# Huawei Cloud

## Features

- Virtual machine provisioning
- Backups
- Brownfield VM management and migration
- Hypervisor remote console
- Cloud sync
- Lifecycle management and resizing
- Network security group creation
- Network security group management
- Router and network creation
- Load balancer services
- Docker host management and configuration
- Floating IP assignment
- Huawei OBS buckets (create, manage, delete, and discovery)
- Huawei SFS (create, manage, and delete)

## Integrate Huawei Cloud with HPE Morpheus Enterprise

To integrate Huawei Cloud with HPE Morpheus Enterprise, we’ll gather the following pieces of information:

- Account Name
- Identity (IAM) API URL
- Project
- Username
- Password

Begin by logging into your [Huawei Cloud console](https://console-intl.huaweicloud.com/console). If you’re not currently logged in, you will be prompted to do so. Once on the console page, hover over your username in the upper-right corner of the application window and select “My Credentials”.

![../../../_images/1credentials.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-073462C5-393F-4B31-B939-5DB39532766C-high.png)

From the credentials page, we can gather the Account Name and the Project Name, record them for later when we provide the integration information to HPE Morpheus Enterprise.

![../../../_images/2account_project.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-0EA453C5-849B-4F01-AA40-AEDFFCC3A737-high.png)

To gather the API endpoint URL, take a look at the complete list of [endpoints](https://developer.huaweicloud.com/en-us/endpoint). If a specific endpoint exists for your region, use it. In any other case use the endpoint for all regions. It will be formatted like this: <https://iam.myhuaweicloud.com/v3>.

![../../../_images/3identity_api_endpoints.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-8DEF10C6-F6CD-4E55-9D76-D67AA280E6CF-high.png)

With this information gathered, and presuming you know the credentials for the service account you wish to use, we can move back into HPE Morpheus Enterprise-UI.

IMPORTANT

Integrating HPE Morpheus Enterprise with Huawei Cloud requires a service account that has programmatic access.

Navigate to Infrastructure > Clouds and click + ADD. Scroll to Huawei Cloud and click NEXT. The information we’ve gathered will be plugged into the CREATE CLOUD modal. The DOMAIN ID field will accept the Account Name field we gathered. Your completed CREATE CLOUD modal will look similar to the one pictured below:

![../../../_images/4add_cloud.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-029DC867-5A63-4F28-9423-F5C3C5C2141F-high.png)

After clicking NEXT, add this new Cloud to a Group or create a new Group. On finalizing the wizard, Huawei Cloud will be integrated into HPE Morpheus Enterprise and ready for provisioning. If you opted to inventory existing workloads, those will be onboarded shortly.

## Add/Edit Huawei Cloud Modal Fields

### Cloud Configuration

NAME
:   Name of the Cloud in HPE Morpheus Enterprise

CODE
:   Unique code used for api/cli, automation and policies.

LOCATION
:   Description field for adding notes on the cloud, such as location.

VISIBILITY
:   For setting cloud permissions in a multi-tenant environment. Not applicable in single tenant environments.

TENANT
:   If Visibility is set to Private, select the Tenant the Cloud resources will assigned to.

ENABLED
:   When disabled, automatic Cloud sync is paused and the Cloud will not be selectable for provisioning.

AUTOMATICALLY POWER ON VMS
:   When enabled, HPE Morpheus Enterprise will maintain the expected power state of managed VMs. HPE Morpheus Enterprise will power on any managed VMs in the Cloud that have been shut down for unknown reasons (not powered off by HPE Morpheus Enterprise) to ensure availability of services.

    NOTE

    When “AUTOMATICALLY POWER ON VMS” is enabled, the power state of managed VMs should be maintained in HPE Morpheus Enterprise. This setting is not applicable to discovered/unmanaged resources.

### Details

IDENTITY API URL
:   The v3 identity endpoint. See the integration steps above for more detail

DOMAIN ID
:   The DOMAIN ID field takes the “Account Name” as shown on the [Basic Informati](https://account-intl.huaweicloud.com/usercenter/?locale=en-us#/userindex/accountInfo) of the account. See the integration steps above for more detail

PROJECT
:   The target project name. See the integration steps above for more detail

USERNAME
:   The service account username. See the integration steps above for more detail

PASSWORD
:   The integration service account password. See the integration steps above for more detail

IMAGE FORMAT
:   Select QCOW2, RAW or VMDK image type

Image Store
:   Set an OBS bucket as a permanent store location for HPE Morpheus Enterprise virtual images. Users are limited to uploading images of 2GB or less in size if an OBS bucket is not specified here

Inventory Existing Instances
:   Select for HPE Morpheus Enterprise to discover and sync existing VMs

Enable Hypervisor Console
:   Hypervisor console support for openstack currently only supports novnc. Be sure the novnc proxy is configured properly in your openstack environment.

