This topic describes how to configure BOSH Director after deploying VMware Tanzu Operations Manager (Ops Manager) on OpenStack. Use this topic when Installing Ops Manager on OpenStack.

Note: You can also perform the procedures in this topic using the Ops Manager API. For more information, see Using the Ops Manager API.

Step 1: Log Into Ops Manager

  1. In a web browser, navigate to the fully qualified domain you created in the Create a DNS Entry step of Provisioning the OpenStack Infrastructure.

  2. Log into Ops Manager. To log in, see Log In to Ops Manager For the First Time.

Step 2: OpenStack Configs Page

  1. In the left navigation of your OpenStack dashboard, click Project > Compute > Access & Security. Click the API Access tab.

  2. In the SERVICE column, find the Identity row. Record the Service Endpoint in this row. You will use this Service Endpoint as the Authentication URL for Ops Manager in a later step.

    alt-text=""

  3. In the Ops Manager Installation Dashboard, click the BOSH Director tile.

  4. Select OpenStack Configs.

  5. Complete the OpenStack Management Console Config page with the following information:

    • Name: Enter a unique name for the OpenStack config.
    • Authentication URL: Enter the Service Endpoint for the Identity service that you recorded in a previous step.
    • Keystone Version: Choose a Keystone version, either v2 or v3.

      • If you choose v3, enter the OpenStack Keystone domain to authenticate against in the Domain field. For more information about Keystone domains in OpenStack, see Domains in the OpenStack documentation.

      alt-text=""

    • Username: Enter your OpenStack Horizon username. The PrimaryProject for the user must be the project you are using to deploy Ops Manager. For more information, see Manage projects and users in the OpenStack documentation.

    • Password: Enter your OpenStack Horizon password.
    • Tenant: Enter your OpenStack tenant name.
    • Region: Enter RegionOne, or another region if recommended by your OpenStack administrator.

      alt-text=""

    • Select OpenStack Network Type: Select either Nova, the legacy OpenStack networking model, or Neutron, the newer networking model.

    • Ignore Server Availability Zone: Ensure that the check box is not selected.
    • Security Group Name: Enter opsmanager. You created this Security Group in the Configure Security step of Provisioning the OpenStack Infrastructure.
    • Key Pair Name: Enter the name of the key pair that you created in the Configure Security step of Provisioning the OpenStack Infrastructure.

      alt-text=""

    • SSH Private Key: In a text editor, open the key pair file that you downloaded in the Configure Security step of Provisioning the OpenStack Infrastructure. Copy and paste the contents of the key pair file into the field.

    • (Optional) API SSL Certificate: If you configured API SSL termination in your OpenStack Dashboard, enter your API SSL Certificate.
    • Disable DHCP: Do not select the check box unless your configuration requires it.
    • Boot From Volume: Select the check box to boot VMs from a Cinder volume.

      alt-text=""

  6. Click Save.

  7. (Optional) Click Add OpenStack Config to configure additional data centers. Click Save for each additional OpenStack config to add it successfully. For more information, see Managing Multiple Data Centers.

Step 3: (Optional) Advanced Config Page

Note: This is an advanced option. Most users leave this field blank.

  1. In Ops Manager, select Advanced Infrastructure Config.

    alt-text=""

  2. If your OpenStack environment requires specific connection options, enter them in the Connection Options text box in JSON format. For example: 'connection_options' => { 'read_timeout' => 200 }

    Note: Your connection options apply to all of your OpenStack configs.

  3. Click Save.

Step 4: Director Config Page

To configure the Director Config pane:

  1. Select Director Config.

    alt-text=""

  2. Enter one or more NTP servers in the NTP Servers (comma delimited) field. For example, us.pool.ntp.org.

    1. The NTP server configuration only updates after VM recreation. If you modify the value of this field, select the Recreate VMs deployed by the BOSH Director checkbox to re-create your BOSH Director-deployed VMs and update the NTP server configuration. If you have any service tiles installed, ensure that the Recreate All Service Instances errand runs for each service tile.
  3. Leave the Bosh HM Forwarder IP Address field blank.

    Note: Starting in Pivotal Application Service (PAS) v2.0, BOSH-reported component metrics are available in Loggregator Firehose by default. If you continue to use the BOSH HM Forwarder to consume these component metrics, you might receive duplicate data. To prevent this, leave the Bosh HM Forwarder IP Address field blank.

  4. Select the Enable VM Resurrector Plugin checkbox to enable the BOSH Resurrector functionality and increase your runtime availability.

