Transcription
Hi everybody, Stephen here. In this video, I'm going to cover how do we set up a new workload domain inside VMware Cloud Foundation version 9. It'll actually be our first workload domain that we're going to spin up. So, you want to stick around for that. See you in a bit.
[Music]
Thanks for sticking around. So, in this video, we're going to cover how do we set up uh a new workload domain inside our VMware Cloud Foundation version 9 environment. So, right now, I got my management domain up and running. I want to deploy my very first workload domain. There's a couple things we need to be aware of, right? So, uh we'll cover it from uh commissioning our host to setting up our network pools right up to deploying the workload domain.
Anyways, before we begin, I always like to throw this out there for those of you that subscribe to the channel. Thanks very much. 10 thumbs up to you folks. I really appreciate it. I know I only did two there, but anyways, really appreciate it. For those of you that again um did super thanks, I get 20 thumbs up to you folks, you know, I really appreciate that as well. Uh but again, if you want to support the channel, uh please click on that subscribe button. That's one way to support the channel. It's totally free. Um and also supporting the channel, you can share the videos. That also supports the channel, leaving comments and questions down below. Okay. Um, I also got super thanks enabled. That's another way to help out with the channel anyways. Uh, but that's totally up to you. So, why don't we get started?
Okay. So, let's get rocking and rolling here. So, I'm logged into my um VCF ops. Right. If I go to inventory here, you'll see uh under u right now I'm looking at detailed view. So, let me click on detailed view. Uh you'll see my VCF instance called my VCF. I don't have much of imagination. There's my workload domain. That's all I have. Okay.
Now, I kind of wish now I could do all of this. Commission a host, create network pools, and um create my workload domain all through the SDC manager. I could do that. That was available back in version five, right? VMware wants you to start getting used to doing it using the new tools, right? So, right now, for me to commission hosts, I go into the management domains um vsenter server. I kind of wish I could do it through VCF ops. I'm hoping that's an option instead of me having to jump back and forth between the interfaces.
So anyways, let's go to here. Let's I'm on my VSCenter server in my management domain. I'm going to go to global inventory. I'm going to go to hosts. And under here, you can see a side host. I've got four hosts in my management domain. Great. Under unassigned, there's nothing there. Okay. Right now, when I click on this tab, it's actually reaching out to the SDC manager to pull in this information. When I click on network pool, again, it's doing the same. Now I already have a network pool here. If I open this up, you'll see uh my management domain is using this because I called it management domain network pool. And you actually see there's the subnet for VSAN. There's a subnet for Votion. Uh right now I actually I'm using four IPs. Remember I said my management domain has four hosts. Well, it's using four and there's five left over. So I actually put in a pool larger than I needed.
Now technically speaking, you you'll probably create a new network pool for your workload domain. So, I would click on this, say, okay, I'm using VMotion. That's always going to be selected. So, you got to put in your Votion uh um VLAN ID, the MTU size, you know, again, 9,000. Hopefully, you got that set up. Uh what subnet am I using for my votion? Whatever. I just picked this one. Uh what um what sorry, that's the network. What subnet mask and what's the default gateway? Let's say I'm just putting some sample ones here. Then you would specify the range, right? Uh in this example here, this is from a classroom that I ran recently. Let's say I don't know 10 to 172.20.8 whatever 20. I put too many dots here. And then you would add in that range. Okay.
Um now you have to ask yourself what kind of storage is my servers are going to be commissioned using. In my example, I'm going to using VSAN. Okay. So the VSAN's going to need its network information. If I wasn't using VSAD, I could use NFS or ICE scuzzi or whatever the case may be. It would need its information as well. VSAN storage client again. Uh this comes back to like VSAN max so to speak. U anyways we're just using VSAN. Um so this is what I would do probably in the real world. I would probably have separate VMotion network, separate VSAN networks for my workload domain. I don't I'm going to cancel this. I'm going to use my existing pool. Okay.
Uh let's go to uh unassigned host. Let's go to commission host. And then there's a laundry list of stuff you need to read through. I'm not going to read through the main thing here. But look, all disk partitions must be there should be no disc partitions on on the disk, especially if you're using VSAN. Host name should have fully qualified domain name. The management IP is configured in the first net port. Again, they go through a laundry list of stuff for you to check. So, you should read that through. So, I'm I'm going to ignore it. I'm going to go next.
Now it's asking me for the fully qualified domain name. Am I going to add in a new host or import? Let's say add first. So my first host will be sa-sex-5.vclass.edu. Now it's asking what type of storage. So mine's going to be VSAN. Okay. But is it going to be NFS that's supported or VMFS on fiber channel or if you're using virtual volumes? Virtual volumes is being deprecated um after I hear 9.1. So watch out for that. We'll see what happens in the future. Stuff stuff could always change. You never know. But anyways, that's what I heard. That's what's been written. Um, if you're using, let's say, if you've got fiber channel in your environment and uh you're going to be using that, your hosts that you're commissioning must have their fiber channel adapters installed. They must be connected to your fiber channel storage and they must have that L, whatever LUNs have been assigned to those hosts. They must be formatted with the VMFS file system. Okay? All that has to be done before you even get to here. Same kind of thing with NFS. NFS, you'd have to have your hosts set up for NFS and the NFS share mounted already. Okay. On each host, I'm going to cheat. I'm using VSAN.
Now, I'm going to use VSAN HCI and I'm not going to use Express Storage architecture. I'm in a nested environment and it complains when I select that. Am I using VSAN storage? That would be VSAN Max or compute cluster type of thing. I'm just using regular VSAN HCI. Perhaps I'll do some videos on these down the road. Um, now the network pool. Again, you would create your network pool as I mentioned, but I'm going to use my existing one because that's okay for me. And there's nothing wrong with you doing that, by the way. Now, put in my uh a root user for the ESX host. Notice it's ESX, not ESXi. As of version 9, it's no longer called ESXi. It's called ESX. Anyways, uh I'll click add and we're done.
Now, I could add in my other host. Suppose if I had to add in 20 hosts here, that could be a long time you me type it in. You can import. I could click on this JSON file and I could download it. Inside the JSON file, I could specify all my host names. You basically replace everything within the brackets here. Okay, the fully quantified domain name, the username, uh storage type, passwords, the network pool, and the storage protocol. Okay, and you would just have entries for your 20 servers here. Then you can import it. It would be a lot faster. I'm only doing three, so I'm not going to worry about that. Let me uh let me pick that one again. Let's uh sorry, let's get rid of the I. Let's make this six and this is edu. And I'm doing VSAD. I'm not doing express. There's my network pool. There's my user root. I'll add that. Come on. Did I type in that password right? I guess I did. And then the the last one will be let's pick um that we'll change it to seven. So I'm doing host five, six and seven. No express storage route and then the password add. So now I've got my now I got my three servers here. Okay.
Now notice over here I got to confirm the thumbrints. Okay. So here's the thumbrints. It's found on the servers. want to confirm that, you can go into the direct console user interface on the servers. A bunch of ways to do it. That's probably the easiest way, but you want to make sure, yeah, that is this server. There's nobody, no bad actor trying to intimidate or or imitate that, right? I know it is. I'm going to say confirm fingerprints. And then I'm going to say validate all. And it's going to go out and validate all these servers. Okay. Uh it's going to check the VSAN hardware compatibility list. Again, if I had selected Express Storage Architecture, it fails on my nested hosts here. I know there's probably ways around it, but I'm too lazy. This is just a demo. I'll be tearing it apart. So, u there we go. So, it's done, right? I'm going to click next.
Um, and then at this point, I'm going to say commission hosts. Now, what it's doing now, it's going to add these hosts into VSER. Let's open up the task part here. And let's just give it a few sec. You actually see it commissioning host. So, this is going out to uh the SDDDC manager commission host. This could take a few minutes. So, what I'm going to do is I'm going to stop my recording and we'll come back when it's done, right? Hey, by the way, if you haven't subscribed to the channel, please consider supporting the channel by subscribing. Without subscribers, there's no content developers and it's totally free. Hit that subscribe button. You're done. Okay, we'll see you back in a few minutes.
Okay, we're back. That took about three minutes or so for it to commission. So, you see unassigned host. You see over here, I got my five host, right? Great. So, I'm done. I create my network pool within the vsenter in the management domain. I then commission my host. I'm ready to rock and roll. So this is the part that I kind. So now I got to exit from here and go into VCF operations. Right from there you have to go into inventory and you got to be in the let me let me go back to you got to be in the the detailed view. This is the basic view. You got to click on detailed view. Click your um your um your VCF instance. In that point we get add workload domain. Okay. So, you got to watch for that. It's kind of sort of hidden, right? So, add workload domain.
