VMware M10-SDDC-APIs-v2.0

SDDCIntensiveWorkshopAgendaLabBuild-outandDeploymentTheCustomer,Components&VisionSSOArchitectureVSANStorageArchitectureSDDCAPIExtensionsSDDCInfrastructureMessagingOrchestratingtheSDDCvCloudNetworkingandSecurityAdvancedVCACExtendingVCACSDDCAPIsHybridCloudVCOpsDashboardingBCDRAvailabilityComplianceandRemediationBusinessCriticalApplications2ConfidentialEXPOSEDAPISHowdoesthevCloudSuiteintegratewithitselfandwith3rdparties?3ConfidentialExternalIntegrationPointsvCloudAPI+ExtensionsNotifications/BlockingTasks(AMQP)vCloudNetworkingandSecurityAPI,NVPAPI,NSXAPIvCloudAutomationCenterAPIvSANAPIOperationsManagerAPI•WebServices•JDBCDriverEcosystemFrameworkConfigurationManagerAPIvCenterOrchestrator•Workflowbuildingblocks(Soap,REST,SSH,SNMP)•vCOPlugins(WritteninJava,openframework)vCenterAPIVIXAPICominginthe2014release:vAPITherearemoreAPIs/SDKsavailable,howeverthesearethekeyonesusedwhenintegratingwithothersystems/services.4ConfidentialTHEAPISWhatcanIconsume?5ConfidentialvSphereAPIOverviewExposedviaSOAPbyvCenterServerandESXiServerCRUDoperationsforvSphereentities:•VM•Compute:Host,Cluster,ResourcePool•Storage:Datastore,StoragePod•Networking:Network,DistributedVirtualSwitch,DistributedVirtualPortGroup•Organize:Folder,DatacenterPropertyCollectorisonlywaytogetdata•Querylanguageispowerfulandrelativelyefficient.•Butit’sdifficulttolearntouse.LedtothedevelopmentscriptingSDKs.Needgreatskilltobeabletoaccessvirtualization.6ConfidentialPolicyBasedManagementServiceProvidesaccesstoStoragePolicyManagedObjectsProfileManager:Storageprofiles&associatedentitiesComplianceManager:Compliancecheckingofprofiles&entitiesPlacementSolver:PlacementcompatibilitycheckingClientconnectstovCenterserverandobtainsvCentersessioncookie.Clientcanusethecookietoestablishconnectionwithstoragepolicyserver.7ConfidentialvCloudAPI&SDKExposedviaRESTbyvCloudDirectorCRUDoperationsforvCloudentities:•vApps,Catalog•Organization,Users•VirtualDatacenter(provider&organization)In5.1theAPIcoversmostofwhattheUIcando(FeatureParityAPI/UIisaVERYHIGHpriority).AddedRESTqueryservicethatallowsdatatobecollectedefficientlyThevCloudSDK’sforREST,Java,PHP,.NETareavailableat:AllowsforthedevelopmentofinteractiveclientsofvCloudDirectorusingaRESTfulapplicationdevelopmentstyle(RESTAPIShell).SimplecommandstructureofGET,PUT,POSTandDELETE.SimpleobjectrepresentationsusingXMLelements.FlexibleconsumptionoptionsincludingRESTClients,cURL,andLanguageBindings(SDK)ExtensionOperationsConsumersProvidersAdminOperationsUserOperations9ConfidentialDynamicCloudInterfaceTheDynamicCloudInterfaceprovidesastandardized,securedRESTfulinterfaceforcloudaccessandinteraction,controlledthroughbusiness-awarepolicyforconsumerssuchasusers,infrastructure,devices,andapplications.CustommodelsareautomaticallyexposedthroughtheDCI.AswiththecorevCACmodels,custommodelscanbeconfiguredsoaccesstotheunderlyingdataiscontrolledbybusiness-specificsecuritypoliciesbasedondefinedroles,tasks,andpermissions.ForadetailedreferencetothecoreentitytypesaccessiblethroughDCI,seetheDynamicCloudInterfaceHTMLReference.DCIDataAccessLayerModelManagerRESTEntitiesHostsRequestsVirtualMachinesAgentCostProfileSecurityDataModel10ConfidentialvCenterOperationsAPIvCenterOperationsOpenAPI•HTTPPOSTServlet•ActionsaresubmittedasPOSTbody•ResultsasplaintextvCenterOperationsFSDBJDBCDriver•DirectaccesstovCOPSmetrics•RequiresiptableschangesonvCOPSAnalyticsVM•DirectRMIconnectiontoFSDB.Noauth.•Selectonly(Noinsert/update/delete)•NeedtoqueryPostgresDBforentity&metricIDs11ConfidentialvCenterOrchestratorRESTAPISOAPAPI(OLD)RESTAPI(NEW)LDAPAuthenticationWorkflowExecutionStartGetStatusUserinteractionCatalogContentStatusnotificationsSchedulingDatapresentationRunhistoryPlug-inobjectsSystemobjectsPackageimport/exportWorkflowimport/exportManageworkflowsManageactionsManageresourcesManagepackagesContentpermissionsVMwareSSOLDAPStartGetstatusUserinteraction12ConfidentialvCNSRESTAPI•vCNS5.1.xintroducedversion3.0oftheRESTAPI.•ManyURLshavechangedasaresultofnewRESTAPIversion.•URLsformakingAPIrequestsstillusethe2.0designator.Example:••NVP(Nicira)alsohasaRESTbasedAPI.•InsteadofXMLasapayload(body),theNSXAPIusesJSON.•JSON:JavaScriptObjectNotation13ConfidentialNVPAPIJSONExampleExampleofaJSONBodywhenmakingaRESTAPIcalltoanNVPManager:{display_name:“Main_Transport”,credential:{type:MgmtAddrCredential,mgmt_address:9.9.9.9”},transport_connectors:[{type:STTConnector”,transport_zone_uuid:“112358aabceb”,ip_address:9.9.9.9”}]}14ConfidentialAPIUnification•TheNSXAPIprovidesasubsetofcapabilitiesthatarecommonacrossthevariousnetworkingplatformsincluding:vCNS,NSXforvSphere,andNSXforMulti-Hypervisor.•TheNSXAPIusesJSONinsteadofXML•TheNVPManagerandthenewNSXManagerhasanAPIinspectorbuilt-inthatdrasticallysimplifiesdevelopment.15ConfidentialNetworkingAPIUnificationNSXAPIvCloudNetworking&SecurityAPIVxLANvWire(L2)EdgeRouting(L3)DNS,DHCP&IPAMEdgeFirewall(L4–L7)