Configuring Multi-Org Tenancy in vRA 8.x - Part 1: DNS Requirements

Published on 14 April 2020 by Christopher Lewis. Words: 902. Reading Time: 5 mins.

Introduction

In this series of posts, we will be taking a look at how to configure a Multi-Organization Tenancy (aka Multi-Tenancy) in vRealize Automation (vRA) 8.x.

In this post, we will be looking at the additional DNS requirements for configuring vRA 8.x Multi-Organisation Tenancy. We will cover which DNS Records are required and then cover how those can be created easily using PowerShell.

For more information on the rest of the posts in this series, click here .

DNS Record Creation

In this section, we will highlight which DNS A and CNAME records that need to be created and then how to use PowerShell to create the DNS A, PTR and CNAME Records to support the multi-organization tenant configuration.

Which DNS Records do I need to create? (Simple Deployment)

The following DNS Records should already exist in the DNS infrastructure because they were required to originally deploy vRA:

To support multi-tenancy in a Simple deployment we need the following DNS records created per Organization/Tenant:

• One DNS A Record with the Organization Name as the DNS prefix (i.e. org.domain.name) that uses the same IP address as the WOA Appliance DNS A Record (idm.domain.name).
• One DNS CNAME Record with the Organization Name as the DNS prefix (i.e. org.vra.domain.name) that points to the vRA Appliance DNS A Record (vra.domain.name).

In our scenario, the following additional DNS Records will need to be created to support the enabling of multiple Organizations within vRA 8.x:

Which DNS Records do I need to create? (Clustered Deployment)

The following DNS Records should already exist in the DNS infrastructure because they were required to originally deploy vRA:

To support multi-tenancy in a Clustered deployment we need the following DNS records created per Organization/Tenant:

• One DNS A Record with the Organization Name as the DNS prefix (i.e. org.domain.name) that uses the same IP address as the WOA VIP DNS A Record (idm.domain.name).
• One DNS CNAME Record with the Organization Name as the DNS prefix (i.e. org.vra-vip.domain.name) that points to the vRA VIP DNS A Record (vra-vip.domain.name).

In our scenario, the following additional DNS Records will need to be created to support the enabling of multiple Organizations within vRA 8.x:

Note: For the default/provider Organization, we only need the to configure the DNS A Record that points to WOA.

Creating a DNS Records using PowerShell

The DNS Records can be created in a multitude of ways. The way I try to do things is using PowerShell. The following commands provide examples on how to create the required DNS records with PowerShell.

Bringing it all together!

The DNS requirements for vRA 8.x Multi-Organization Tenancy can be very complicated. Hopefully this article has helped demystify which DNS records are required for both Simple and Clustered deployments.

In Part 2 of the Series we will look at how to create Subject Alternate Name certificates to support the vRA 8.x Multi-Organization Tenancy.

Published on 14 April 2020 by Christopher Lewis. Words: 902. Reading Time: 5 mins.

Share this article on: