Adding a migration source

Before you start migrating, you create a migration source that represents the source platform from which you will be migrating. This will be added to your migration plan.

This topic describes how to create a source for each of the supported source platforms.

Before you begin

• Determine your workload's fit for migration by using the Linux discovery tool.

• Complete the migration prerequisites specific to your migration:

  • Prerequisites for migrating Linux VMs to clusters on the Cloud
  • Prerequisites for migrating Windows VMs to clusters on the Cloud
  • Prerequisites for migrating Linux VMs to on-prem clusters

• Create a processing cluster specific to your migration:

  • Configuring a Cloud cluster for Linux VMs
  • Configuring a Cloud cluster for Windows VMs
  • Configuring an on-prem cluster for Linux VMs

• Install Migrate for Anthos.

Adding a migration source

Define the migration source you're migrating from by running the migctl source create command or by using the Google Cloud Console. This process adds details needed to migrate from the source you specify — VMware, AWS, Azure, Compute Engine, or on-prem.

migctl on Google Cloud

Compute Engine

1. Create a service account for using Compute Engine as a migration source and download the JSON key file, as described in Configuring a service account.

   Note: The following instructions assume that the name of the JSON key file is m4a-ce-src.json.

2. Create the source using the service account:

   migctl source create ce my-ce-src --project my-project --json-key=m4a-ce-src.json

   Where m4a-ce-src.json specifies the service account.

VMware

migctl source create vmware my-vmware-src --manager-address 1.2.3.4 --cloud-extension my-cloud-extension

Specify the:

• IP address or URL of the Migrate for Compute Engine Manager.

• Specify the name of the Migrate for Compute Engine Extension.

You'll be prompted for the password for your Migrate for Compute Engine management server.

AWS

migctl source create aws my-aws-src --manager-address 1.2.3.4 --cloud-details cloud-details --cloud-extension cloud-extension

Specify the:

• IP address or URL of the Migrate for Compute Engine Manager.

• Specify the Cloud Details name, as configured in Migrate for Compute Engine.

• Specify the name of the Migrate for Compute Engine Extension.

You'll be prompted for the password for your Migrate for Compute Engine management server.

Azure

migctl source create azure my-azure-src --manager-address 1.2.3.4 --cloud-details cloud-details --cloud-extension cloud-extension

Specify the:

• IP address or URL of the Migrate for Compute Engine Manager.

• Specify the Cloud Details name, as configured in Migrate for Compute Engine.

• Specify the name of the Migrate for Compute Engine Extension.

You'll be prompted for the password for your Migrate for Compute Engine management server.

migctl on VMware

VMware

migctl source create local-vmware local-vmware-src --vc '1.2.3.4' --username 'admin'

Where:

• --vc specifies the vCenter DNS name or vCenter IP address.
• --username specifies a user that has permission to access the vCenter. You will be prompted to enter the user's password.

migctl on AWS

AWS

Note: Source VM workloads must be in the same region and account as the destination Anthos clusters on AWS. If necessary, copy the source VM to the account and region of the Anthos clusters on AWS.

Note: When using Anthos clusters on AWS to migrate Linux VMs, the source VM might reference an encrypted EBS volume. If you want to export data to an encrypted volume, ensure that you edit the migration plan accordingly. See Prerequisites for migrating Linux VMs on AWS for more.

1. Create the source:

   migctl source create local-aws local-aws-src --region my-region --access-key-id my-access-key-id

   or:

   migctl source create local-aws local-aws-src --region my-region --credentials-file-path=credentials.csv

   Where:

   • --region specifies the GCP region of your cluster.
   • --access-key-id specifies the AWS access key ID for a user that has permission to access AWS. You are prompted to enter the secret for the access key ID. See Managing access keys for IAM users for more.
   • --credentials-file-path specifies the path to a CSV file, downloaded from the AWS console, containing the credentials. See Configuring AWS IAM groups and instance roles for more on creating the CSV file.

CRD

1. Create a SourceProvider my-source-provider.yaml file to create a migration source:

   apiVersion: anthos-migrate.cloud.google.com/v1beta2
   kind: SourceProvider
   metadata:
     name: my-ce-src
   spec:
     gce:
       project: my-project 
   

2. If you are using Compute Engine as the migration source:

   1. Create a service account and download the JSON key file, as described in Configuring a service account.

      Note: The following instructions assume that the name of the JSON key file is m4a-ce-src.json.

