Manual Chapter :
Standardize an Application Service for Self-service Deployment
Applies To:
Show Versions![Show Versions](/etc/designs/pcx/techdocs/images/expandversions.gif)
BIG-IQ Centralized Management
- 7.0.0
Standardize an Application Service for Self-service Deployment
Creating service templates for self-service application deployment
![](/content/dam/projects/techdocs/bigiq-7-0-0/central-mgmt/images/vmware-ssg-app-template.png/_jcr_content/renditions/original)
As a network engineer, you can create service templates with the objects and default parameter settings that you want your application manager to deploy. Using that template, and without having a lot of network expertise, the application manager can deploy the application service objects you want by simply specifying a few key values.
When you create a new service template, you can specify a set of objects that define an application service that can then be deployed to your BIG-IP devices. A service template is the baseline for creating a new application service. This allows you to maintain a consistent environment. Parameters that you define as editable are visible and can be revised.
For example, you can standardize your HTTPS application service to use a virtual server, a client SSL profile, a pool, and a node with specific default values. To do this, you create a service template that includes each of these objects. Parameters you don't want edited will be read-only, and those that can change for each application service show as editable. Then you assign permissions for this template to your application manager.
To create an application service, all the application manager needs to do is provide the editable values (virtual server address, number of nodes and their addresses, and so forth) and identify where the application service deploys to. When the application service deploys, BIG-IQ creates just the right objects and settings.
There are three ways to create a service template that defines the objects that you want to include in an application service. Select the option that works best for you.
- Create the service template by cloning another service template.
- Create the service template by importing object settings from a device managed by this BIG-IQ.
- Create the service template manually, defining settings for each object included in the application service.
After you create a service template, it is listed on the Service Catalog Templates page. Note that there is no check mark in the Published column for it. This means two things:
- The template can be edited. You can select it and revise any of the settings for that template.
- You cannot use this template to create an application service.
To make a published template writeable so that you can make revisions, select the check box for it and click
Unpublish
.
You cannot make a template writeable if it is being used by an application service. To revise a template that is being used, you need to either clone that template or change the template that the application service uses.
You can use any available monitor in an application service template to track the health of your applications. The monitor you specify is applied to the devices in your SSG.
For the service scaling BIG-IP device that is load balancing traffic to your SSG, you must use a monitor that supports alias and transparent modes. These include:
- HTTP
- HTTPS
- TCP
- UDP
- ICMP Gateway
If the service scaling BIG-IP device is using an application service with a client-SSL profile, the service scaling device converts the HTTP monitor to HTTPS.
Create a service catalog template starting with a clone of an existing template
BIG-IQ Centralized Management comes with several default service catalog templates for standard scenarios. Using the clone option, you make a copy of a service catalog template and then add or remove only the objects that need to change to produce the service catalog template you want. This allows you to maintain a consistent environment.
This workflow shows you how to clone a service catalog template that is already defined on this BIG-IQ. For details about other ways to define objects, refer to
Create a service catalog template by importing existing objects
or Create a service catalog template by manually specifying objects
on support.f5.com
.- At the top of the screen, clickApplications, then, on the left, clickAPPLICATION TEMPLATES.The screen lists the AS3 and service catalog templates defined on this BIG-IQ.
- Select the check box to the left of any service catalog template you want to clone.
- Click theMorebutton and selectClone.
- Type aNamethat you want to use for the clone, and then clickClone.The system creates a clone of the service catalog template and then opens the new template so you can make changes.
- Add or remove configuration objects to the cloned template until it meets your requirements.When you finish the edits to this new template, you can use it to create a new application service that deploys to your BIG-IP devices.
- ClickSave & Close.
- When you are ready to use a template to create an application, select it and clickPublish.BIG-IQ changes this template to read-only status, so you can use it to create a new application service that deploys to your BIG-IP devices.
Create a service catalog template by importing existing objects
Before you can import objects to an application template, you must have either created or imported the LTM objects from one of your managed BIG-IP devices.
When
you create a new service catalog template, you
specify a set of objects that can be used to
create an application service. Later, when you use
this service catalog template to create an
application service, you can specify values for
the objects that are defined as editable.
Properties the template defines as not editable
are not visible when you create an application
service, but are included using the default values
specified in the service catalog template. This
allows you to maintain a consistent environment.
