The VMware Blockchain Orchestrator infrastructure schema file includes the definitions of all the available properties that you can manually configure in your vSphere infrastructure environment and deploy VMware Blockchain nodes.

Organization Parameters

Specify the keyword organization in the infrastructure descriptor file.

Parameter

Description

damlSdk

Add the DAML (Digital Asset Modeling Language) SDK version.

This parameter is optional.

generatePassword

If the parameter is set to true, a root password is generated.

This parameter is optional.

vCenter Server Parameters

Specify the keyword vCenter in the infrastructure descriptor file.

Parameter

Description

url

Enter the vCenter Server URL endpoint you configured.

This parameter is mandatory.

tlsCertificateData

Enter the single line vCenter Server public key you extracted.

This parameter is optional.

userName

Enter your vCenter Server user name.

This parameter is mandatory.

password

Enter your vCenter Server password.

This parameter is mandatory.

resourcePool

Enter the vCenter Server resource pool you configured.

This parameter is mandatory.

storage

Enter the vCenter Server storage or datastore you assigned.

This parameter is mandatory.

folder

Enter the vCenter Server folder you designated.

This parameter is mandatory.

Replica and Client Network Parameters

Specify the keyword network in the infrastructure descriptor file.

Parameter

Description

name

Enter the network name.

This parameter is mandatory.

gateway

Enter the network gateway IP address.

This parameter is mandatory.

subnet

Set the subnet mask between 0–32.

This parameter is mandatory.

nameServers

Enter single or multiple server IP addresses.

Separate the multiple server IP addresses with a comma without any space in between.

This parameter is mandatory.

Outbound Proxy Parameters

Specify the keyword outboundProxy in the infrastructure descriptor file.

The outbound proxy parameters are optional.

If you use this parameter httpHost, then the httpPort must also be used.

If you use this parameter httpsHost, then the httpsPort must also be used.

Parameter

Description

httpHost

Enter the outbound proxy HTTP host name or IP address.

httpPort

Enter the outbound proxy designated HTTP port.

httpsHost

Enter the outbound proxy HTTPS host name or IP address.

httpsPort

Enter the outbound proxy designated HTTPS port.

Docker Container Registry Parameters

Specify the keyword containerRegistry in the infrastructure descriptor file.

If you are using a private Docker container registry, you must download trusted VMware images. See Download Trusted VMware Images for Your Private Docker Container Registry

Parameter

Description

url

Enter the Docker container registry URL so that VMware Blockchain can connect to the Docker repositories.

Note:

The Docker container registry can have a CA (Certificate Authority) or self-signed based authentication.

For example, the Docker container registry url can be https://vmware-docker-blockchainsaas.bintray.io .

This parameter is mandatory.

userName

Enter the Docker container registry user name.

For example, the Docker container registry username can be vmbc-bintray-reader@vmware.

This parameter is mandatory.

password

Enter the Docker container registry password.

This parameter is mandatory.

tlsCertificateData

Enter the single-line TLS certificate output value for a Docker container registry if it is based on a self-signed authentication

This parameter is optional.

Notary Server Parameters

If you are using a private self-signed authentication, you must download trusted VMware images. See Download Trusted VMware Images for Your Private Docker Container Registry

Parameter

Description

url

Enter a trusted notary server URL so that allow VMware Blockchain can connect to the notary server.

Note:

The notary server can have a CA (Certificate Authority) or self-signed based authentication.

The notary server address where all the images are signed is, https://notary.vdp.vmware.com.

This parameter is mandatory.

tlsCertificateData

Enter the single-line TLS certificate output value for the notary server if it is based on a self-signed authentication.

This parameter is optional.

Wavefront Metrics Parameters

Specify the keyword wavefront in the infrastructure descriptor file.

The Wavefront parameters are optional.

If you use this parameter, then both the url and token parameters are mandatory.

Parameter

Description

url

Enter the Wavefront endpoint URL.

token

Enter the token value you generated from Wavefront.

Elastic Search Metrics Parameters

Specify the keyword elasticSearch in the infrastructure descriptor file.

The Elasticsearch proxy parameters are optional.