  5. The Enable BOSH System Metrics Server checkbox is deprecated, only keep it selected if your metrics system relies upon the format used. It is recommended that you switch away from this format as soon as possible, as this option is going away in future releases.

  6. Keep the Enable System Metrics checkbox selected to collect system metrics, including load, CPU, memory, swap, and disk metrics, and make them available for scraping from agents on each VM. This is recommended if you are using TAS, as it will scrape the agents automatically and insert the metrics into the regular logging and metrics egress stream. For a list of metrics collected, see System Metrics Agent in GitHub.

  7. Select Enable Post Deploy Scripts to run a post-deploy script after deployment. This script allows the job to execute additional commands against a deployment.

    Note: If you intend to install VMware Tanzu Kubernetes Grid Integrated Edition (TKGI), you must enable post-deploy scripts.

  8. Select Recreate VMs deployed by the BOSH Director to force BOSH to re-create BOSH-deployed VMs on the next deploy. This process does not re-create the BOSH Director VM or destroy any persistent disk data. This checkbox is cleared automatically after a successful re-deployment.

  9. Select Recreate BOSH Director VMs to force the BOSH Director VM to be re-created on the next deploy. This process does not destroy any persistent disk data. This checkbox is cleared automatically after a successful re-deployment.

  10. Select Recreate All Persistent Disks to force BOSH to migrate and re-create persistent disks for the BOSH Director and all tiles. This process does not destroy any persistent disk data. This checkbox is cleared automatically after a successful re-deployment.

  11. Select Enable bosh deploy retries to instruct Ops Manager to retry failed BOSH operations up to five times.

  12. Select Skip Director Drain Lifecycle to prevent drain scripts from running when the BOSH Director is re-created.

  13. Select Store BOSH Job Credentials on tmpfs (beta) to store credentials for BOSH jobs on temporary file storage (tmpfs) memory, rather than on disk. You must re-create all BOSH-deployed VMs for this setting to take effect.

  14. Select Keep Unreachable Director VMs to preserve BOSH Director VMs after a failed deployment for troubleshooting purposes.

  15. (Optional) Modify the Director Workers value, which sets the number of workers available to execute BOSH Director tasks. This field defaults to 5.

  16. (Optional) Max Threads sets the maximum number of threads that the BOSH Director can run simultaneously. VMware recommends that you leave the field blank to use the default value, unless doing so results in rate limiting or errors on your IaaS.

  17. (Optional) To add a custom URL for your BOSH Director, enter a valid hostname in Director Hostname. You can also use this field to configure a load balancer in front of your BOSH Director. For more information, see How to Set Up a Load Balancer in Front of Operations Manager Director in the VMware Tanzu Support knowledge base.

    alt-text=There are three text fields, Director Workers, Max Threads, and Director Hostname.

  18. (Optional) To set a custom banner that users see when logging in to the BOSH Director using SSH, enter text in the Custom SSH Banner field.

  19. (Optional) Enter your comma-separated custom Identification Tags. For example, iaas:foundation1, hello:world. You can use the tags to identify your foundation when viewing VMs or disks from your IaaS.

  20. For Certificate Duration Overrides, you can choose whether certificates generated within Ops Manager and CredHub use the default duration specified for the certificate or a custom duration value that you specify.

    alt-text=Three fields: the On-Off option for the feature, CA Certificate Duration (days) text field, Leaf Certificate Duration (days), and a link to the documentation for the feature.

    • Off: Select this option to use default duration for certificates created by all products.
    • On: Select this option to set a value to override the duration for certificates created by all products. If a product creates a certificate with a longer duration than the value you set, then the longer duration is used.

      1. CA Certificate Duration (days): Enter the number of days for which CA certificates are valid.
      2. Leaf Certificate Duration (days): Enter the number of days for which leaf certificates are valid. This value must be less than or equal to the CA certificate duration.

      Note: After you set a certificate duration override, you must take additional steps to apply the setting to all certificates. For more information, see Overriding Duration for Certificates.

  21. Select HM Pager Duty Plugin to enable Health Monitor integration with PagerDuty.

    alt-text=There is a selected check box, HM Pager Duty Plugin, and two text fields, Service Key and HTTP Proxy.

    • Service Key: Enter your API service key from PagerDuty.
    • HTTP Proxy: Enter an HTTP proxy for use with PagerDuty.
  22. Select HM Email Plugin to enable Health Monitor integration with email.

    alt-text=There is a selected check box, HM Email Plugin, and seven text fields: Host, Port, Domain, From, Recipients, Username, and Password.