When you use this template to create a service
catalog template application service, BIG-IQ
deploys the objects to your managed BIG-IP
devices.
- At the top of the screen, clickApplications, then, on the left, clickAPPLICATION TEMPLATES.The screen lists the AS3 and service catalog templates defined on this BIG-IQ.
- Under Service Catalog Templates, clickCreate.The Create Service Template screen opens to General Properties.
- Type aNameand (optional)Descriptionfor the service catalog template you are creating, and then clickSave.Once you define the name and save the template, you need to define the default objects for this template. This work flow shows you how to import objects that already exist on devices managed by this BIG-IQ. For details about other ways to define objects, refer toCreate a service catalog template starting with a clone of an existing templateorCreate a service catalog template by manually specifying objectsonsupport.f5.com.
- On the left, underPROPERTIES, expand , and then select any object type.For example, you could expandLOCAL TRAFFIC, and then clickVirtual Servers.The screen lists any objects defined for this template along with buttons you can use to import or create new objects.
- ClickImport.The Import Resources screen opens. The top half of the screen displays resources selected for importing. The bottom half provides controls for selecting objects to import to this template.
- From the select list about half way down the screen, select one of the object types you want to import.Objects of the type you selected that are currently defined on this BIG-IQ display just below the Select list.
- Select the check box for each object that you want to import.The lower right part of the screen displays preview information for the selected object. If you select multiple objects, the most recently selected item is previewed.
- When you have selected all of the objects that you want for a particular type, clickAdd Selected.The selected objects show in the list of objects to be imported.
- Repeat the previous three steps for each of the default object types that you want to import to this template.
- When you have assembled all of the objects that you want to import to this template, clickImport.When you import an object created outside of the service catalog template user interface into a service catalog template, only the object name is set to be editable (and visible when someone uses this template to create a new application service ). For example, if a virtual server namedSeattleServeris created on one of the BIG-IP devices that a BIG-IQ manages, that virtual server is imported to the BIG-IQ when you discover and import that device. You can then importSeattleServerinto a service catalog template, but only the name (SeattleServer) appears when that template is used to create an application service. You can edit the visibility setting on the Edit Template screen for the imported object.BIG-IQ adds the imported objects to the service catalog template. Objects that are set to be editable display when someone uses this template to create a new application service.
- If you want to edit any of the settings for the objects you imported, click the name of the object to access the edit screen for that object.When you save the changes for an object, the revisions you made become part of the template, and you can use it to create a new application service that deploys to your BIG-IP devices.
- ClickSave & Close.
- When you are ready to use a template to create an application, select it and clickPublish.BIG-IQ changes this template to read-only status, so you can use it to create a new application service that deploys to your BIG-IP devices.
Create a service catalog template by manually specifying objects
When
you create a new service catalog template, you
specify a set of objects that can be used to
create an application service. Later, when you use
this service catalog template to create an
application service, you can specify values for
the objects that are defined as editable.
Properties the template defines as not editable
are not visible when you create an application
service, but are included using the default values
specified in the service catalog template. This
allows you to maintain a consistent environment.
When you use this template to create a service
catalog template application service, BIG-IQ
deploys the objects to your managed BIG-IP
devices.
- At the top of the screen, clickApplications, then, on the left, clickAPPLICATION TEMPLATES.The screen lists the AS3 and service catalog templates defined on this BIG-IQ.
- Under Service Catalog Templates, clickCreate.The Create Service Template screen opens to General Properties.
- Type aNameand (optional)Descriptionfor the service catalog template you are creating, and then clickSave.Once you define the name, you can define the default objects for this template. This workflow shows you how to manually define objects for this template. For details about other ways to create templates, refer toCreate a service catalog template starting with a clone of an existing templateorCreate a service catalog template by importing existing objectsonsupport.f5.com.
- If you have created any scripts that BIG-IQ should run before or after it creates this application service, or after you delete this application service, clickPROPERTIES, and then select the ones you want.You can find the screen used to create scripts here:.
- ClickSave.BIG-IQ saves the name and your script selections. Now you can start adding the traffic management and security objects that you want to define for this application service.
- On the left, underPROPERTIES, expandLOCAL TRAFFICorSECURITY POLICIESand then select any object type.For example, you could expandLOCAL TRAFFIC, and then clickVirtual Servers.Until you configure at least one virtual server for this template, you cannot select any security policies to attach to the virtual servers in this template.