When I click on that, it's going to say create a new one or import. I'll talk about importing uh vsenter. Uh I'll probably do a separate video on that. That could be like for upgrading to VCF. Uh sorry, that would be for like conversion to VCF or sorry, let me just say, let me back up. That would be for importing in uh an existing Vsere environment into a workload domain. I'll do a video on that sometime down the road. Uh let's create new. So we're creating a new workload domain, right? Um so again it comes up here. It tells you make sure your life cycle manager cluster is all set up. A host must be commissioned with the principal storage. So I commissioned mine with VSAN express storage architecture. If I'm trying to create a workload domain that's using VSAN uh I sorry I commissioned it using original storage architecture. If I tried to create a workload domain using VSAN Express, it would come up with an error. Right? If you're using Valls, you have to have your Vasa provider installed. If you're using VSAN, you must have s uh you must have disc with no partitions on it. And then they talk about network requirements here for pool and all that stuff. So you folks can read that on your own. I'm going to hit proceed.
Now again, here's all the screens that we're going to go through here, right? Uh so what's the name of the workload domain? I'm going to call mine WLD0-01. I don't have much of imagination. Workload domain 01. Enable vsspere supervisor. Now notice over here, step nine talks about vSphere supervisor. I'm going to remove that. Watch what happens to step nine. It's gone. It's now review, right? So see, we used to have 10 steps. Now we only have nine. Uh this basically enables a supervisor cluster. This is for like Kubernetes and stuff. Perhaps I'm going to do a video on that down the road, but that could also be done after the fact. I'm going to leave this alone.
Now, um a single sign on domain. We do no longer support um enhanced link mode. Okay. So, uh you're going to give it a single sign on domain here and uh I'll call mybs.local and um autogenerate passwords newly installed appliances. Uh you could do this and at the end you could actually download the password list if you want to. Or you can just type them in. Right. So, uh I'm going to type them in. And again, I don't care if you see the password. This is going to get blown away after this is done. Sorry. Come on. So, I'm going to cheat here. I'm going to copy. If you're going to do what I'm doing here, you better make sure you type that password. Right. Right. Uh, I'm going to go next.
Now, it's asking me my Vsenter server. What's the fully qualified domain name? Remember, we're creating a workload domain. It's going to spin up a new Vsenter server. Okay. And that Vsenter server is going to run. It's going to be a VM running in my management domain. So, you got to have enough resources there. So, mine's going to be uh site A vsenter server appliance 01b.vclass. vclass.edu. And I like this here, show IP configuration. I click on that. It's actually telling me, yeah, you got your your DNS all set up, which I really like. Um, then I'll put in my root password. Okay. And then I'll go next.
What's the name of the cluster going to call there? Um, maybe I'll call it, you know, workload domain-1, cluster 01, whatever. Okay. Actually, let's get rid of the dashes on that one. workload domain 01- CL1 cluster one crow what image remember I said you had to be using light cycle manager so where to get this from it got it from the management domain so when I spun up my management domain it looked and said hey you got these ESX9 host with this build I'm going to make an image and use that so great u if I don't if I have multiple images maybe down the road when we get newer versions and stuff you can pick from that but yeah I'm going to pick that one that's good
NSX manager do I want to do a standard deployment or a high availability deployment. High availability is going to deploy three of them. Standard's going to deploy one. In production, I highly recommend you deploy three. Three, sorry. Um, okay. And I talk about that in my NSX classes. Okay. So, you can see my videos on that. What's the size of the appliance? Uh, medium, large, or extra large. There's no small, small for proof of concept. So, um, this is going to depend on how many hosts you're going to have running in this workload domain. Now, this is my first workload domain I'm setting up. It cannot share the NSX manager of the management domain. It has to have its own. Now, if I spin up a second workload domain, I could opt for it to share this first workload domain's NSX manager. So you got to ask yourself, how many ESXi hosts or transport nodes is this NSX manager going to be managing? And that kind of dictates the size of this. So medium is basically up to 128 hosts. Large is anything more than that. That type of thing. So I'm going to go with medium.
What's the fully qualified domain name of this appliance? Remember, if I said high availability, I'm going to enter three appliance names. So my first one's called uh site A NSX Manager-1B. And then it's IP address. No, I just clicked there and it actually went and checked for the address. So that's good. I got forward or reverse lookups going. Now what's the name of the virtual IP? So this is a clustered virtual IP. I talk about it my NSX classes or my videos. You watch this. So this is going to be called site a NSX manager-blass.edu. Let me just click there. And then boom, it found. So that means my DNS is set up. Great. what password for the admin and and auditor. I'm going to type in or paste in those ones I had before.
And and then it's asking me how do I want to set up my VPCs. Now, uh I did a video just recently on VPCs. This is asking me how do I want to set up my transit gateways? Do I want to set up central connectivity or distributed? When I say distributed, it's going to ask me for VLAN and all this other stuff. You don't have to worry about configuring this right now. You go, what the heck is this? just pick centralize and it says it can be configured later. Okay. Watch my video on VPCs with VCF9. Uh so I'm just going to pick centralize and it basically says do it later. Deal with it later. If you're not sure, just pick that. I'm going to go next.
