the Dialog pane on the left.
-
Click Add. Your dialog should appear in the Service Dialogs accordion.
Importing Service Dialogs
You can share service dialogs between appliances using the export and import features.
-
Navigate to
. -
In the Import/Export accordion, click Service Dialog Import/Export.
-
In the Import area, click Browse to select an import file.
-
Click Upload.
Exporting Service Dialogs
You can share service dialogs between appliances using the export and import features.
-
Navigate to Automate → Customization.
-
In the Import/Export accordion, click Service Dialog Import/Export.
-
In the Export area, select the service dialogs that you want to export.
-
Click Export.
5.3.3. Methods
Creating a Method to Associate with the Dialog
You will need to create a method that connects the values in the dialog with the provisioning request. The method should be created in the DOMAIN/Service/Provisioning/StateMachines/ServiceProvision_Template
class of the Automate model.
DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain. |
A method is provided below that was created for the following scenario:
-
You want to provision a three-tiered Service that contains catalog items of web, app and DB. Each of these virtual machines (or cloud instances) has been tagged under the Service category with the appropriate value. Then, added as a catalog item and combined into a catalog bundle.
-
The Service Dialog captures the selection of small, medium or large application in a dropdown called service_type. When referring to a value captured in an element in a dialog, the name of the element should be prefixed with dialog_. For example, service_type becomes dialog_service_type when used in the method.
-
The method will set the memory sizes for each of the catalog items based on the service_type selection.
# Automate Method # $evm.log("info", "Automate Method ConfigureChildDialog Started") # # Method Code Goes here # $evm.log("info", "===========================================") $evm.log("info", "Listing ROOT Attributes:") $evm.root.attributes.sort.each { |k, v| $evm.log("info", "\t#{k}: #{v}")} $evm.log("info", "===========================================") stp_task = $evm.root["service_template_provision_task"] $evm.log("info", "===========================================") $evm.log("info", "Listing task Attributes:") stp_task.attributes.sort.each { |k, v| $evm.log("info", "\t#{k}: #{v}")} $evm.log("info", "===========================================") ############################################################# #### This is how the method would look for dialog variables ############################################################# dialog_service_type = $evm.root['dialog_service_type'] $evm.log("info","User selected Dialog option = [#{dialog_service_type}]") stp_miq_request_task = stp_task.miq_request_task #$evm.log("info","(parent) miq_request_task: = [#{stp_miq_request_task}]") ############################################################# #### This is how you get the catalog items for the catalog bundle ############################################################# stp_miq_request_tasks = stp_task.miq_request_tasks #$evm.log("info","(children) miq_request_tasks count: = [#{stp_miq_request_tasks.count}]") ############################################################# #### By going through the children, you can set the dialog variable for each of the children (we based our values on the childrens service tags) ############################################################# stp_miq_request_tasks.each do |t| $evm.log("info"," Setting dialog for: #{t.description}") service = t.source service_resource = t.service_resource #$evm.log("info"," Child service resource name: #{service_resource.resource_name}") #$evm.log("info"," Child service resource description: #{service_resource.resource_description}") service_tag_array = service.tags(:app_tier) service_tag = service_tag_array.first.to_s memory_size = nil ############################################################# #### The dialog_service_type is the attribute set on the service dialog #### We use the service_tag to decide what child gets what dialog ############################################################# case dialog_service_type when "Small" case service_tag when "app" memory_size = 1024 when "web" memory_size = 1024 when "db" memory_size = 4096 else $evm.log("info","Unknown Dialog type") end when "Large" case service_tag when "app" memory_size = 4096 when "web" memory_size = 4096 when "db" memory_size = 8192 else $evm.log("info","Unknown Dialog type") end else $evm.log("info","Unknown Dialog type - setting Dialog options here") end ############################################################# #### set_dialog_option sets the dialog for the child ############################################################# t.set_dialog_option('memory',memory_size) unless memory_size.nil? $evm.log("info","Set dialog for selection: [#{dialog_service_type}] Service_Tier: [#{service_tag}] Memory size: [#{memory_size}]") end # # # $evm.log("info", "Automate Method ConfigureChildDialog Ended") exit MIQ_OK
Creating a Method in the Service Class
Service methods have been split based on purpose.
-
Navigate to
. -
Service Class is located at
and .DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
-
Click the Methods tab.
-
Click (Configuration), then (Add a New Method).
-
Type in a Name and Display Name.
-
In the Data field, type in the method contents.
-
Click Validate and wait for your data entry to be successfully validated.
-
Click Add.
Creating an Instance in the Service Class
-
Navigate to
. -
Service Class is located at
and .DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
-
Click the Instances tab.
-
Click (Configuration), then (Add a new Instance).
-
Type in a Name and Display Name.