    • Host: Enter your email hostname.
    • Port: Enter your email port number.
    • Domain: Enter your domain.
    • From: Enter the address for the sender.
    • Recipients: Enter comma-separated addresses of intended recipients.
    • Username: Enter the username for your email server.
    • Password: Enter the password for your email server.
    • Enable TLS: Select this checkbox to enable Transport Layer Security to the email host.
  23. For CredHub Encryption Provider, you can choose whether BOSH CredHub stores its encryption key internally on the BOSH Director and CredHub VM, or in an external hardware security module (HSM). The HSM option is more secure.

    Before configuring an HSM encryption provider in the Director Config pane, you must follow the procedures and collect information described in Preparing CredHub HSMs for Configuration.

    Note: After you deploy Ops Manager with an HSM encryption provider, you cannot change BOSH CredHub to store encryption keys internally.

    alt-text=""

    • Internal: Select this option for internal CredHub key storage. This option is selected by default and requires no additional configuration.
    • Luna HSM: Select this option to use a SafeNet Luna HSM as your permanent CredHub encryption provider, and fill in the following fields:

      Note: If you use multiple HSM hosts, you must use the Ops Manager API to set or update the HSM configuration. For more information, see Updating director and Iaas properties (Experimental) in the Ops Manager API documentation.

      1. Encryption Key Name: Any name to identify the key that the HSM uses to encrypt and decrypt the CredHub data. Changing this key name after you deploy Ops Manager can cause service downtime.
      2. Provider Partition: The partition that stores your encryption key. Changing this partition after you deploy Ops Manager could cause service downtime. For this value and the ones below, use values gathered in Preparing CredHub HSMs for Configuration.
      3. Provider Partition Password
      4. Partition Serial Number
      5. Provider Client Certificate: The certificate that validates the identity of the HSM when CredHub connects as a client.
      6. Provider Client Certificate Private Key
      7. HSM Host Address
      8. HSM Port Address: If you do not know your port address, enter 1792.
      9. HSM Certificate: The certificate that the HSM presents to CredHub to establish a two-way mTLS connection.
  24. Select a Blobstore Location to configure the blobstore as either an internal server or an external endpoint.

    Note: After you deploy the BOSH Director, only Ops Manager users in Advanced Mode can change the blobstore location. For more information, see Ops Manager Fields That Lock On Deploy.

    • Internal: Select this option to use an internal blobstore. No additional configuration is required.

    • S3 Compatible Blobstore: Select this option to use an external S3-compatible endpoint. To create an S3 bucket, follow the procedures in Sign up for Amazon S3 and Creating a Bucket in the AWS documentation. When you have created an S3 bucket, configure the following fields:

      1. S3 Endpoint:

        1. If you are using a public S3 endpoint:
          1. Locate the endpoint for your region. To find the endpoint, see the Amazon Simple Storage Service (S3) table in Regions and Endpoints in the AWS documentation.
          2. Construct a URL using your region’s endpoint. For example, if you are using the us-west-2 region, the URL you create would be https://s3.us-west-2.amazonaws.com. Enter this URL into the S3 Endpoint field.
        2. If you are using a non-public S3-compatible endpoint (Ops Manager v2.10.19 or earlier):

          1. Enter the URL for the non-public endpoint.
          2. SSH into the Ops Manager VM by running:

            ssh ubuntu@OPS-MANAGER-FQDN
            

            Where OPS-MANAGER-FQDN is the fully-qualified domain name (FQDN) of your Ops Manager deployment.

          3. Copy the custom public CA certificate you used to sign the S3 endpoint into the /etc/ssl/certs directory on the Ops Manager VM.

          4. On the Ops Manager VM, import the custom CA certificate into the Ops Manager VM truststore by running:

            sudo update-ca-certificates -f -v
            
          5. Add this custom CA certificate into the Trusted Certificates field in the Security page. For instructions, see Security Page.

        3. If you are using a non-public S3-compatible endpoint (Ops Manager v2.10.20 or later:
          1. Enter the URL for the non-public endpoint.
          2. Add the custom public CA certificate you used to sign the S3 endpoint to the Trusted Certificates field on the Director Config page.
      2. Bucket Name: Enter the name of the S3 bucket.

      3. URL Style: Select either path-style or domain-style to specify the URL style for the S3-compatible blobstore. By default, the blobstore uses domain-style URLs.

        Important: AWS ends support for path-style URLs for all S3 buckets created after September 30, 2020. For more information, see Support for Virtual-Hosted-Style URLs for AWS S3 Blobstores.

      4. Access Key and Secret Key: Enter the keys you generated when creating your S3 bucket.
      5. Enable signed URLs: Select this checkbox to configure BOSH VMs to generate short-lived, pre-signed URLs for communication between the BOSH Agent and blobstore. If you enable this feature, BOSH Agents do not use credentials to communicate with the blobstore, and VM disks do not store blobstore credentials.

        Note: This feature is only available for BOSH VMs that use Xenial stemcell line 621 or later.

      6. Select V2 Signature or V4 Signature. If you select V4 Signature, enter your Region.

        Note: AWS recommends using Signature Version 4. For more information about AWS S3 Signatures, see Authenticating Requests in the AWS documentation.

      7. S3 Backup Strategy: To configure whether and how to back up the BOSH Director’s S3 blobstore, select one of the following options:
        • No backups
        • Use a versioned bucket: This option uses blobstore bucket versioning to save backups. It requires an S3 blobstore that supports versioning.
        • Copy into an additional bucket: This option saves blobstore backups to a separate bucket, which is useful with blobstores that do not support versioning. This option requires you to configure the Backup Bucket Region and Backup Bucket Name fields.
    • GCS Blobstore: Select this option to use an external Google Cloud Storage (GCS) endpoint.

      alt-text=""

      To create a GCS bucket, follow the procedures in Creating Storage Buckets in the GCS documentation. To create a GCS bucket, you must have a GCS account. When you have created a GCS bucket, configure the following fields:

      1. Bucket Name: Enter the name of your GCS bucket.
      2. Storage Class: Select the storage class for your GCS bucket. For more information, see Storage Classes in the GCP documentation.
      3. Service Account Key: Follow the steps in Set up IAM Service Accounts in Preparing to Deploy Ops Manager on GCP to download a JSON file with a private key. Enter the contents of the JSON file into the field.
      4. GCS Backup Strategy: To configure whether and how to back up the BOSH Director’s GCS blobstore, select one of the following options:
        • No backups
        • Copy into an additional bucket: This option saves blobstore backups to a bucket separate from the blobstore itself, and requires you to configure the Backup Bucket Region and Backup Bucket Name fields.
  25. Select a Database Location. By default, Ops Manager deploys and manages an Internal database for you. If you choose to use an External MySQL Database, complete the associated fields with information obtained from your external MySQL Database provider: Host, Port, Username, Password, and Database.

    Note: Use of an External MySQL Database only applies to the BOSH Director. UAA and CredHub will not use these settings and will continue to use the Postgres database colocated with the BOSH Director.

    Caution: After you deploy the BOSH Director, you cannot change the Database Location from an External MySQL Database to an Internal database or from an Internal database to an External MySQL Database.

    alt-text=There are two radio buttons: Internal, and External MySQL Database. There are five text fields, Host, Port, Username, Password, and Database. All fields are required when External MySQL Database is selected.

    In addition, if you selected the Enable TLS for Director Database checkbox, you can complete the following optional fields:

    • Enable TLS: Select this checkbox enables TLS communication between the BOSH Director and the database.
    • TLS CA: Enter the Certificate Authority for the TLS Certificate.
    • TLS Certificate: Enter the client certificate for mutual TLS connections to the database.
    • TLS Private Key: Enter the client private key for mutual TLS connections to the database.
    • Advanced DB Connection Options: This field accepts a JSON-formatted options string. It should be left blank unless directed by VMware Support.
  26. Click Save.

Step 5: Create Availability Zones Page

  1. In Ops Manager, select Create Availability Zones.

    alt-text=""

  2. In Name, enter the name of the availability zone that you selected in the Launch Ops Manager VM step of Provisioning the OpenStack Infrastructure.

  3. (Optional) Using the IaaS Configuration drop-down menu, select an OpenStack config name. The default is set to your first OpenStack config.

  4. In OpenStack Availability Zone, enter the OpenStack AZ of your OpenStack environment. Many OpenStack environments default to nova.

  5. Click Add for each additional OpenStack config you created in Step 2: OpenStack Configs Page. Give each AZ a unique Name and an IaaS Configuration with a different OpenStack config.