Now it's asking me my storage. I'm going to pick VSAN. Uh and then notice here I can say okay, it's going to be I'm I'm going to deselect express storage architecture because that's what my hosts my hosts are using the original. or if it's NFS or fiber channel. I talked about that. So, you got to pick the appropriate storage here. Um, if I picked this right now, let's go next. And then it'll be VSAN HCI, right? And not VSAN storage cluster or VSAN max. If I go next, I'm going to get a problem here. There's no suitable host found. Okay, there's no unavailable host. Let's back up. Back up. I'm going to go not express storage architecture. Next, notice a little it's a little different here. It's asking me what's your what's your default failure to tolerate. This is original storage architecture. I'm going to leave the failure to tolerate at one. Uh space efficiency. Do I want to enable ddup and compression? This is something you want to think about, especially with the original storage architecture in VSAN. If you go, I'm not going to worry about it right now, but I'll do it later. It has to basically reformat all the drives. That could be a bit of a problem. So, if you want to, if you're even thinking about doing this later, do it now. Okay, I don't care. I'm blowing away my environment after this. Uh, I'm going to go next.
Notice here it says it requires three hosts. Uh, I should have probably mentioned this for a workload domains. If you're doing VSAN, you need at least three hosts. Uh, for fiber channel and NFS, you could get away with two. But anyways, let's go next. Now, you see over here, it founds my uncommissioned host. I'm going to pick all of them. And we let it churn away there. Notice I got like four drives here. It's got four network cards. You can kind of see that in the column. Great. I'm going to go next.
This is the fun part. This is asking you how do you want to set up your distributed switch. The default is creates one distributed switch and it says I'm going to put your management traffic, votion, VSAN and NSX traffic across that one distributed switch with your four nicks or two nicks or whatever you have. Or you could pick this one. Say uh storage separation. Uh I want to have my um my VSAN on a separate distributed switch with separate nicks and everything else goes on that first distributed switch. Even NSX or this one here. I know I want um everything on the first distributed switch including VSAN, but NSX will be on its own with its tap. So you can pick and choose these. Obviously, if you only got two nicks, you're only going to get this choice here. Default. You won't get this here. You could also go uh create custom. I like this as well. Uh if I go to uh view details, is here. Hi details. Okay. No, it's not there. Um create custom switch. I thought there was unless I'm missing something in the graphics here. Let's pick uh I'm going to now I can go custom. Let's create custom here. And I could go in custom and I could create my own distributed switch. Give it a name, the MTU sizes, uh, and then specify the network traffic if I want to. I didn't specify all these, right? Uh, so you can do that. Let's go back to uh, cancel switch configuration. Uh, I could say, well, I want to do custom, but I kind of like I I kind of like the NSX traffic separation. I'll copy that, then I'll modify it from there. Okay, I only got four nicks. It's not letting me create another distributed switch. If I had six, it would let me do that. So, you can go in and modify that. Uh, I'm going uh uh let's let me actually show you something. Let me uh change my selection. Let's go back to NSX traffic. So, I'm going to pick that. I'm going to put my NSX on a separate switch. That's just me. Okay. Uh now, notice over here it says, hey, we need a transport VLAN. Uh, so, I'm going to click on edit. So, it's asking me for a VLAN number. Why? Well, remember I we had our network pool for VSAN and for management and sorry for VSAN and VM motion and I provided my VLANs there. Why is it asking me about this? Well, it didn't ask me about NSX. So, it needs to set up the network for the NSX tunnel endpoints, the taps. If you don't know what taps are, you need to watch my NSX videos. Um, so in here again, it's showing me this is the name of the transport zone it's going to create. Then it's saying this is the name of the VLAN or the VLAN it's going to use for the taps. And notice tap IP assignment. It's only DHCP. I don't want that. I want to I want to go manual or whatever, right? I want to do from a network pool. It's not let me do that. This is kind of the little quirk that I noticed. I'm going to cancel this. I'm going to go back to switch configuration. I'm going to change my selection. I'm going to go into create a custom. I'm going copy from NSX and then at this point it's telling me I got to set up the VLAN. Now I'll go edit there. I'll scroll down. I'll put in my VLAN. I'm going to put in VLAN 12 here. And then tap assignment still DHP. So what's going on down here? There's an edit button. I'll click on that. Now it lets me actually go in and create a pool. So uh let me go back put my VLAN in. I'm going to say a static pool. Going to create a pool. I'll call my pool workload domain 02 vtap pool. whatever description you want. Uh what's the cider for the pool? Mine's 17220 network. What IP range? I'll do 17220 uh 12 uh 111 to whatever 100 depends on the number of hosts you're going to have. We want to plan for growth and then my uh my um my gateway for that for that tab. Okay, so that's kind of um and then you can also do you specify your uplinks here, number of up links. Uh right now it's low balance based on source that type of stuff. Okay, I talk about that in our network profiles and NSAX. Right, I'm going to save this configuration and I'm pretty much at the end here right now. Right, come on. We just save that. And there we go. And uh okay, uh settings are applied. Okay, great. Save configuration. I got to acknowledge this. And then at this point, I'm ready to rock and roll. I'm going to click on next.
