You can integrate VMware Integrated OpenStack with vRealize Automation through vRealize Orchestrator to enforce control and governance, manage OpenStack deployments as resource pools, and manage VMware Integrated OpenStack from the vRealize Automation portal.

You integrate the two solutions by enabling Keystone federation, configuring the vRealize Automation tenant FQDN through the OpenStack Management Server, and installing the vRealize Orchestrator OpenStack plug-in.

Prerequisites

Procedure

  1. Log in to the OpenStack Management Server.
  2. Add vRealize Automation as a Keystone identity provider.
    sudo viocli federation identity-provider add --type vidm

    You are prompted to enter the following information.

    Option

    Description

    Identity provider name [None]:

    Name of the identity provider

    Identity provider display name (for Horizon) [VMware Identity Manager]:

    Name of the identity provider to be displayed on the VMware Integrated OpenStack dashboard

    Description [None]:

    Custom description for this identity provider

    vIDM endpoint address [None]:

    IP address of your VMware Identity Manager endpoint in the format https://vidm-endpoint-ip.eng.vmware.com

    vIDM admin user [admin]:

    Username of the VMware Identity Manager administrator

    vIDM admin password:

    Password for the VMware Identity Manager administrator

    Do not verify certificates when establishing TLS/SSL connections [False]:

    Enter true to disable certificate verification or false to enable certificate verification.

    vIDM tenant name []:

    Enter vsphere.local

    Enter the name of the domain that federated users associate with [Default]:

    Domain to which all federated users belong. If the specified domain does not exist, it will be created.

    Enter the name to the groups that federated users associate with (separated by commas ",") []:

    Groups to which all federated users belong. If the specified groups do not exist, they will be created.

    Note:

    Include all groups defined in your custom mappings.

    Do you want to change advanced settings? (Y/N)

    Enter N

  3. Update the deployment configuration.
    sudo viocli identity configure

    This command causes your VMware Integrated OpenStack deployment to go down temporarily.

  4. Configure the VMware Integrated OpenStack tab for your vRealize Automation tenant.
    sudo viocli vros enable -vt vra-tenant-name -vh vra-ip -va vra-admin -vrs mgmt-server-ip
    Note:

    Enter the vra-tenant-name value in all uppercase letters.

  5. Deploy the vRealize Orchestrator OpenStack Plug-In.

    See Deploy the vRealize Orchestrator OpenStack Plug-In in the Using the vRealize Orchestrator OpenStack Plug-In 2.0 document.

Results

You can now manage VMware Integrated OpenStack through the vRealize Automation portal and design and consume blueprints.

For more information, see Using the vRealize Orchestrator OpenStack Plug-In.