  6. Click Save.

Step 6: Create Networks Page

  1. In the left navigation menu of your OpenStack dashboard, click Project > Network > Networks.

  2. Click the name of the network that contains the private subnet where you deployed the Ops Manager VM. The OpenStack Network Detail page displays your network settings.

    alt-text=""

  3. In Ops Manager, select Create Networks.

    alt-text=""

  4. Select Enable ICMP checks to enable ICMP on your networks. Ops Manager uses ICMP checks to confirm that components within your network are reachable. Review the Configure Security step of Deploying BOSH and Ops Manager to OpenStack to ensure you have configured ICMP in your Security Group.

  5. Use the following steps to create one or more Ops Manager networks using information from your OpenStack network:

    • Click Add Network.
    • In Name, enter a unique name for the network.
    • Click Add Subnet to create one or more subnets for the network.
    • For Network ID, use the ID from the OpenStack page.
    • For CIDR, use the Network Address from the OpenStack page.
    • For Reserved IP Ranges, use the first 10 IP addresses of the Network Address range, and the private IP address of the Ops Manager instance that you recorded in the Associate a Floating IP Address step of Provisioning the OpenStack Infrastructure.
    • For DNS, enter one or more Domain Name Servers.
    • For Gateway, use the Gateway IP from the OpenStack page.
    • For Availability Zones, select which Availability Zones to use with the network.
  6. Click Save.

    Note: After you deploy Ops Manager, you add subnets with overlapping Availability Zones to expand your network. For more information about configuring additional subnets, see Expanding Your Network with Additional Subnets.

Step 7: Assign AZs and Networks Page

  1. Select Assign Availability Zones.

    alt-text=""

  2. From the Singleton Availability Zone drop-down menu, select the availability zone that you created in a previous step. The BOSH Director installs in this Availability Zone.

  3. From the Network drop-down menu, select the network you created in a previous step. BOSH Director installs in this network.

  4. Click Save.

Step 8: Security Page

  1. Select Security. alt-text=""

  2. In Trusted Certificates, enter your custom certificate authority (CA) certificates to insert into your organization’s certificate trust chain. This feature enables all BOSH-deployed components in your deployment to trust custom root certificates.

    To enter multiple certificates, paste your certificates one after the other. For example, format your certificates like the example below:

    -----BEGIN CERTIFICATE-----
    ABCDEFGH12345678ABCDEFGH12345678ABCDEFGH12345678AB
    EFGH12345678ABCDEFGH12345678ABCDEFGH12345678ABCDEF
    GH12345678ABCDEFGH12345678ABCDEFGH12345678...
    ------END CERTIFICATE------
    -----BEGIN CERTIFICATE-----
    BCDEFGH12345678ABCDEFGH12345678ABCDEFGH12345678ABB
    EFGH12345678ABCDEFGH12345678ABCDEFGH12345678ABCDEF
    GH12345678ABCDEFGH12345678ABCDEFGH12345678...
    ------END CERTIFICATE------
    -----BEGIN CERTIFICATE-----
    CDEFGH12345678ABCDEFGH12345678ABCDEFGH12345678ABBB
    EFGH12345678ABCDEFGH12345678ABCDEFGH12345678ABCDEF
    GH12345678ABCDEFGH12345678ABCDEFGH12345678...
    ------END CERTIFICATE------
    

    Note: If you want to use Docker registries to run TAS for VMs app instances in Docker containers, enter the certificate for your private Docker registry in this field. For more information about running app instances in TAS for VMs using Docker registries, see Using Docker Registries.

  3. To include the Ops Manager root CA in the Trusted Certificates field, select the Include OpsManager Root CA in Trusted Certs checkbox. BOSH Director includes this CA in the trust store of every VM that it deploys.

    Important: If you are using Ops Manager to generate certificates for either a load balancer or router, then you must select this checkbox.

  4. To clear the default trusted certificates from all BOSH-deployed Linux VMs, select the Clear the Default Trusted Certificates Store checkbox. You must provide your own trusted certificates when selecting this checkbox as all TLS communication fails without trusted certificates available.

    Note: This option is available in Ops Manager v2.10.21 and later.

  5. Choose Generate passwords or Use default BOSH password. VMware recommends that you use the Generate passwords option for greater security.

  6. Click Save. To view your saved BOSH Director password, click the Credentials tab.

Step 9: BOSH DNS Config Page

The BOSH DNS Config pane allows you to configure DNS for BOSH Director by adding excluded recursors, a recursor timeout, and handlers.

The fields in the BOSH DNS Config pane are:

  • Excluded Recursors: Exclude recursor addresses, which are URL redirects, so that they are not contacted by the BOSH DNS server. For more information about how the BOSH DNS release selects recursors, see Recursors in Native DNS Support in the BOSH documentation.

