Creating a Virtualization Client for OpenStack

The virtualization client manages data protection operations for an OpenStack deployment through one keystone node.

You must create a virtualization client for an OpenStack deployment, identifying a keystone node to manage data protection operations for all instances. In deployments with multiple keystone nodes, a different virtualization client is needed for each.

You must add at least one Virtual Server Agent (VSA) proxy for each data center. Additional proxies can be added as needed.

The virtualization client enables proxy teaming, enabling proxy failovers for fault tolerant backups. Using multiple proxies for each virtualization client makes it possible to perform backups for a large number of instances in a limited backup window.

When you create an OpenStack virtualization client, the Commvault software automatically creates an OpenStack instance, a backup set, and a default subclient that can be used to protect all instances from any compute nodes in the OpenStack deployment. You can create additional subclients to perform separate protection operations for different groups of instances. For example, you can create different subclients for different protection levels, and use the default subclient to protect any remaining instances.

Before You Begin

• Install the Virtual Server Agent (VSA) on at least one instance (proxy) in the OpenStack data center. You can install the VSA on other instances to create additional VSA proxies for the data center.

• At least one VSA proxy is needed for each region.

• Identify the keystone address for the OpenStack node and obtain administrator user credentials. If there are multiple endpoints for the keystone URL, use the public endpoint.

Procedure

Create a virtualization client:

1. From the CommCell Browser, right-click the Client Computers node and then select New Client > Virtualization > Openstack.

   The Create Openstack Client dialog box is displayed.

2. Enter a name for the virtualization client in the Client Name box.

3. In the Keystone Address box, enter the fully qualified host name or IP address for the keystone node.

   Note

   • If the endpoint uses a port other than 5000 or if the endpoint listening on port 5000 is not configured to authenticate the user, enter the full keystone endpoint URL. The endpoint URL must be able to authenticate the user logon credentials, and can be the public or admin URL.

   • The OpenStack proxy also communicates with the Cinder, Glance, Neutron, Keystone, and Nova service endpoints. The URL and ports can be listed by running the openstack endpoint list command. If there is a firewall, the ports and URLs listed for the Cinder, Glance, Neutron, Keystone, and Nova services should be allowed access from the proxy.

     • Default Ports:

       • Nova - 8774

       • Neutron - 9696

       • Glance - 9292

       • Cinder - 8776

       • Keystone - 5000

         For information see Firewalls and default ports — Installation Guide documentation on the Openstack website.

4. Enter the user name and password required to access the keystone node.

   Note

   • If a domain is configured in the OpenStack environment, select OpenStack Domain User and then enter the domain for the keystone node user.

   • You cannot remove the Openstack Domain or disable the user on an already created Openstack hypervisor client. Create a new client without specifying the Openstack Domain.

5. From the Storage Policy list, select a storage policy to associate with the virtualization client.

   The storage policy you select is also associated with the default subclient that is created automatically for the virtualization client.

6. Click Add to select a proxy for backup.

7. Add VSA proxies:

   1. Select one or more proxies from the Exclude list.

      The list displays all the clients that have the Virtual Server Agent installed and all the client groups. You can select one or more clients or client groups. When you select a client group, ensure that at least one client in the group has the Virtual Server Agent installed.

   2. Click Include or Include All.

      You can change the order of the proxies in the list by clicking up arrow or the down arrow. The first proxy in the list is the coordinator proxy.

   3. Click OK.

8. Click OK.