Managing VMware Resources in Azure with Azure Arc-enabled VMware vSphere: A Comprehensive Guide (Part 2)
In the previous post, we explored the capabilities of Azure Arc-enabled VMware vSphere and how it enables us to extend Azure governance and management policies to VMware based workloads. We also covered the deployment of a Resource Bridge to establish the connection between a VMware environment and Azure. In this second part of our comprehensive guide, we will delve deeper into managing VMware resources in Azure, including ResourcePools, Networks, Templates, and Datastores.
Managing ResourcePools in Azure
———————————-
ResourcePools in vCenter can now be explored through Azure, providing a unified view of the infrastructure. However, it’s important to note that ResourcePools cannot be created, edited, or removed directly from Azure. Instead, they will appear as hidden resources in an Azure ResourceGroup you select during the activation process. They will be used for the VM creation process but cannot be edited from Azure.
To enable a ResourcePool in Azure, simply select it and click on Enable in Azure. You will then be prompted for an Azure ResourceGroup attachment, and the ResourcePool will be displayed with a link to explore its details. By default, all ResourcePools will be displayed in the inventory list, including Cluster and Hosts resourcePool representation.
Managing Networks in Azure
—————————
Networks in vCenter can also be managed through Azure, providing a unified view of the infrastructure. However, similar to ResourcePools, Networks cannot be created, edited, or removed directly from Azure. They will appear as hidden resources in an Azure ResourceGroup you select during the activation process and will be used for the VM creation process.
To enable a Network in Azure, simply select it and click on Enable in Azure. You will then be prompted for an Azure ResourceGroup attachment, and the Network will be displayed with a link to explore its details. By default, all networks (NSX-T segments, PortGroups, and DvPortGroups) will be displayed in the inventory list.
Managing VM Templates in Azure
——————————
VM templates in vCenter can now be managed through Azure, providing a unified view of the infrastructure. However, similar to ResourcePools and Networks, VM templates cannot be created, edited, or removed directly from Azure. They will appear as hidden resources in an Azure ResourceGroup you select during the activation process and will be used for the VM creation process.
To enable a VM Template in Azure, simply select it and click on Enable in Azure. You will then be prompted for an Azure ResourceGroup attachment, and the Template will be displayed with a link to explore its details. By default, all VM templates will be displayed in the inventory list.
Managing Datastores in Azure
—————————–
Datastores in vCenter can also be managed through Azure, providing a unified view of the infrastructure. However, similar to ResourcePools, Networks, and VM Templates, Datastores cannot be created, edited, or removed directly from Azure. They will appear as hidden resources in an Azure ResourceGroup you select during the activation process and will be used for the VM creation process.
To enable a Datastore in Azure, simply select it and click on Enable in Azure. You will then be prompted for an Azure ResourceGroup attachment, and the Datastore will be displayed with a link to explore its details. By default, all Datastores will be displayed in the inventory list.
Comparing VM Objects in vCenter and Azure
———————————————
One of the main benefits of managing VMware resources in Azure is the ability to compare VM objects in vCenter and Azure. This provides a unified view of the infrastructure and enables administrators to make informed decisions about their virtualized environment.
To compare VM objects, simply select the VM in vCenter and Azure, and then compare the two views side-by-side. This will provide a detailed comparison of the VM’s properties, including CPU, memory, disk storage, and networking configurations.
Applying Azure RBAC Strategies to VMware Resources
———————————————-
As you may have noticed in the last screens of the deployment, it is possible to get/download the ARM template that represents the ongoing deployment. This will be covered in the upcoming post about automation capabilities provided by Azure Arc-enabled VMware vSphere.
In addition to comparing VM objects, administrators can also apply Azure RBAC strategies to VMware resources that are enabled in Azure. This provides an additional layer of security and control over the virtualized environment.
To apply Azure RBAC strategies, simply select the resource you wish to manage, and then use the Azure portal to assign appropriate roles and permissions. You can provide ReadOnly, Contribution, or Ownership to resources, ensuring that only authorized personnel have access to sensitive virtualized assets.
Preventing Deletion or Modification with Azure Lock
———————————————-
Finally, administrators can prevent deletion or modification of VMware resources in Azure by using Azure Lock. This feature enables administrators to set a lock on resources, ensuring that they cannot be modified or deleted without proper authorization.
To use Azure Lock, simply select the resource you wish to protect, and then use the Azure portal to set the appropriate lock level (ReadOnly, Contribution, or Ownership). This will ensure that only authorized personnel have access to sensitive virtualized assets, preventing unauthorized changes or deletions.
Conclusion
———-
In conclusion, managing VMware resources in Azure with Azure Arc-enabled VMware vSphere provides a comprehensive solution for virtualization administrators looking to extend their existing infrastructure to the cloud. By leveraging the power of Azure governance and management policies, administrators can ensure that their virtualized environment is secure, compliant, and highly available.
In the next part of this series, we will delve deeper into automation capabilities provided by Azure Arc-enabled VMware vSphere, including the ability to download ARM templates representing ongoing deployments. We will also explore best practices for managing VMware resources in Azure, including tips and tricks for optimizing performance, security, and cost.
Don’t miss out on the latest virtualization news, tips, and tricks! Follow us on social media to stay informed and engaged with the cloud computing community.