Attach a Tanzu Application Service foundation as a VMware Tanzu Platform hub data source

If you have one or more Tanzu Application Service (TAS) foundations, you can attach them to VMware Tanzu Platform hub as data sources. Doing so allows you to view your TAS foundation alongside other resources in your Tanzu Platform hub-managed infrastructure.

Attaching a successful TAS foundation requires the following steps:

Download and install the Tanzu Platform hub collector tile in Tanzu Operations Manager.
Collect data from the BOSH Director VM by creating new UAA client credentials.
Create a TAS Foundation collector in Tanzu Platform hub, then enter the provided credentials in the Tanzu Platform hub collector on Tanzu Operations Manager to establish a connection between the Tanzu Platform hub Collector tile and Tanzu Platform hub.

While you can perform some of these actions in a different order, this guide is constructed to take you through all available configuration steps in Tanzu Operations Manager before creating a TAS Foundation collector in Tanzu Platform hub.

Note
Each Tanzu Platform hub collector-TAS Foundation collector pair can support one TAS foundation. If you have multiple TAS Foundations, you must add and configure a TAS-Hub collector per foundation.

Before you begin

TAS must be installed.
Tanzu Operations Manager must be deployed in an environment of your choice.
The BOSH Director tile must be fully configured in Tanzu Operations Manager.
The Tanzu Operations Manager CLI must be installed if you plan to attach a TAS foundation through the CLI rather than the Tanzu Operations Manager interface.
For application management in Tanzu Platform, you must configure your Spring applications with actuator and micrometer libraries. See Configure your Spring applications for application management in Tanzu Platform.

Install the Tanzu Platform hub collector in Tanzu Operations Manager

Follow these instructions to install the Tanzu Platform hub collector tile in the Tanzu Operations Manager Installation Dashboard.

Navigate to the Tanzu Platform hub page on VMware Tanzu Network.
From the Releases dropdown, select the version of the tile you want to install.
Click the name of the tile you want to install to download the .pivotal file for the tile.
Navigate to the Tanzu Operations Manager Installation Dashboard.
Click Import a Product.
Select the .pivotal file that you downloaded from VMware Tanzu Network.
Click Open. If the tile is successfully uploaded, it appears in the product list beneath the Import a Product button.
Once the upload is complete, click the + icon next to the tile listing to add the tile to your staging area.
Click the Tanzu Hub Collector tile.
Under Place singleton jobs in AZ, select the first AZ. Tanzu Operations Manager runs any job with a single instance in this AZ.
Under Balance other jobs in AZs, select one or more other AZs. Tanzu Operations Manager balances instances of jobs with more than one instance across the AZs that you specify.
From the Network dropdown, select the runtime network that you created when configuring the BOSH Director tile.
Click Save.

For more information, see the Tanzu Operations Manager documentation.

Create a UAA Client for the Tanzu Platform hub collector in Tanzu Operations Manager

The Tanzu Platform hub collector works by accessing the BOSH director VM and viewing information about deployments, then exporting that information to Tanzu Platform hub. This requires creating a new UAA client for the Tanzu Platform hub collector, the details for which differ depending on the authentication settings of your Tanzu Operations Manager to deployment.

To begin, select an authentication method and follow the instructions.

Local

If your Tanzu Operations Manager deployment uses internal authentication:

From the Tanzu Operations Manager Installation Dashboard, click the BOSH Director tile.
Select the Status tab.
Record the IP address in the IPs column of the BOSH Director row.
Select the Credentials tab.
In the Bosh Commandline Credentials row of the BOSH Director section, click Link to Credential.
Record the values for BOSH_CLIENT and BOSH_CLIENT_SECRET. Use these to log in to the UAA client in a later step.

For more information about internal authentication settings for your Tanzu Operations Manager deployment, see the Tanzu Operations Manager documentation.

SAML

If your Tanzu Operations Manager deployment uses SAML authentication:

Click the user account menu in the upper-right corner of the Tanzu Operations Manager Installation Dashboard.
Click Settings .
Select SAML Settings.
Click the Provision an Admin Client in the BOSH UAA checkbox.
Click Enable SAML Authentication.
Return to the Tanzu Operations Manager Installation Dashboard.
Click the BOSH Director tile.
Select the Status tab.
Record the IP address in the IPs column of the BOSH Director row.
Select the Credentials tab.
In the Uaa Bosh Client Credentials row of the BOSH Director section, click Link to Credential.
Record the value of password. This value is the secret for Uaa Bosh Client Credentials.