If you use this parameter, then all the parameters are mandatory.

Parameter

Description

url

Enter the ELK endpoint URL.

userName

Enter the Elasticsearch endpoint user name.

password

Enter the Elasticsearch endpoint password.

Logging Parameters

Depending on the type of logging parameter you are using, specify the keyword LOG_INTELLIGENCE or LOG_INSIGHT in the infrastructure descriptor file.

Parameter

Description

type

Enter the logging parameter type, either Log Intelligence or vRealize Log Insight.

This parameter is mandatory.

address

Enter the IP address or FQDN of the Log Intelligence or vRealize Log Insight endpoint.

This parameter is mandatory.

port

Enter the Log Intelligence or vRealize Log Insight port endpoint.

This parameter is mandatory.

username

Enter the Log Intelligence or vRealize Log Insight endpoint user name.

This parameter is mandatory.

password

Enter the Log Intelligence or vRealize Log Insight endpoint password.

This parameter is mandatory.

logInsightAgentId

Enter the vRealize Log Insight agent ID.

This parameter is optional.

Zone Parameters

A zone is a set of standard infrastructure configurations that are applied to a single or multiple blockchain deployments.

A zone can host multiple blockchain deployments that share the common infrastructure such as network parameters, resource pool, storage, and compute resources. Multiple deployments in a single zone also share monitoring, logging, container registry, and proxy settings.

To establish a connection between your environment and the VMware Blockchain nodes, you must create a zone.

Parameter

Description

name

Assign a zone name.

This parameter is mandatory.

vCenter

Enter the vCenter Server URL endpoint you configured.

This parameter is mandatory.

network

Enter the zone network properties.

This parameter is mandatory.

outboundProxy

Enter the zone outbound proxy properties.

This parameter is optional.

containerRegistry

Enter the zone Docker registry properties.

This parameter is mandatory.

wavefront

Enter the zone Wavefront metrics properties.

This parameter is optional.

elasticSearch

Enter the zone Elastic Search metrics properties.

This parameter is optional.

logManagement

Enter the zone logging properties.

This parameter is optional.

pullMetricsEndpoint

Enable the VMware Blockchain node VM metrics endpoints and manually retrieve the monitoring metrics data and examine an error.

The metrics data is available in the Prometheus format. You can download and analyze this data within your preferred monitoring metrics framework.

This parameter is optional.

You can use domain-validated or self-signed certificates. As a best practice, use domain-validated certificates.

When the tlsCertificateData and tlsKeyData values are provided, the monitoring metrics data can be retrieved securely using an HTTPS protocol. As a best practice, use these parameters to enable a secure endpoint connection.

The same certificate pair specified in the infrastructure descriptor file is applied to all deployed VMware Blockchain node VMs. Use only domain-validated certificates because IP address validated certificates are specific to an IP address and cannot be used.

If the mentioned parameters are not specified, then the monitoring metrics data is retrieved using an unsecured HTTP protocol. The HTTP protocol has weak security and must be used for internal use only.

After deployment, you can validate whether the VMware Blockchain node VM endpoints are enabled and the monitoring metrics data is retrieved.

pullMetricsEndpoint

userName

Enter the endpoint access user name. This user name is used for all the VMware Blockchain node VMs that belong to a zone.

This parameter is mandatory.

pullMetricsEndpoint

password

Enter the endpoint access password. This password is used for all the VMware Blockchain node VMs that belong to a zone.

This parameter is mandatory.

pullMetricsEndpoint

tlsCertificateData

Enter the single-line TLS certificate output value for a self-signed authentication.

You can convert the certificate file into a single-line string using the

awk 'NF {sub(/\r/, ""); printf "%s\\n",$0;}' <cert_file_name>

command.

This parameter is optional.

pullMetricsEndpoint

tlsKeyData

Enter the single-line TLS key data output value for a self-signed authentication.

Note:

The private key must not contain a passphrase.

You can convert the certificate file into a single-line string using the

awk 'NF {sub(/\r/, ""); printf "%s\\n",$0;}' <cert_file_name>

command.

This parameter is optional.