So, a few extra steps there. Again, if you if you want to be get a little bit more fancy, right? Uh it gives me the review here. I advise that you read through this. Okay. Um and then you hit finish. Now, at this point, it's going to do a validation. So, it's going to validate the environment. Give it a few seconds. It should kick in. It's validated environment. Actually, sorry. It should have validated environment, but now it's actually deployed. So, if I click on view SDC manager task, I'm still inside VCF operations here, right? So, it's actually a fetching subtask. Give it a few seconds here, folks. Uh, let me just refresh. This might take uh almost a minute or so. Um, and uh we'll just see what's kind of going on here. And then you can view the task like you would normally, let's let's say with an SDC manager. I could actually go into the SDC manager right now and view the task if I want to. So, let me hit there we go. creating workload domain. So when I click on that there at this point you see all the different tasks that are already run. These are workflows. I can click on this here. So there's a whole whackload of pending tasks. Um so what's this doing? It's going to um basically um deploy vsenter server. It's going to set up your my three hosts as like VSAN cluster. Get all that stuff up. Um then it's going to basically deploy NSX manager. It's got to prepare the host. It's a fair amount of stuff that's actually doing here, right? Um, generally speaking, this is going to depend on how fast your environment is. Uh, normally mine takes anywhere from an hour and a half to two hours. I suggest that you don't sit here and watch this screen, right? So, that's basically it. We're just going to let this run. I'm going to come back maybe in a few hours or tomorrow morning and and check it out. Okay. Uh, and at that point, uh, our workload domain should be deployed. So, uh, I'm going to pause or I'm going to stop the recording right now. We'll come back when it's all done. And um again, if you haven't already subscribed to the channel, consider subscribing to the channel. We'll see us back when this is all done.
Okay, so we are back. Um, to be honest with you, it's the next day. I just let it run overnight. It it took just a couple hours, right? So you can see creating workload domain. It was successful, right? Uh, it's perfect. Uh, so what else we got to do right now with it? Um, uh, if you uh, what I would do at this point um, if you have identity broker set up which you may have you'll want to set that up your configure the components for your workload domains there. So let's go into identity and access. I've got a video covering the identity broker. I got two videos the embedded and the regular one. Um, so if I go into identity access VCF instances my VCF um, you actually see my identity source is the identity broker I using the embedded. If you're not sure what that is, watch my videos. If I go to component configuration, you'll see that my uh you'll see there's two components here not configured. My my VSCenter server for the workload domain, that's not configured. And my NSX manager for the workload domain, that's not configured. So, if you want to be able to use the same identity broker across workload domains, you would have to configure that. So, I would say okay, let me select it and then say configure component. And it's basically going to say, "Okay, you know what? Go ahead, configure the component for the identity broker." That'll take a few minutes. Once you've done that, I'm not going to demo this. I I show it in my in my identity broker video. Once you've done that, you want to go into each of those components into Vsenter into NSX and assign the appropriate permissions to your, let's say, your AD user, let's say. And I demoed all that in that identity broker video. Uh, the other thing, I'll probably just let that spin for a bit. It will probably finish shortly. Uh, oh yeah, I think it just finished. I was Yeah. So, there we go. It's all done. Great.
The other thing you would do is set up licensing. So, you would go over here to licensing. And I can't really Oh, I'm sorry. That's life cycle. License management. Uh, you go licensing. You would sign your licenses. I got no licenses, so I can't show you that. I don't have any yet. We'll see what happens in the future. So, that's another thing, too. you would have to license out uh your appropriate workload demand because right now I would have a 90-day eval.
That's basically it. I hope you enjoyed the video. Uh, leave your comments and questions down below. Uh, if you got any suggestions on stuff that you want me to see me cover, please, you know, leave it in the comments down below. U I'll see what I can do. I got more videos coming up and I got more classes I'm actually teaching very soon. So, uh, we'll see you in the next one. Bye for now.