虚拟主机管理器和 Amazon Web Services

您可以使用虚拟主机管理器 (VHM) 收集 Amazon Web Services (AWS) 中的实例。

VHM 允许 SUSE Multi-Linux Manager 获取并报告有关您的群集的信息。有关 VHM 的详细信息，请参见 虚拟主机管理器。

1. 创建 Amazon EC2 VHM

虚拟主机管理器 (VHM) 在 SUSE Multi-Linux Manager 服务器上运行。

Ensure you have installed the virtual-host-gatherer-libcloud package on the SUSE Multi-Linux Manager Server.

过程：创建 Amazon EC2 VHM

  1. 在 SUSE Multi-Linux Manager Web UI 中，导航到系统  虚拟主机管理器。

  2. Click Create and select Amazon EC2 from the drop-down menu.

  3. In the Add an Amazon EC2 Virtual Host Manager section, use these parameters:

    • In the Label field, type a custom name for your VHM.

    • In the Access Key ID field, type the access key ID provided by Amazon.

    • In the Secret Access Key field, type the secret access key associated with the Amazon instance.

    • In the Region field, type the region to use.

    • In the Zone field, type the zone your VM is located in. This is required for subscription matching to work. For more information about setting regions and zones, see SUSE 支持和 VM 区域.

  4. 单击 创建 保存更改并创建 VHM。

  5. On the Virtual Host Managers page, select the new VHM.

  6. On the Properties page, click Refresh Data to inventory the new VHM.

要查看已清点的对象和资源，请导航到系统  系统列表  虚拟系统。

Instances running on the Amazon public cloud report a UUID to the SUSE Multi-Linux Manager Server in the format of an i followed by seventeen hexadecimal digits:

I1234567890abcdef0

2. SUSE 支持和 VM 区域

Public cloud providers use regions to define the physical geographic location of the datacenter providing virtual machines. For example, US-East, or Asia.

Regions are then further divided into zones. For example, the US-East region might contain zones called us-east-2a and us-east-2b, among others.

SUSE uses the zone of a virtual machine to determine the appropriate subscription to provide. If all of your VMs are provided by the same zone, you are within the terms and conditions of the 1-2 Virtual Machines subscription.

If your VMs are provided by different zones, even if they are within the same region, you might not meet the conditions of the 1-2 Virtual Machines subscription. In this case, check your subscription carefully.

对于 BYOS 实例 (Bring-your-own-subscription)，所有安装的产品均会传递给订阅匹配器。如果您的公有云实例为 PAYG (Pay-as-you-go) 类型，订阅匹配器计算中将会排除这些实例的基础产品。计算实例是 PAYG 还是 BYOS 类型的过程在注册时或执行硬件刷新操作时完成。

有关详细信息，请参见 https://www.suse.com/products/terms_and_conditions.pdf 或联系 SUSE。

3. 虚拟主机管理器的 AWS 权限

出于安全原因，请始终为要执行的任务授予尽可能最小的权限。不建议对连接到 AWS 的用户使用具有过高权限的访问密钥。

为了让 SUSE Multi-Linux Manager 从 AWS 收集所需的信息，VHM 需要相应权限来说明 EC2 实例和地址。一种收集此信息的方法是专门为此任务创建一个新的 IAM 用户（Identity and Access Management，身份和访问权限管理），并且创建如下策略并关联到该用户：

{
    "Version": "2012-10-17",
    "Statement":[
        {
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeAddresses",
                "ec2:DescribeInstances"
            ],
            "Resource": "*"
        }
    ]
}

您可以通过限制对特定地区的访问来对权限施加更多限制。有关详细信息，请参见 https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ExamplePolicies_EC2.html#iam-example-read-only。