TIP

When using the RAW image format, you can bypass the image conversion service within the cloud leading to quicker performance. Other image formats are converted to RAW format and back when performing various actions. Using the RAW format from the start will bypass these conversion steps.

#### Advanced Options

DOMAIN
:   Specify a default domain for instances provisioned to this Cloud.

SCALE PRIORITY
:   Only affects Docker Provisioning. Specifies the priority with which an instance will scale into the cloud. A lower priority number means this cloud integration will take scale precedence over other cloud integrations in the group.

APPLIANCE URL
:   Alternate Appliance url for scenarios when the default Appliance URL (configured in admin  >  settings) is not reachable or resolvable for Instances provisioned in this cloud. The Appliance URL is used for Agent install and reporting.

TIME ZONE
:   Configures the time zone on provisioned VM’s if necessary.

DATACENTER ID
:   Used for differentiating pricing among multiple datacenters. Leave blank unless prices are properly configured.

NETWORK MODE
:   Unmanaged or select a Network Integration (NSX, ACI etc)

LOCAL FIREWALL
:   On or Off. Enable to managed Host and VM firewall/IP Table rules (linux only)

SECURITY SERVER
:   Security Server setting is for Security Service Integrations such as ACI

TRUST PROVIDER
:   Select Internal (Morpheus) or an existing Trust Provider Integration

STORAGE MODE
:   Single Disk, LVM or Clustered

BACKUP PROVIDER
:   Select a backup provider. Depending on the Cloud type and any currently-configured backup plugins you may select Internal Backups (Morpheus) or another configured backup solution

REPLICATION PROVIDER
:   Sets the default Replication Provider for the Cloud. Select an existing Replication Provider Integration

GUIDANCE
:   Enable Guidance recommendations on cloud resources.

COSTING
:   Enable for HPE Morpheus Enterprise to sync Costing data from the Cloud provider, when available. For on-prem Clouds, enabling costing activates a costing service designed to mirror the live costing experience of public clouds, including invoicing with line items and real-time cost data (Operations > Costing > Invoices). If your organization utilizes reserved instances and you want to pull in related pricing data, some Cloud integrations include the option to select Costing and Reservations. If this is not relevant, select Costing to save money on additional calls to the Cloud provider’s costing API.

DNS INTEGRATION
:   Records for instances provisioned in this cloud will be added to selected DNS integration.

SERVICE REGISTRY
:   Services for instances provisioned in this cloud will be added to selected Service Registry integration.

CONFIG MANAGEMENT
:   Select a Chef, Ansible or Puppet integration to be used with this Cloud.

CMDB
:   Select CMDB Integration to automatically update selected CMDB.

CMDB DISCOVERY
:   When checked, any automatically discovered (unmanaged) servers onboarded into HPE Morpheus Enterprise from this Cloud will also have CMDB records created for them.

CHANGE MANAGEMENT
:   Select an existing Change Management Integration to set on the Cloud. ex: Cherwell

AGENT INSTALL MODE
:   - SSH / WINRM / Guest Execution: HPE Morpheus Enterprise will attempt to use SSH, WINRM or Guest Execution for Agent install.
    - Cloud Init / Unattend (when available): (DEFAULT) HPE Morpheus Enterprise will utilize Cloud-Init or Cloudbase-Init for agent install when provisioning images with Cloud-Init/Cloudbase-Init installed. HPE Morpheus Enterprise will fall back on SSH or WINRM if cloud-init is not installed on the provisioned image. Morpheus will also add Agent installation to Windows unattend.xml data when performing Guest Customizations or utilizing syspreped images.

VDI GATEWAY
:   Set a VDI Gateway for outbound communication from the HPE Morpheus Enterprise Appliance to the vdi endpoints. VDI Gateways can be added in `/tools/vdi/gateways`

#### CUSTOM LOGOS

When integrating a Cloud, it will appear by default throughout the UI with its standard logo (VMware logo for VMware Clouds, etc.). If desired, you may upload a custom logo that should appear instead. This might be useful for MSPs which might not want to reveal the Cloud type underlying its services. A dark mode version of the logo may also be uploaded if the standard logo doesn’t look right against the HPE Morpheus Enterprise dark mode theme. Checking USE DEFAULT CLOUD LOGOS allows the user to return to the standard logo for the Cloud type without deleting the custom uploaded logo.

#### INVENTORY OPTIONS

Inventory options allow you to set a default active or inactive state for certain discovered resources. The list of available resources to configure will vary based on the Cloud type and its supported resources. By default, all possible resources for the Cloud type will be discovered in an active state. Uncheck the box for some or all resources to discover them in an inactive state. The list of potential resources that may appear include:

- Service Plans
- Resource Pools
- Networks
- Security Groups
- Datastores
- Folders

#### Provisioning Command

PROXY
:   Set a proxy for inbound communication from Instances to the HPE Morpheus Enterprise Appliance. Proxies can be added in the Infrastructure  >  Networks  >  Proxies tab.

Bypass Proxy for Appliance URL
:   Enable to bypass proxy settings (if added) for HPE Morpheus Enterprise Agent communication to the Appliance URL.

NO PROXY
:   Include a list of IP addresses or name servers to exclude from proxy traversal

USER DATA (LINUX)
:   Add cloud-init user data. HPE Morpheus Enterprise 4.1.0 and earlier assumes bash syntax. HPE Morpheus Enterprise 4.1.1 and later supports all User Data formats. Refer to <https://cloudinit.readthedocs.io/en/latest/topics/format.html> for more information.

## Huawei Scalable File Service (SFS)

The HPE Morpheus Enterprise integration with Huawei Cloud includes the capability to work with Huawei Scalable File Service (SFS). SFS is shared file storage hosted on Huawei Cloud. By integrating HPE Morpheus Enterprise with Huawei Cloud you can discover, create, manage, and delete SFS servers, as well as view and work with the file shares and files contained therein.

### SFS Server Discovery and Management

On integrating Huawei Cloud with HPE Morpheus Enterprise, SFS servers and file shares are discovered automatically after a short time. The server(s) can be viewed in Infrastructure > Storage > Servers. By viewing the server detail page and clicking EDIT, the storage server can be scoped as needed. Administrators can choose to scope to other Huawei Cloud integrations (if more than one relevant integration currently exists), select from synced availability zones, and scope the storage server to specific Tenants if desired.

![../../../_images/1editServer.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-DD161EBC-E99E-449A-8B3E-BA8C021C3670-high.png)

Additionally, Huawei SFS servers can be created from the storage server list page (Infrastructure > Storage > Servers) directly in HPE Morpheus Enterprise. Click + ADD to begin and set the storage server type value to “Huawei SFS”. Just like with existing synced SFS servers, those created from HPE Morpheus Enterprise can be scoped as needed.

![../../../_images/2addServer.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-E7F8C4A2-D408-4C34-9C04-C9C7C27A20F0-high.png)

### SFS File Share Discovery and Management

Discovered file shares will appear among other file shares synced with HPE Morpheus Enterprise in Infrastructure > Storage > File Shares. Depending on the number of cloud integrations in your HPE Morpheus Enterprise appliance and the number of cloud integrations available to your user account, this list may be quite large. Using the search bar on this page, we can narrow down the list to file shares displayed to those whose names match the search terms.

![../../../_images/3shareList.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-9FD9B522-BF4F-42A5-A282-16726D330F86-high.png)

We can drill into individual file shares by clicking on their hyperlinked name in the list of all integrated file shares. From the file share detail page, a list of files will appear on the files tab. Begin the process of adding a new file by clicking + ADD. The Access tab on the file shares detail page allows users to view and manage ACL rules.

NOTE

A “Failed to load files from storage provider” is present when the HPE Morpheus Enterprise appliance doesn’t have access to the file share.

New Huawei SFS file shares can be created directly in HPE Morpheus Enterprise. From the file shares list page, get started by clicking + ADD. Select the type “Huawei SFS Share”. Set the storage service field to a pre-existing Huawei SFS server. A friendly name for the file share in HPE Morpheus Enterprise and selecting from synced availability zones are required fields.

