Tales from CICD for vR Suite Daniele Ulrich dd/mm/yyyy Tales from CICD for vR Suite Daniele Ulrich June 9, 2017

Enterprise Cloud – High Level Architecture Swisscom Portal IAM (Identity federation) One IDB (OpenAM) IDP1 IDP2 09.06.2017 Security Proxy Layer vROperations (Monitoring, Metering) vRealize Automation (Tenants, Catalogue, Services, Automation) Multi-Tenancy with single instance CRM/Billing ITSM (BMC Remedy) NDS DWH Logging (vR Log Insight, Splunk) vRealize Orchestration (Orchestration, Workflows, BPO) Billing Records ITSM Sync Tales from CICD for vRA Standard Workflows BPO Impact Mgmt … vSphere and NSX (Hypervisor, Network virtualization) Brokerage Endpoints AWS Azure Supporting Services NTP DNS IPAM … Infrastructure (VxBlock, VIPR, Vmax/Vplex, Networker) CICD (Concourse, Houdini, GitHub, Artifactory…)

Domains and Assets for Configuration Management dd/mm/yyyy 09.06.2017 Continuous Security! Tales from CICD for vRA

Checklist Converged Blueprints dd/mm/yyyy Converged Blueprints Software Components (together with scripts and needed binaries) XaaS Resource Actions (day 2 actions for a service!) XaaS Resource Types Property Groups, Definitions and Values (on environment, tenant and businessgroup level) Event Broker Subscriptions Reservation Policies (placement, location, DRS) Storage Policies (quality, placement, location, DRS) vCenter Templates (provider and customer individual!) NSX assets: Networks, NetworkProfiles (IPAM), SecurityTags, SecurityGroups, SecurityPolicies vRO service workflows (i.e for custom forms and XaaS resource actions) vROps settings (not tested, yet) Entitlements (is this possible?) 09.06.2017 Continuous Security! Tales from CICD for vRA

Design Goals Everything as code, versioned in GIT dd/mm/yyyy Everything as code, versioned in GIT A catalog is the desired service provider offering per tenant (tracked in GIT) and consists of services A service is a product category as used in vRA catalog A catalog item is any type of blueprint that can be offered when entitled in vRA A product contains one or more catalog items together with XaaS Resource Actions and other dependencies. Sticking as close as possible to VMware standards Project USB to SDDC A Wish List for Configuration Management with the vRealize Suite Tales from Continuous Integration and Continuous Delivery for VMware vRealize Suite 09.06.2017 Continuous Security! Tales from CICD for vRA

Development Environment Tenant per Squad/Feature 09.06.2017 Tales from CICD for vRA

CICD Concept Continuous Security! dd/mm/yyyy 09.06.2017 Tales from CICD for vRA

Seamless CI/CD over all stages vRO content pipeline dd/mm/yyyy Seamless CI/CD over all stages GIT 2 Concourse.ci Concourse.ci 6 09.06.2017 Master 3 4 5 Branch Topic A Branch Topic B Houdini 7 8 DEV 1 INT PRD Topic A Environment <Development> Topic B Environment <Development> Master Environment <Integration> … Environment <Integration> Environment <Production> Environment <Development> Environment <Development> Portal / API Portal / API Portal / API Portal / API Portal / API Continuous Security! Tales from CICD for vRA Microservice Microservice Microservice Microservice Microservice vRA vRA Templates Blueprints Pipelines Properties vRA Templates Blueprints Pipelines Properties Templates Templates Templates Blueprints Blueprints Blueprints Pipelines Pipelines Pipelines Properties Properties Properties vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins

Seamless CI/CD over all stages vRA content pipeline Seamless CI/CD over all stages GIT 2 Concourse.ci Concourse.ci 6 09.06.2017 Master 3 4 5 Branch Topic A Branch Topic B Houdini 7 8 DEV 1 INT PRD Topic A Environment <Development> Topic B Environment <Development> Master Environment <Integration> Environment <Integration> Environment <Production> Environment <Development> Environment <Development> Portal / API Portal / API Portal / API Portal / API Portal / API Tales from CICD for vRA Microservice Microservice Microservice Microservice Microservice vRA vRA Templates Blueprints Pipelines Properties vRA Templates Blueprints Pipelines Properties Templates Templates Templates … Blueprints Blueprints Blueprints Pipelines Pipelines Pipelines Properties Properties Properties vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins

AppCloud components pipeline Seamless CI/CD over all stages GIT 2 Concourse.ci Concourse.ci 6 7 09.06.2017 Master 3 5 4 Branch Topic A Branch Topic B DEV 1 INT PRD Topic A Environment <Development> Topic B Environment <Development> Master Environment <Integration> Environment <Integration> Environment <Production> Environment <Development> Environment <Development> cloud native Portal / API Portal / API Portal / API Portal / API Portal / API Tales from CICD for vRA Microservice Microservice Microservice Microservice Microservice vRA vRA Templates Blueprints Pipelines Properties vRA Templates Blueprints Pipelines Properties Templates Templates Templates Blueprints Blueprints … Blueprints Pipelines Pipelines Pipelines Properties Properties Properties vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins vRO Workflows Plugins

Pipelining 09.06.2017 Tales from CICD for vRA

VPN Access: it is not this easy to access the content server dd/mm/yyyy 09.06.2017 VPN Access: it is not this easy to access the content server Tales from CICD for vRA

dd/mm/yyyy Thank you! daniele.ulrich@swisscom.com @DanieleUlrich https://ict.swisscom.ch/author/daniele-ulrich/

We are hiring! Strong systems engineering & operations experience Experience with vROps/vRLI, logging/monitoring in general Automation experience (Concourse, Puppet, etc.) Interested? Send email to diego.zamboni@swisscom.com