Chapter 5. Policy Profiles

5.1. Creating Policy Profiles

Policy profiles are groups of policies that you need to use at the same time. A policy profile can have one or more policies. Policy profiles can be assigned to either a host or a virtual machine.

  1. Navigate to ControlExplorer.
  2. Click on the Policy Profiles accordion, then click image (Configuration), then image (Add a New Policy Profile).
  3. In the Basic Information area, type in a unique description for the policy profile.

    image

  4. From Available Policies in the Policy Selection area select all the policies you need to apply to this policy profile. Use the Ctrl key to select multiple policies.

    image

  5. Click image to add the Policies.

    image

  6. Add to the Notes area if required.
  7. Click Add.

The policy profile is added. You can now assign the policy profile to providers, hosts, and repositories. In addition, you can verify that the virtual machine complies with the policy profile using the Resultant Set of Policy feature.

5.2. Deleting a Policy Profile

Remove policy profiles that you no longer need. This does not remove the policies associated with the policy profile.

  1. Navigate to ControlExplorer.
  2. Click on the Policy Profile accordion, then click the policy profile you want to remove.
  3. Click image (Configuration), image (Remove this Policy Profile).
  4. Click OK to confirm.

5.3. Simulating Policy

Before assigning a policy profile to a virtual machine, use the CloudForms Management Engine controls policy simulation feature to determine if a virtual machine passes a policy profile.

5.3.1. Simulating Policy Profiles on Virtual Machines

  1. Navigate to InfrastructureVirtual Machines, select the virtual machines you need to evaluate.
  2. Click image (Policy), and then click image (Policy Simulation).
  3. From the Select a Policy Profile to add dropdown, click the policy you need to apply to the selected virtual machines.

    image

  4. The virtual machine thumbnail displays in the Policy Simulation area.

    • A check sign in the lower right quadrant of the virtual thumbnail shows that the virtual machine passes policy.
    • A minus sign in the lower right quadrant of the virtual thumbnail shows that the virtual machine fails policy.
  5. Click on a virtual machine in the Policy Simulation area to see its details.
  6. Expand a policy profile by clicking on it to see its member policies and the status of the conditions.

    • Check Show out of scope items to show all conditions, whether or not the virtual machine passes the scope part of the condition. Uncheck it to hide conditions where the scope part fails.
    • Next to Show policies, check Successful to show policies that are passed and check Failed to see the policies that have failed. The default is to show both.
    • Items in green text passed the condition.
    • Items in red text failed the condition.
    • Items in red italics failed the condition, but do not change the outcome of the scope.

If you evaluate multiple policy profiles, you can see both policy profiles and a tree expanding down to their conditions.

5.4. Assigning Policy Profiles

After creating your policy profiles, you are ready to evaluate and assign them. Policy profiles are assigned to virtual machines, providers, clusters, hosts, and resource pools. Policies within a profile run either on a Host or virtual machine based on the type of policy created.

  • Assign a policy profile to a virtual machine to apply the policy profile to a specific virtual machine, independent of its related host, provider, or repository.
  • Assign a policy profile to a provider to apply the policy profile to all virtual machines or hosts registered to that provider.
  • Assign a policy profile to a cluster to apply the policy profile to all virtual machines or hosts assigned to that cluster.
  • Assign a VM policy profile to a host to apply the policy profile to that specific host or all virtual machines registered to that Host.
  • Assign a VM policy profile to a resource pool to apply the policy profile to all virtual machines or hosts assigned to that resource pool.

5.4.1. Assigning Policy Profiles to a Provider

  1. Navigate to InfrastructureProviders, verify the provider you need to assign the policy profiles to.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, you can click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Check the policy profiles you require to apply to the provider. It turns blue to show its assignment state has changed.
  5. Click Save.

5.4.2. Removing Policy Profiles from a Provider

  1. Navigate to InfrastructureProviders, check the providers you want to remove the policy profile from.
  2. Click image (Policy), and then click image (Manage Policies).
  3. Uncheck the policy profile you need to remove. It turns blue to show that its assignment state has changed.
  4. Click Save.

5.4.3. Assigning Policy Profiles to a Cluster

  1. Navigate to InfrastructureClusters, check the clusters you need to assign policy profiles to.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, you can click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Check the policy profiles you need to apply to the cluster. It turns blue to show its assignment state has changed.
  5. Click Save.

5.4.4. Removing Policy Profiles from a Cluster

  1. Navigate to InfrastructureClusters, check the clusters you need to remove the policy profiles from.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, you can click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Uncheck the policy profiles you need to remove. It turns blue to show that its assignment state has changed.
  5. Click Save.

5.4.5. Assigning Policy Profiles to a Host

  1. Navigate to InfrastructureHosts, check the hosts you need to assign policy profiles to.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Check the policy profiles you need to apply to the host. It turns blue to show its assignment state has changed.
  5. Click Save.

5.4.6. Removing Policy Profiles from a Host

  1. Navigate to InfrastructureHosts, check the hosts you need to remove the policy profiles from.
  2. Click image (Policy), and then click image (Manage Policies).
  3. Uncheck the policy profiles you need to remove. It turns blue to show that its assignment state has changed.
  4. Click Save.

5.4.7. Assigning Policy Profiles to a Virtual Machine

  1. Navigate to InfrastructureVirtual Machines, check the virtual machines you need to assign policy profiles to.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Check the policy profiles you need to apply to the host. It will turn blue to show that its assignment state has changed.
  5. Click Save.

5.4.8. Removing Policy Profiles from a Virtual Machine

  1. Navigate to InfrastructureVirtual Machines, check the virtual machines you want to remove the policy profile from.
  2. Click image (Policy), and then click image (Manage Policies).
  3. Uncheck the policy profile you need to remove. It turns blue to show that its assignment state has changed.
  4. Click Save.

5.4.9. Assigning Policy Profiles to a Resource Pool

  1. Navigate to InfrastructureResource Pools, check the resource pools you need to assign policy profiles to.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Click the policy profiles you need to apply to the resource pools. It turns blue to show its assignment state has changed.
  5. Click Save.

5.4.10. Removing Policy Profiles from a Resource Pool

  1. Navigate to InfrastructureResource Pools, check the resource pools you need to remove the policy profiles from.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Uncheck the policy profiles you need to remove. It turns blue to show that its assignment state has changed.
  5. Click Save.

5.4.11. Assigning Policy Profiles to a Cloud Provider

  1. Navigate to CloudsProviders and check the provider you need to assign the policy profiles to.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Check the policy profiles you need to apply to the provider. The ones that are different from the previous setting will show in blue.
  5. Click Save.

5.4.12. Removing Policy Profiles from a Cloud Provider

  1. Navigate to CloudsProviders, check the providers you need to remove the policy profile from.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Uncheck the policy profile you need to remove. It turns blue to show that its assignment state has changed.
  5. Click Save.

5.4.13. Assigning Policy Profiles to an Instance

  1. From CloudsInstances, check the instances you want to assign policy profiles to.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Check the policy profiles you want to apply to the instances. It turns blue to show its assignment state has changed.
  5. Click Save.

5.4.14. Removing Policy Profiles from an Instance

  1. Navigate to CloudsInstances, check the instances you need to remove the policy profile from.
  2. Click image (Policy), and then click image (Manage Policies).
  3. From the Select Policy Profiles area, click on the triangle next to a desired policy profile to expand it and see its member policies.
  4. Uncheck the policy profile you need to remove. It turns blue to show that its assignment state has changed.
  5. Click Save.

5.5. Disabling a Policy in a Policy Profile

You can disable one policy in a profile without removing it from the policy, perhaps for trouble shooting purposes or because the policy is not required temporarily.

  1. Navigate to ControlExplorer.
  2. Click the Policies accordion, then navigate to the policy that you need to disable or navigate to the policy from the policy profile.
  3. Click image (Configuration), image (Edit Basic Info, Scope, Notes).
  4. Uncheck Active.
  5. Click Save.

5.6. Viewing Policy Simulation - Resultant Set of Policy (RSOP)

After the Policy Profiles are assigned, you can see the final result of the resolution of all policies based on which Events occur. Based on the result, you can adjust your Policies. To view RSOP, go to the control area in the CloudForms Management Engine console.

  1. Navigate to ControlSimulation.
  2. From the Event Selection area, select a type of event, and then the specific event you need the result for.

    image

  3. From the VM Selection area, select the virtual machine from a provider, cluster, host, or a single virtual machine.

    image

  4. Click Submit.