diff --git a/media/features/high-availability/assign-user-to-role-vmware.png b/media/features/high-availability/assign-user-to-role-vmware.png new file mode 100644 index 00000000..60559b44 Binary files /dev/null and b/media/features/high-availability/assign-user-to-role-vmware.png differ diff --git a/media/features/high-availability/create-role-vmware.png b/media/features/high-availability/create-role-vmware.png new file mode 100644 index 00000000..780c1b95 Binary files /dev/null and b/media/features/high-availability/create-role-vmware.png differ diff --git a/media/features/high-availability/create-user-vmware.png b/media/features/high-availability/create-user-vmware.png new file mode 100644 index 00000000..6f2a870b Binary files /dev/null and b/media/features/high-availability/create-user-vmware.png differ diff --git a/media/features/high-availability/manage-permissions1-vmware.png b/media/features/high-availability/manage-permissions1-vmware.png new file mode 100644 index 00000000..07c00f4d Binary files /dev/null and b/media/features/high-availability/manage-permissions1-vmware.png differ diff --git a/media/features/high-availability/manage-permissions2-vmware.png b/media/features/high-availability/manage-permissions2-vmware.png new file mode 100644 index 00000000..70c1c5cc Binary files /dev/null and b/media/features/high-availability/manage-permissions2-vmware.png differ diff --git a/media/features/high-availability/stonith-action.png b/media/features/high-availability/stonith-action.png new file mode 100644 index 00000000..d57df425 Binary files /dev/null and b/media/features/high-availability/stonith-action.png differ diff --git a/samples/features/high availability/Linux/Cluster Configuration/STONITH/Tutorial for vmware fencing agent.md b/samples/features/high availability/Linux/Cluster Configuration/STONITH/Tutorial for vmware fencing agent.md new file mode 100644 index 00000000..3317a8c7 --- /dev/null +++ b/samples/features/high availability/Linux/Cluster Configuration/STONITH/Tutorial for vmware fencing agent.md @@ -0,0 +1,67 @@ +# Configure STONITH With fence_vmare Fencing Agent + +>[!NOTE] +>All examples of using fencing agent for vmware in [RHEL documentation](https://access.redhat.com/solutions/306233) are with `-ssl` option ( or `-z`). That “Default” behavior has changed from just checking any certificate to just signed certs that can be validated. Hence in testing use the `–ssl-insecure`. Can use default if you have a valid certificate. + +## Manually Test Fencing Device + +The options that are passed in the example below have the following usage: `-a` is IP of Vsphere, `-l` is username, `-p` is password, `-n` is node name you want to fence. Can use `-v` as verbose mode to debug. + +```bash +sudo cd /sbin +sudo ./fence_vmware_soap -a 172.16.50.50 -l stonithuser -p 'MyStrongPassword1!' --ssl-insecure --action status -n esxi-rhel7-c +``` +Output: +```bash +/usr/lib/python2.7/site-packages/urllib3/connectionpool.py:769: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html +Status: ON +``` + +## Create Fencing Agent Resource + +To create the resource run the following commands: +```bash +sudo pcs stonith create esxi-rhel7-c_fence fence_vmware_soap ipaddr=172.16.50.50 ssl_insecure=1 login=stonithuser passwd='MyStrongPassword1!' pcmk_host_list=esxi-rhel7-c +``` + +## Check Status + +Run the following commands to check the status of the cluster nodes and reources: +```bash +sudo pcs status +``` +Sample output: +```bash +3 nodes and 5 resources configured +… +… +Full list of resources: + +Master/Slave Set: ag_cluster-master [ag_cluster] + Masters: [ dl380g7-07 ] + Slaves: [ dl380g7-08 ] + Stopped: [ esxi-rhel7-c ] +virtualip (ocf::heartbeat:IPaddr2): Started dl380g7-07 +esxi-rhel7-c_fence (stonith:fence_vmware_soap): Started dl380g7-08 +``` + +## Testing + +```bash +sudo pcs stonith fence esxi-rhel7-c +``` +You can see it will turn the VM off and then back on: + ![Stonith action](../../../../../../media/features/high-availability/stonith-action.png "Stonith action") + + ## VMware Permissions + +On VMware vSphere, in order to use limited set of permissions, create a specific user in ESXI to not use root: + ![Create user](../../../../../../media/features/high-availability/create-user-vmware.png "Create user") + +Created a Role with only subset of permissions: + ![Create role](../../../../../../media/features/high-availability/create-role-vmware.png "Create role") + +Tie the 2 together aka assign user to the role: + ![Assign user to role](../../../../../../media/features/high-availability/assign-user-to-role-vmware.png "Assign user to role") + ![Manage permissions](../../../../../../media/features/high-availability/manage-permissions1-vmware.png "Manage permissions") + ![Manage permissions](../../../../../../media/features/high-availability/manage-permissions2-vmware.png "Manage permissions") \ No newline at end of file