In this post, we will take a look at another new feature of VCF Automation, IaaS Resource Policies. I will demonstrate how these IaaS policies can be used with Data Service Policies and DSM provisioned databases to fine-tune certain parameters related to the database. You may have already seen the concept of Data Service Policies in previous posts. These are policies set at the Provider level which can dictate which database engines, which database versions and which backup locations a tenant of an organization can consume. However additional validations or constraints in an IaaS policy can be applied at an…
Another new feature in Data Services Manager 9.0.1 is the ability to setup access to a Postgres database using Client Certificates. This security features removes the need for “password” based authentication. In order to be able to use this functionality, the Postgres database must already be configured with external/custom certificates. This includes the PEM formatted certificate chain that has the server leaf cert, any intermediate certs and of course the Certificate Authority (CA). It also includes the PEM Private Key. With the custom server certificates associated with the database in place, we can proceed with updating the pg_hba.conf (host based…
In this post, I will look at the steps involved in creating your own Harbor Registry, setting it up as a Supervisor Container Registry, and then pulling DSM Consumption Operator images for version 9.0.1 from the DSM appliance and pushing them up to the Harbor Registry. We will then deploy the Consumption Operator using the images in the Harbor registry, and modify the package.yaml and values.yaml to provide a true air-gapped environment for DSM 9.0.1. Other image registries can also be used. Overview of Steps If you operate in an air-gapped environment, you can use images and manifests bundled in…
It gives me great pleasure to announce the availability of VMware Data Services Manager (DSM) version 9.0.1. Over the coming weeks I will be deep-diving into many of these new features, but for now I want to provide you all with a brief overview of the capabilities and enhancements that you can find in this release. Automated Active Directory integration for MS SQL Server We continue to enhance our MS SQL Server integration. Although the data service is still in tech preview in DSM 9.0.1, a significant enhancement in this release is the ability to specify a privileged Active Directory…
Continuing on from the VMware Data Services Manager (DSM) 9.0 introductory videos from my most recent post, these next two videos look at how to configure VMware Cloud Foundation (VCF) Automation in VCF 9.0 with DSM to provide a true DBaaS (Database as a Service) experience to your VCF tenants and end users. The first video looks at the setup steps and goes on to provision a Postgres database using a traditional, DSM-Manager infrastructure policy through VCF Automation. The second video uses a new feature of DSM 9.0 and VCF Automation. It demonstrates how one can build an Infrastructure Policy…
In the following videos, I demonstrate how to install the VMware Data Services Manager (DSM) 9.0 appliance via the vSphere Client Plugin mechanism. I then take a look at how to to build out first infrastructure policy, which allows a VI Admins to put guard rails around which resource are being consumed by the DSM data services. This prevents data sprawl on your on-premises VCF infrastructure. Lastly, we see how to deploy a new Microsoft SQL Server instance along with a few user databases to demonstrate the new MS SQL Server data service. This is currently in tech preview in…
A few weeks back, I was invited by Pete and John to join them on their Virtually Speaking Podcast. As the guys said, ‘If you’re curious about what “Database-as-a-Service” really looks like in a VMware Cloud Foundation environment, this episode is for you’. Enjoy!