-
In the Fields area, type in the method’s name in Value.
-
Click Add.
The instance is created so that it can be called from the ServiceProvision class.
After the method has been created, it must be mapped to an instance in the |
Associating a Method with an Automate Instance
Service methods have been split based on purpose.
-
Navigate to
. -
From the accordion menu, click the required service method.
-
Service Class is located at
and .DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
-
Either create a new instance or select the clone_to_service instance.
-
Click (Configuration), then (Edit Selected Instance).
-
In the configurechilddialog value, put the path to the method.
-
Click Save or Add if you are adding this to a new instance.
Now that the catalog items, service dialog, dialog methods, and service provision instance have been created, you can create the catalog bundle.
5.3.4. Creating a Catalog Bundle
-
Navigate to
. -
Click the Catalog Items accordion.
-
Click (Configuration), and then (Add a New Catalog Bundle).
-
In Basic Info, type in a name and description:
-
Click Display in Catalog.
-
Select the appropriate dialog name.
-
Select the path to the appropriate ServiceProvision instance.
-
Click on the Resources tab, then select the catalog items you want added to the bundle from the Add a Resource dropdown.
-
Click Add.
A catalog bundle is created and visible in the Service Catalog accordion.
You should also create and specify an Entry Point in the |
6. Retirement
6.1. Retiring Virtual Machines
6.1.1. Retiring Virtual Machines and Instances
When a virtual machine or instance is no longer required, it can be retired. Once a virtual machine or instance reaches its retirement date, it is immediately shut down and not allowed to restart. If an attempt to restart is made, ManageIQ will shut down the virtual machine or instance.
There are three built-in policies involved with retirement:
-
If the virtual machine or instance reaches its retirement date, it will be stopped even if it is running.
-
If a retired virtual machine or instance is requested to start through ManageIQ, the virtual machine or instance will not be allowed to start.
-
If a provider starts a retired virtual machine or instance outside of ManageIQ, the virtual machine or instance will be stopped.
ManageIQ provides a number of ways to retire a virtual machine or instance:
-
By using the allocated buttons in the ManageIQ console.
-
When creating a provision request, a retirement date can be set up.
6.1.2. Using the Console to Retire
Through the ManageIQ console, you can retire a virtual machine on a specific date or immediately.
6.1.3. Retiring a Virtual Machine Immediately
-
Navigate to
. -
Select the virtual machine or instance that you want to retire.
-
Click (Lifecycle), then (Retire this VM/Instance).
The virtual machine or instance is immediately stopped, and will be shut down if an attempt is made to restart it.
6.1.4. Setting a Retirement Date for a Virtual Machine or Instance
-
Navigate to
. -
Select the virtual machine that you want to set a retirement date for.
-
Click (Lifecycle), then (Set Retirement Date).
-
Select a date using the calendar control.
-
Click Save.
The retirement date is set, and displays in the virtual machine or instance summary screen.
6.2. Setting Retirement in a Provision Request
If you are using ManageIQ to provision, you can set when you want retirement in the provision request. To see how to create a request, see Provisioning Requests. A warning email will be sent to the owner before the retirement.
6.2.1. Scheduling Retirement in a Provision Request
When provisioning a cloud instance or virtual machine, a multi-tabbed screen appears where you can set up your provision requests.
-
Click the Schedule tab to set when to provision your request and the lifespan of the virtual machine or instance.
-
In Lifespan, you can choose to power on the virtual machines or instances after creation and set the Time until Retirement. If you select the time until retirement, you will select Retirement Warning accordingly.
-
Click Submit.
6.3. Extending Retirement Dates
ManageIQ Automate includes a method to extend the retirement of a virtual machine or instance by 14 days. This section describes how to create a button that invokes this method and how to edit the method to change the number of days.
6.3.1. Creating a Custom Button to Extend Retirement
-
Navigate to
. -
Click the Buttons accordion.
-
From the Object Types tree, select VM and Instance.
-
Navigate to the button group to which you want to add this button. (If you do not have a button group, add one and then create the button.)
-
Click (Configuration), then (Add a new Button).
-
Type in a button text and button hover text, and select the image you want to use.
-
In Object Details, select Request from the /System/Process/ dropdown. By default, the message is
create
. Do not change it. -
In Request, type
vm_retire_extend
. -
Click Add.
6.3.2. Changing the Number of Days to Extend Retirement
-
Navigate to
. -
Click
.DOMAIN must be a user-defined Domain and not the locked ManageIQ Domain. If necessary, you can copy the class from the ManageIQ domain into a custom domain.
This example uses the Cloud Namespace, but you can also use the Infrastructure namespace.
-
Click (Configuration), then (Edit this Instance).
-
In the Value field, change the vm_retire_extend_days attribute to the new value.
-
Click Save.