Vault - cloud template (virtual machines)

category: solutionz · date: 2024-12-31 · updated: 2026-10-02 · author: LALA

Vault Solution · Config document · referenced from Virtual machines and OS build

The cloud template that created the three networks and eight virtual machines of the PROD environment on the VMware-based private cloud. The platform's automation tool reads the template and builds everything in it as one deployment.

Item	Value
Format	VMware Aria Automation (vRealize Automation) cloud template
Shown here	PROD
Other environments	NONPROD is the same with its own names and addresses; COMMON has three Vault nodes
Not in the template	the 100 GiB data disk of each Vault node, added to the deployment afterwards

The file

yaml

formatVersion: 1
inputs: {}
resources:

  NET_PROD_VAULT_SERVICE:
    type: Cloud.NSX.Network
    properties:
      networkType: existing
      constraints:
        - tag: 'name:<NETWORK_SEGMENT_TAG>'
      name: 'NET_PROD_VAULT_SERVICE'

  NET_PROD_VAULT_LB:
    type: Cloud.NSX.Network
    properties:
      networkType: existing
      constraints:
       - tag: 'name:<NETWORK_SEGMENT_TAG>'
      name: 'NET_PROD_VAULT_LB'

  NET_PROD_VAULT_ADMIN:
    type: Cloud.NSX.Network
    properties:
      networkType: existing
      constraints:
       - tag: 'name:<NETWORK_SEGMENT_TAG>'
      name: 'NET_PROD_VAULT_ADMIN'

  VM_PROD_VAULT_BASTION1:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 2
      totalMemoryMB: 4096
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.3.18
          gateway: 10.10.3.17
          netmask: 255.255.255.248
          network: '${resource.NET_PROD_VAULT_ADMIN.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_BASTION1

  VM_PROD_VAULT_LB1:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 2
      totalMemoryMB: 4096
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.2.10
          gateway: 10.10.2.9
          netmask: 255.255.255.248
          network: '${resource.NET_PROD_VAULT_LB.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_LB1

  VM_PROD_VAULT_LB2:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 2
      totalMemoryMB: 4096
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.2.11
          gateway: 10.10.2.9
          netmask: 255.255.255.248
          network: '${resource.NET_PROD_VAULT_LB.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_LB2

  VM_PROD_VAULT_NODE1:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 4
      totalMemoryMB: 16384
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.1.34
          gateway: 10.10.1.33
          netmask: 255.255.255.240
          network: '${resource.NET_PROD_VAULT_SERVICE.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_NODE1

  VM_PROD_VAULT_NODE2:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 4
      totalMemoryMB: 16384
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.1.35
          gateway: 10.10.1.33
          netmask: 255.255.255.240
          network: '${resource.NET_PROD_VAULT_SERVICE.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_NODE2

  VM_PROD_VAULT_NODE3:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 4
      totalMemoryMB: 16384
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.1.36
          gateway: 10.10.1.33
          netmask: 255.255.255.240
          network: '${resource.NET_PROD_VAULT_SERVICE.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_NODE3

  VM_PROD_VAULT_NODE4:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 4
      totalMemoryMB: 16384
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.1.37
          gateway: 10.10.1.33
          netmask: 255.255.255.240
          network: '${resource.NET_PROD_VAULT_SERVICE.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_NODE4

  VM_PROD_VAULT_NODE5:
    type: Cloud.vSphere.Machine
    properties:
      image: <OL8_LVM_IMAGE>
      cpuCount: 4
      totalMemoryMB: 16384
      customizationSpec: Linux-selfmanaged
      cloudConfig: null
      tags:
        - key: deployedby # Don't change this
          value: '${env.requestedBy}' # Don't change this
      constraints:
        - tag: 'compute:${env.projectName}' # Don't change this
      networks:
        - tags: []
          address: 10.10.1.38
          gateway: 10.10.1.33
          netmask: 255.255.255.240
          network: '${resource.NET_PROD_VAULT_SERVICE.id}'
          assignment: static
          assignIPv6Address: false
          assignPublicIpAddress: false
      name: VM_PROD_VAULT_NODE5