- ClickCreate.The screen you use to define the selected object type (for example, New Virtual Server) opens.
- In thePromptfield, type the text string that you want to display for this object when someone uses this template to create a new application service.
- If you want applications created with this template to be able to include more than one copy of the object you are adding, selectEnableforAllow Multiple Instances.
- Specify all of the default parameters that you want to define for this object.Before you can add an object to the template, you must specify at least the required parameters for that object type. For example, to specify a virtual server, you only need to provide a name, a destination address, and a service port, even though there are another fifty or so settings you could specify.
- For each parameter that you specify, determine whether you want the person who deploys an application service using this template to be able to edit the default settings you are defining.If you checkEditableWhen this template is used to create an application service, this parameter will be visible and the default values configurable.If you do not checkEditableWhen this template is used to create an application service, this parameter will be included in the application service (with the settings that you specify here), but it will not be visible in the user interface.Only the parameters you select appear in the user interface when someone deploys an application service using this template.
- As you specify parameter values for this template object, you can clickPreviewin the upper right corner to see what the user interface will look like when someone uses this template to deploy an application service.For detailed information on the parameter settings to specify for particular use cases, refer to the documentation for that object type onsupport.F5.com. For example, for help understanding the parameters you specify for a client SSL profile, you would go tosupport.F5.com, selectBIG-IQ Centralized Management, select the BIG-IP version you are using, and then selectManaging Local Traffic Profiles.
- When you finish specifying parameters for this object, clickSave.BIG-IQ adds the object you defined to the list of objects in this template. When you finish adding an object to a template, you can use it to create an application service.
- Continue this process until you have added all of the objects needed in this template.When you finish the edits to this new template, you can use it to create a new application service that deploys to your BIG-IP devices.
- ClickSave & Close.
- When you are ready to use a template to create an application, select it and clickPublish.BIG-IQ changes this template to read-only status, so you can use it to create a new application service that deploys to your BIG-IP devices.
Provide users access to self-serve applications in a scalable cloud
Before you assign user access to a service scaling group, there are two tasks to perform: one on the BIG-IQ and one in your VMware vCenter environment.
- To assign access to the resources that an application manager needs so they can create and deploy applications, you must have first configured authentication (Local, LDAP, RADIUS, or TACACS+). See theF5 BIG-IQ Centralized Management: Authentication, Roles, and User Managementguide.
- Before a user can manage BIG-IP devices in a VMware service scaling group, you must add them to a group in your VMware vCenter that includes the following roles:
- Datastor
- Resource
- Virtual machine
- vApp
![workflow graphic, assign permissions to end users step](/content/dam/projects/techdocs/bigiq-7-0-0/central-mgmt/images/assign-user-access-vmware-ssg.png/_jcr_content/renditions/original)
After you create the templates and service scaling groups (SSG), you can provide access to these resources to application managers. You can provide different users access to different resources, according to their needs. With this access, application managers can create and monitor applications as needed, and interact with only those resources that they need to do their job. This simplifies the complexity of the objects that they have to be aware of, while allowing them the autonomy to create applications as they need them.
To provide access, you create a user, and associate the user to a custom application role with access to the resources they need to create and deploy applications into the scalable cloud.
- At the top of the screen, clickSystem.
- On the left, click.
- Near the top of the screen, click theAddbutton.
- From theAuth Providerlist, select the authentication method you want to use for this user.A user must belong to an LDAP group or have an assigned BIG-IQ role, or authentication will fail.
- In theUser Namefield, type the name for this user.
- In thePasswordandConfirm Passwordfields, type the password for this new user.You can change the password any time.
- On the left, click.
- On the left, underCUSTOM ROLES, clickApplication Roles.
- ClickAdd.
- After you specify aNameand an optionalDescription, select theActive Usersthat you want to provide access to, and move them to theSelectedlist.
- ForService Catalog Templates, select each template you want to provide access to and move it to theSelectedlist.
- ForService Scaling Groups, select the service scaling group you created and move it to theSelectedlist.
- Click theSave & Closebutton.
It's a good idea to log in as this new user to confirm that the access you provided is correct. Once you verify that, you can give the user their user name and password for self-service access to application deployment.