ONECloud@Blum
02.10.2019
About Blum
Our Infrastructure
NTS Captain/OpenNebula at Blum
Examples
Next steps
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 2
About Blum
Our Infrastructure
NTS Captain/OpenNebula at Blum
Examples
Next steps
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 3
▪ 7983 Employees worldwide
▪ 6037 Employees Austria
▪ 8 Plants in Vorarlberg, others in Poland, USA and Brasil
▪ 31 Subsidiaries
▪ 258 Employees in IS
▪ 17 Employees in Infrastructure
▪ 8 Employees in Datacenter Team (Cabling, Network, Storage, Phys./ Virt. Hardware, Printing, Backup)
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 4
About Blum
Our Infrastructure
NTS Captain/OpenNebula at Blum
Examples
Next steps
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 5
▪ 89 VMware Hosts in 23 Clusters
▪ 1526 VMs
▪ 514.63 TB VMWare Storage (Tier1 + Tier0)
▪ 17 Templates ( + 4 Opennebula)
▪ ~ 10% Linux, ~ 90% Windows
▪ ~ 400 VMs using the same template (Z-Point)
▪ Netbox as central IPAM/DCIM Tool
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 6
About Blum
Our infrastructure
NTS Captain/OpenNebula at Blum
Examples
Next steps
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 7
Why NTS Captain?
▪ “Selfservice” for Users
▪ Automatisation of the processes (work in Progress)
▪ All Machines “the same” – creating Standards
▪ Less work for Infrastructure-Department
▪ Faster deployment of new VMs
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 8
What did we wanted to automate?
▪ Automatic deployment of VM (VCenter Folder, VLAN)
▪ Automatic AD Domain Join (incl. Description in AD Account)
▪ Automatic sync for IP Adresses with IPAM Tool
▪ Automatic creation of Hosts in ASG RemoteViewer
▪ SCOM -> Automatic mapping of Supportgroups
▪ Windows Updateschedule automatically assigned in SCCM
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 9
What happens exactly?
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 10
VM
created via
GUI
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 11
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 12
What happens exactly?
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 13
VM
created via
GUI
Hook for
IPAM
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 14
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 15
What happens exactly?
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 16
VM
created via
GUI
Hook for
IPAM
Hook for
new VM
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 17
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 18
SCCM Windows Update Schedule
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 19
ASG RemoteViewer
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 20
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 21
PowerShell Registryentry for Monitoring
Description for VM in AD Account
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 22
What happens exactly?
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 23
VM
created via
GUI
Hook for
IPAM
Hook for
new VM
Context.
Windows
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 24
Contextualisation
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 25
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 26
What happens exactly?
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 27
VM
created via
GUI
Hook for
IPAM
Hook for
new VM
Context.
Windows
LAPS
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 28
What did we wanted to automate?
▪ Automatic deployment of VM (VCenter Folder, VLAN)
▪ Automatic AD Domain Join (incl. Description in AD Account)
▪ Automatic sync for IP Adresses with IPAM Tool
▪ Automatic creation of Hosts in ASG RemoteViewer
▪ SCOM -> Automatic mapping of Supportgroups
▪ Windows Updateschedule automatically assigned in SCCM
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 29
How we build our templates
1. Install Windows
2. Install LAPS (LAPS -> Local Admin Password Solution)
3. Install Onecontext MSI
4. Sysprep
5. Convert VM to Template
6. Import Image in OpenNebula
7. Clone without Images
8. Copy Context-Script
9. Define Context-variables
10.Define Network
11.Done (Duration approx. 10 Minutes)
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 30
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 31
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 32
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 33
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 34
Summary
▪ New Templates really easy to create and customise
▪ Shorter time to fullfill requests (from ~ 2 Days down to ~ 2 Minutes)
▪ Less work for Infrastructure-Department
▪ More satisfied Customers (Who loves to wait for a VM?)
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 35
About Blum
Our infrastructure
NTS Captain/OpenNebula at Blum
Examples
Next steps
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 36
ExampleZ-Point
(ControlPC for our productionlines)
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 37
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 38
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 39
Example W2Kxx Standard VM
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 40
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 41
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 42
About Blum
Our infrastructure
NTS Captain/OpenNebula at Blum
Examples
Next steps
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 43
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 44
What’s next?
▪ Integration with MS Orchestrator for Ticketsystem and automation of AD Tasks
▪ Onboarding and templates for further Departments (BBA/Web/AppServer + SAP)
▪ Azure Deployment (Resource Model, not Classic VM)
Questions?
02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 45
NTS CAPTAIN / OpenNebula at Julius Blum GmbH

NTS CAPTAIN / OpenNebula at Julius Blum GmbH

  • 1.
  • 2.
    About Blum Our Infrastructure NTSCaptain/OpenNebula at Blum Examples Next steps 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 2
  • 3.
    About Blum Our Infrastructure NTSCaptain/OpenNebula at Blum Examples Next steps 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 3
  • 4.
    ▪ 7983 Employeesworldwide ▪ 6037 Employees Austria ▪ 8 Plants in Vorarlberg, others in Poland, USA and Brasil ▪ 31 Subsidiaries ▪ 258 Employees in IS ▪ 17 Employees in Infrastructure ▪ 8 Employees in Datacenter Team (Cabling, Network, Storage, Phys./ Virt. Hardware, Printing, Backup) 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 4
  • 5.
    About Blum Our Infrastructure NTSCaptain/OpenNebula at Blum Examples Next steps 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 5
  • 6.
    ▪ 89 VMwareHosts in 23 Clusters ▪ 1526 VMs ▪ 514.63 TB VMWare Storage (Tier1 + Tier0) ▪ 17 Templates ( + 4 Opennebula) ▪ ~ 10% Linux, ~ 90% Windows ▪ ~ 400 VMs using the same template (Z-Point) ▪ Netbox as central IPAM/DCIM Tool 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 6
  • 7.
    About Blum Our infrastructure NTSCaptain/OpenNebula at Blum Examples Next steps 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 7
  • 8.
    Why NTS Captain? ▪“Selfservice” for Users ▪ Automatisation of the processes (work in Progress) ▪ All Machines “the same” – creating Standards ▪ Less work for Infrastructure-Department ▪ Faster deployment of new VMs 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 8
  • 9.
    What did wewanted to automate? ▪ Automatic deployment of VM (VCenter Folder, VLAN) ▪ Automatic AD Domain Join (incl. Description in AD Account) ▪ Automatic sync for IP Adresses with IPAM Tool ▪ Automatic creation of Hosts in ASG RemoteViewer ▪ SCOM -> Automatic mapping of Supportgroups ▪ Windows Updateschedule automatically assigned in SCCM 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 9
  • 10.
    What happens exactly? 02.10.2019| © Copyright by Blum | Name | Vertraulich/Confidential 10 VM created via GUI
  • 11.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 11
  • 12.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 12
  • 13.
    What happens exactly? 02.10.2019| © Copyright by Blum | Name | Vertraulich/Confidential 13 VM created via GUI Hook for IPAM
  • 14.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 14
  • 15.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 15
  • 16.
    What happens exactly? 02.10.2019| © Copyright by Blum | Name | Vertraulich/Confidential 16 VM created via GUI Hook for IPAM Hook for new VM
  • 17.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 17
  • 18.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 18 SCCM Windows Update Schedule
  • 19.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 19 ASG RemoteViewer
  • 20.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 20
  • 21.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 21 PowerShell Registryentry for Monitoring Description for VM in AD Account
  • 22.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 22
  • 23.
    What happens exactly? 02.10.2019| © Copyright by Blum | Name | Vertraulich/Confidential 23 VM created via GUI Hook for IPAM Hook for new VM Context. Windows
  • 24.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 24 Contextualisation
  • 25.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 25
  • 26.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 26
  • 27.
    What happens exactly? 02.10.2019| © Copyright by Blum | Name | Vertraulich/Confidential 27 VM created via GUI Hook for IPAM Hook for new VM Context. Windows LAPS
  • 28.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 28
  • 29.
    What did wewanted to automate? ▪ Automatic deployment of VM (VCenter Folder, VLAN) ▪ Automatic AD Domain Join (incl. Description in AD Account) ▪ Automatic sync for IP Adresses with IPAM Tool ▪ Automatic creation of Hosts in ASG RemoteViewer ▪ SCOM -> Automatic mapping of Supportgroups ▪ Windows Updateschedule automatically assigned in SCCM 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 29
  • 30.
    How we buildour templates 1. Install Windows 2. Install LAPS (LAPS -> Local Admin Password Solution) 3. Install Onecontext MSI 4. Sysprep 5. Convert VM to Template 6. Import Image in OpenNebula 7. Clone without Images 8. Copy Context-Script 9. Define Context-variables 10.Define Network 11.Done (Duration approx. 10 Minutes) 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 30
  • 31.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 31
  • 32.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 32
  • 33.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 33
  • 34.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 34
  • 35.
    Summary ▪ New Templatesreally easy to create and customise ▪ Shorter time to fullfill requests (from ~ 2 Days down to ~ 2 Minutes) ▪ Less work for Infrastructure-Department ▪ More satisfied Customers (Who loves to wait for a VM?) 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 35
  • 36.
    About Blum Our infrastructure NTSCaptain/OpenNebula at Blum Examples Next steps 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 36
  • 37.
    ExampleZ-Point (ControlPC for ourproductionlines) 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 37
  • 38.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 38
  • 39.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 39
  • 40.
    Example W2Kxx StandardVM 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 40
  • 41.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 41
  • 42.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 42
  • 43.
    About Blum Our infrastructure NTSCaptain/OpenNebula at Blum Examples Next steps 02.10.2019 | © Copyright by Blum | Name | Vertraulich/Confidential 43
  • 44.
    02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 44 What’s next? ▪ Integration with MS Orchestrator for Ticketsystem and automation of AD Tasks ▪ Onboarding and templates for further Departments (BBA/Web/AppServer + SAP) ▪ Azure Deployment (Resource Model, not Classic VM)
  • 45.
    Questions? 02.10.2019 | ©Copyright by Blum | Name | Vertraulich/Confidential 45