![../../../_images/4addShare.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-E135CE4B-C1C8-44C1-9F18-328901E4C10F-high.png)

## Huawei Object Storage Service (OBS)

The HPE Morpheus Enterprise integration with Huawei Cloud also supports Object Storage Service (OBS). HPE Morpheus Enterprise will automatically onboard existing OBS servers and buckets shortly after completing the cloud integration. Before you can add a new OBS server from HPE Morpheus Enterprise, you must know or generate a key and secret value from the Huawei console and must provide a Huawei OBS API endpoint.

### Generate a Key and Secret

From the Huawei web console, log into the account used to integrate Huawei Cloud with HPE Morpheus Enterprise. Hover over your account name in the upper-right corner of the application window and click “My Credentials”. Select “Access Keys” from the left-hand sidebar. To create a new key, click + Create Access Key. Complete the two-factor authentication steps in the box that appears.

![../../../_images/1createKey.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-4FC170FA-49EF-4072-A6F4-42311AB880D9-high.png)

Once the key is generated, download or record the key and store it in a safe location. The key will not be viewable or available for download again after this point.

### Create OBS Server in HPE Morpheus Enterprise

With the key and secret value in hand from the previous section, navigate to Infrastructure > Storage > Servers. Click + ADD. On changing the server type to Huawei OBS, you will see the fields for the access key and the secret key. OBS API endpoints can be found in [Huawei endpoint documentation](https://developer.huaweicloud.com/en-us/endpoint). Include those three values in the Create Server modal along with a friendly name for use in HPE Morpheus Enterprise UI. Just like with SFS objects, we can choose to scope the server to all or specific Tenants at this time.

![../../../_images/2addObsServer.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-BFC92FBB-94A2-46A8-ABFC-E7397C7C6E9E-high.png)

### Create Huawei OBS Bucket

With an OBS server onboarded or created in HPE Morpheus Enterprise, you’re able to create and manage Huawei OBS buckets as needed. To create a new bucket, navigate to Infrastructure > Storage > Buckets. Click + ADD and select “Huawei OBS Bucket”. The following fields are required when creating a Huawei OBS bucket:

- **NAME**: A friendly name for use in HPE Morpheus Enterprise UI
- **STORAGE SERVICE**: Choose the OBS server to associate the new bucket with
- **BUCKET NAME**: The name of the bucket in Huawei Cloud, this must be unique
- **STORAGE CLASS**: If needed, view the [discussion of storage classes](https://support.huaweicloud.com/en-us/eu-west-0-usermanual-obs/en-us_topic_0050937852.html) in Huawei support documentation
- **BUCKET ACL**: Public Read, Public Read/Write, or Private
- **BUCKET POLICY**: Public Read, Public Read/Write, or Private
- **STORAGE QUOTA**: Set to 0 for no quota

Once finished, click SAVE CHANGES

![../../../_images/3createBucket.png](https://support.hpe.com/hpesc/public/api/document/sd00007732en_us/GUID-6A0E3B1B-0B05-4CA3-BBF6-E319A6DD6390-high.png)

## Network and Router Creation

Once a Huawei Cloud is integrated into HPE Morpheus Enterprise, new network creation options become available. When adding a new network (Infrastructure > Networks > NetworksTab), a new type labeled “Huawei Private Network” is available when clicking +ADD. When the user creates this network construct in HPE Morpheus Enterprise, a layer two subnet is created but it’s not connected to a Virtual Private Cloud (VPC). This is by design as an Internet-routable network is not always desired. Continue on with this section after creating the network to also create a VPC (router).

### Create a network

#### Procedure

1. Navigate to Infrastructure > Networks
2. Click on the Networks tab
3. Click +ADD
4. Select Huawei Private Network
5. Complete the modal based on requirements for the new network
6. Click SAVE CHANGES

### Create a router

#### Procedure

1. Navigate to Infrastructure > Networks
2. Click on the Routers tab
3. Click +ADD
4. Select Huawei Router
5. Complete the modal based on requirements for the new router
6. Click SAVE CHANGES

#### Results

When creating a router, it’s helpful to note that the External Network is the floating IP network that has been assigned to the Huawei project. This network will grant your Instances their routes out to the Internet. The Internal Subnet can be a layer two subnet that you may have created in the previous step. In addition, multiple subnets can be added to the router (VPC) and the IP address on the subnet would be the router’s internal IP address.
