Just a question, which sites does the appliance try and reach?
Not sure I understand the question. Are you interested in the request flow or specific calls VEBA makes to the outside world?
Hi Michael,
Sorry I should have been more clear the requirement state it requires internet access and I wanted to know which sites it needed access to.
From going over the logs it seemed to be connecting back to https://cloud.weave.works/k8s/*
and doing git clones on
https://github.com/openfaas/faas-netes
https://github.com/projectcontour/contour.git
Yes, there are a number of Docker Containers that setups k8s and VEBA and those must be whitelist or accessible. For the complete list, see https://github.com/vmware-samples/vcenter-event-broker-appliance/blob/master/scripts/photon-containers.sh#L11-L32 which is code I've put in place to pre-fetch the containers so internet access (either direct or proxy) isn't required.
If you're interested, we've got a preview version at https://download3.vmware.com/software/vmw-tools/veba/vCenter_Event_Broker_Appliance_0.2.0.ova
If you deploy functions that haven't been cached or must go out to say Dockerhub, then you'll still need connectivity.
Hope this helps
having trouble with DNS resolution regardless of what i put into the vApp config at deployment. 'resolvectl status' shows the DNS server i entered but where is the search domain stored so i can verify that?
thanks
Check out:
root@veba [ ~ ]# cat /etc/systemd/network/99-dhcp-en.network
[Match]
Name=e*
[Network]
Address=192.168.30.170/24
Gateway=192.168.30.1
DNS=192.168.30.1
Domain=primp-industries.com
You can also check /var/log/bootstrap.log or if you've toggled debug /var/log/bootstrap-debug.log to see what's being passed in and where things are going
hi, i have deployed the ova today but when it boots it only seems to show the ipv6 ip in vcenter and no ipv4.
the console displays https://[IP]/status
any ideas pls.
thanks
1) Did you confirm the Appliance is on a network that can connect to the Internet?
2) You can login via the console and take a look at /var/log/bootstrap.log to see if there's any errors. If you don't see anything, please re-deploy and toggle the "debug" option at the very bottom and then take a look at /var/log/bootstrap-debug.log which will have more verbose logging
hi.
the log shows the below:-
removed /etc/systemd/system/multi-user.target.wants/iptables.service.
w1125 07:10:53.699529 712 common.go:140] warning: could not obtain a bind address for the api server: no default routes found in "/proc/net/route" or "/proc/net/ipv6_route"; using: 0.0.0.0
I1125 07:10:53.704723 712 verion.go:96] could not fetch a kubernetes version from the internet: unable to get url "https://dl.k8s.io/release/stable-1.txt": get https://dl.k8s.io/release/stable-1.txt: dial tcp: lookup dl.k8s.io on 127.0.0.53:53: server misbehaving
I1125 07:10:53.704747 712 version.go:97] falling back to the local client version: v1.14.6 cannot use "0.0.0.0" as the bind address for the api server.
when i try to ping anything from the cli i get "network is unreachable"
Mark,
It looks like the networking wasn't setup correctly and/or it can't reach the internet. Can you please double check all your input settings? You should be able to ping the appliance from your desktop as well as being able to ping say google.com
I'm working on a version of the appliance that doesn't need internet and will have the containers pre-downloaded, but in your case, it looks like networking just isn't setup correctly which is all based on you input during deployment. Please check that first and we can then provide you with an early build which doesn't require internet connectivity if you're interested in testing that out
Hi, the networking inputs are all correct - I have tried to deploy several times with different networks i know has internet access.
I would be interested in getting an early build version to see how that fairs.
thanks
Mark,
Here's the early build, let me know if you run into any issues https://download3.vmware.com/software/vmw-tools/veba/vCenter_Event_Broker_Appliance_0.2.0.ova
jkrull
A few things I've noticed where my results have varied and the information isn't posting to slack.
1. Inside of stack.yml I was receiving an error on the provider name faas, when I changed that to openfaas the build proceeded.
2. When I ran the deploy I received a "Deployed. 202 Accepted." message. The article said 200.
3. When I go into Openfaas the function has Invoke grayed out and the Status is set to Not ready. - Is that normal?
4. The webhook URL looks different than the example and the example ends with a / Mine looks like https://hooks.slack.com/services/TR7RS1W/BQZLL6M/4QN19g5fdsa
Thanks for reading, hopefully I can get this working because we really need a solution for auditing VM change events.