  • Recursor Timeout: Specify a timeout for the BOSH DNS server to contact any connected recursor addresses. The time limit includes dialing, writing, and reading from the recursor. If any of these actions exceeds the time limit, the action fails.

  • Handlers: Specify recursor addresses that apply to specific domains. For example, you can use handlers to forward all requests to a domain to a private DNS for resolution. For more information about using handlers, see Additional Handlers in Native DNS Support in the BOSH documentation.

To add excluded recursors, a recursor timeout, or handlers to the BOSH DNS release:

  1. Select BOSH DNS Config.

    alt-text=""

  2. (Optional) In Excluded Recursors, enter a list of prohibited recursor addresses.

  3. (Optional) In Recursor Timeout, enter a time limit for contacting the connected recursors.

    Note: This time limit must include one of the Go parse duration time units. For example, entering 5s sets the timeout limit to five seconds. For more information about supported time units, see func ParseDuration in the Go Programming Language documentation.

  4. (Optional) In Handlers, enter an array of custom domain handlers in JSON format. For example:

    [
      {
        "cache": {
          "enabled": true
        },
        "domain": "example.com",
        "source": {
          "type": "http",
          "url": "http://example.endpoint.local"
        }
      }
    ]
    
  5. Click Save.

Step 10: Syslog Page

  1. Select Syslog.

  2. (Optional) Select Yes to send BOSH Director system logs to a remote server.

  3. Enter the IP address or DNS name for the remote server in Address.

  4. Enter the port number that the remote server listens on in Port.

  5. Select TCP or UDP from the Transport Protocol dropdown. This selection determines which transport protocol is used to send the logs to the remote server.

  6. (Optional) Select the Enable TLS checkbox to send encrypted logs to remote server with TLS. After you select the checkbox:

    1. Enter either the name or SHA1 fingerprint of the remote peer in Permitted Peer.
    2. Enter the SSL certificate for the remote server in SSL Certificate.

    Note: VMware strongly recommends that you enable TLS encryption when you are forwarding logs. Logs can contain sensitive information, such as cloud provider credentials.

  7. (Optional) Enter an integer in Queue Size. This value specifies the number of log messages held in the buffer. The default value is 100,000.

  8. (Optional) Select the checkbox to Forward Debug Logs to an external source. This option is deselected by default. If you select it, you may generate a large amount of log data.

  9. (Optional) Enter configuration details for rsyslog in the Custom rsyslog Configuration field. This field requires the rainerscript syntax.

  10. Click Save.

Step 11: Resource Config Page

  1. Select Resource Config.

    alt-text=""

  2. Adjust any values as necessary for your deployment, such as increasing the persistent disk size. Select Automatic from the dropdown to provision the amount of persistent disk predefined by the job. If the persistent disk field reads None, the job does not require persistent disk space. The editable values for each job are:

    • INSTANCES
    • VM TYPE
    • PERSISTENT DISK TYPE

    Note: For the BOSH Director job, select a VM type with at least 8 GB memory.

    Note: If you set a field to Automatic and the recommended resource allocation changes in a future version, Ops Manager automatically uses the updated recommended allocation.

  3. (Optional) To define floating IP addresses for the BOSH Director job:

    1. Select the icon next to the BOSH Director job name to see the FLOATING IPs field.
    2. Enter a floating IP address range under FLOATING IPs. The number of IP addresses in the range that you provide must match the number of job instances.
  4. Click Save.

Step 12: (Optional) Add Custom VM Extensions

Use the Ops Manager API to add custom properties to your VMs such as associated security groups and load balancers. For more information, see Managing Custom VM Extensions.

Step 13: Complete BOSH Director Installation

  1. Click the Ops Manager Installation Dashboard link to return to the Installation Dashboard.

  2. Click Review Pending Changes, then Apply Changes. If the following ICMP error message appears, click Ignore errors and start the install. The errors you can ignore are:

    • Cannot reach gateway with IP 10.0.16.0 (Ignorable if CMP is deactivated)
    • Cannot reach DNS with IP 10.0.0.2 (Ignorable if CMP is deactivated)

      alt-text=""

  3. BOSH Director installation begins. When the installation process is complete, a Changes Applied message appears.

    alt-text=""

  4. After you complete this procedure, follow the instructions in Configuring TAS for VMs.

Next Steps

Return to Installing Ops Manager on OpenStack.

check-circle-line exclamation-circle-line close-line
Scroll to top icon