For more information about SAML authentication settings for your Tanzu Operations deployment, see the Tanzu Operations Manager documentation

LDAP

If your Tanzu Operations Manager deployment uses LDAP authentication:

Click the user account menu in the upper-right corner of the Tanzu Operations Manager Installation Dashboard.
Click Settings .
Select LDAP Settings.
Click the Provision an Admin Client in the BOSH UAA checkbox.
Click Enable LDAP Authentication.
Return to the Tanzu Operations Manager Installation Dashboard.
Click the BOSH Director tile.
Select the Status tab.
Record the IP address in the IPs column of the BOSH Director row.
Select the Credentials tab.
In the Uaa Bosh Client Credentials row of the BOSH Director section, click Link to Credential.
Record the value of password. This value is the secret for Uaa Bosh Client Credentials.

For more information about LDAP authentication settings for your Tanzu Operations deployment, see the Tanzu Operations Manager documentation

Once you have the credentials for your authentication method, you can connect to the Tanzu Operations Manager VM:

Establish an SSH connection with the Tanzu Operations Manager VM by following the procedure in the Tanzu Operations Manager documentation.
Target the UAA instance for the BOSH Director by running:
```
uaac target https://BOSH-DIRECTOR-IP:8443
```
Where BOSH-DIRECTOR-IP is the IP address for the BOSH Director VM that you recorded from the Status tab in the BOSH Director tile in a previous step.
Log in to the UAA instance by running:
```
uaac token client get
```
When prompted, enter the credentials you recorded in the previous step for client and secret.

Create a UAA client for the Tanzu Platform hub collector by running:

uaac client add hub-tas-collector \
 --secret 'CLIENT-SECRET' \
 --authorized_grant_types client_credentials,refresh_token \
 --authorities bosh.read \
 --scope bosh.read

Where:

CLIENT-SECRET is the secret you want to set for the UAA client.

Return to the Tanzu Operations Manager Installation Dashboard.
Click the Tanzu Hub Collector tile.
Click Collector Configuration.
For BOSH UAA client credentials, enter hub-tas-collector for the username and the secret for the UAA client you just created.
If your deployment of Tanzu Operations Manager uses a self-signed certification, click the Skip TLS Verification when Querying Ops Manager API checkbox. Otherwise you can leave it blank.
For Link TAS Entities to IAAS Entity Collection, click Disable.
For Log level, enter info.
Click Save.

Create a TAS Foundation collector in Tanzu Platform hub

With the Tanzu Platform hub collector in Tanzu Operations Manager mostly configured, you must also create TAS Foundation collector in Tanzu Platform hub. The process is similar to attaching a Kubernetes cluster.

In Tanzu Platform hub, select Setup & Configure > Foundation Collectors.
Click Add New.
Enter a name for your foundation. It’s a best practice use the same name as your Tanzu Operations Manager.
Click Next.
Select a method for configuring the TAS foundation collector.
Tanzu Operations Manager
Select the Configuration details for Tanzu Operations Manager option to configure the collector through the Tanzu Operations Manager interface.
1. Copy all the configuration details to a text file as a back-up during this procedure.
2. Log in to Tanzu Operations Manager while keeping the Tanzu Platform hub page open.
3. From Tanzu Operations Manager, select the tile for your Tanzu Platform hub collector.
4. Click Collector Configuration.
5. Enter the configuration details copied from Tanzu Platform hub in the matching fields for Tanzu Operations Manager.
6. Click Save.
7. From the Tanzu Operations Manager Installation Dashboard, click Review Pending Changes.
8. Click Apply Changes.
9. Return to Tanzu Platform hub and click Complete.
OM-cli
Select the OM-cli using YAML file option if you want to configure the collector on a command line interface.
1. Download the provided YAML file and rename it to your preference.
2. Open your preferred CLI shell on an environment where the Tanzu Operations Manager CLI is installed.
3. Upload the YAML file to the host, then run this command to configure the collector:
  
  $ om configure-product -c <filename>.yaml
4. Go back to the Tanzu Platform hub page and click Complete.

Once configuration is complete, you should see your TAS foundation listed with a Pending status. It may take up to 20 minutes for Tanzu Operations Manager and Tanzu Platform hub to begin communicating, at which point the status should change to Ready.

You can view your TAS Foundation by going to Infrastructure > Search in Tanzu Platform hub and entering a search query for Tanzu.TAS.Foundation.