Design

The purpose of this blog post is to describe the NSX Container Plugin (NCP) Architecture in detail so that you will have a good understanding of why is it created, what are the components and how it works. With that knowledge, hopefully it will comes in handy when you require to perform troubleshooting when things does not goes well as you expected. NCP Architecture These are the NCP components and its purpose. ...

The last few blog posts I wrote about the installation steps for Openshift Container Platform (OCP) with NSX-T NCP attracted some good interest from the community as well as VMware internal folks. However, those materials were written quite awhile back and some of software used then were not up to date. My customers were also looking at the later versions of software. Lastly, in OCP 3.11, the ansible playbooks for NSX-T NCP integration comes out of the box and therefore makes the integration much simpler. ...

Many of you might not be aware, Openshift Container Platform 3.11 now has native integration with VMware NSX-T! The ansible playbooks for installing NCP and CNI for Openshift has be merged into the official 3.11 deploy-cluster playbooks. If you are interested, you can take a look at the github repo here. Last two weeks, I have been successfully tested this integration with Redhat Openshift with NSX-T in my lab as well as customer environment. ...

Normally for my lab or POC, I will use NSX-T admin and password for integration. However, in a production environment, customer might not accept that and therefore you might need to result to using certificate for API access. In this blog post, I will show you how to create the certificate and key to be used for Openshift Integration.   Step 1: Generate and Register the Certificate and Key Provided below is the create_certificate. ...

Populating the NSGroups via OpsManager The NSGroups we created which will be used as server pool for the NSX-T LB are empty, we need to use OpsManager to populate the entries into the NSGroups. The following steps are carried out after you have successfully configured the PAS Tile. The Installation Dashboard of Ops Manager should looks like this. SSH to Ops Manager. ssh ubuntu@10.11.24.11 uaac target https://10.11.24.11/uaa –skip-ssl-validation ...

T1 Routers & Logical Switches Create T1 Router – T1-PAS-Infrastructure. Edge cluster is not needed for this T1 router. Create Logical Switch LS-PAS-Infrastructure. Create Router port on the T1 and connect to the LS. IP Address: 10.11.24.1⁄24 On the T1, enable route advertisement options.   Create T1 Router – T1-PAS-Infrastructure. Attach an Edge cluster to this T1 router as Load Balancer services will be enabled on this T1 router. ...