   2. Create a secret named my-secret using the command:

      kubectl create secret generic my-secret -n v2k-system --from-file=cloud-platform-service-account-key=m4a-ce-src.json

   3. Include the secret in the SourceProvider:

      apiVersion: anthos-migrate.cloud.google.com/v1beta2
      kind: SourceProvider
      metadata:
       name: my-ce-src
      spec:
       gce:
         project: my-project
         serviceAccount:
           secretRef:
             name: my-secret
             namespace: v2k-system

3. If you are performing a migration for AWS, Azure, or VMware, edit the SourceProvider to specify the following:

   apiVersion: anthos-migrate.cloud.google.com/v1beta2
   kind: SourceProvider
   metadata:
     name: migration-source-name
   spec:
     migrateForCE:
       management:
         address: manager-ip-address
         cloudDetails: 
           platform: aws | azure | vmware
           name: Name of the source, as configured in Migrate for Compute Engine
         cloudExtension: ID or name of the Migrate for Anthos extension
         password:
           <-- Password for your Migrate for Compute Engine management server. --->
           secretRef:
             name: secret-name
             namespace: v2k-system

4. If you are performing a migration on Anthos clusters on VMware, you must create a secret for the vCenter credentials, in the form:

   kubectl create secret generic secret-vcenter -n v2k-system --from-literal='vc-password=pass1'

   Then include the secretRef:

   apiVersion: anthos-migrate.cloud.google.com/v1beta2
   kind: SourceProvider
   metadata:
     name: my-ce-src
   spec:
     localVmware:
       address: 1.2.3.4
       username: admin
       password:
         secretRef:
           name: secret-vcenter        
           namespace: v2k-system

5. If you are performing a migration on Anthos clusters on AWS, you must create a secret for the AWS credentials, in the form:

   kubectl create secret generic secret-aws -n v2k-system --from-literal='AwsAccessKeyId=admin' --from-literal='AWS_SECRET_ACCESS_KEY=pass1'

   Then include the secretRef:

   apiVersion: anthos-migrate.cloud.google.com/v1beta2
   kind: SourceProvider
   metadata:
     name: my-ce-src
   spec:
     localAws:
       # GCP region of cluster.
       region: my-region
       accessKeyId: admin
       secretAccessKey:
         secretRef:
           name: secret-aws        
           namespace: v2k-system

6. Apply the file:

   kubectl apply -f my-source-provider.yaml

Console

Note: You can only use the Console with processing clusters deployed on Google Cloud.

1. Open the Migrate for Anthos page in the Cloud Console.

   Go to the Migrate for Anthos page

2. Click the Sources tab to display a table containing the available sources.

3. Click Add Source.

4. Select a cluster where you have already installed the Migrate for Anthos components from the drop-down list.

   Note: If you have not already installed Migrate for Anthos components on a cluster, select Add Processing Cluster.

5. Click Next.

6. Specify the name of the source, such as my-ce-source1.

7. Select the Source type.

   Note: VMware, AWS, and Azure sources require that you have alreay installed Migrate for Compute Engine.

8. Click Next.

9. Configure the source:

   1. For Compute Engine:

      1. Select the project that contains the VM that you want to migrate.

      2. Select the service account. You can either:

         1. Create a new service account. You are prompted to enter the name of the new service account.
         2. Use an existing service account if you created one as described in Creating a service account for using Compute Engine as a migration source. When you select this option, you are prompted to enter the contents of the JSON key file associated with that service account.

   2. For VMware, AWS, and Azure:

      1. Specify the IP address or URL of the Migrate for Compute Engine Manager.

      2. Specify the password of the Migrate for Compute Engine Manager.

      3. Specify the name of the Migrate for Compute Engine Extension.

      4. (AWS and Azure only) Specify the Cloud Details name, as configured in Migrate for Compute Engine.

10. Click Next.

11. Select Add Source.

After you add the source, your cluster should have a new SourceProvider whose name is your source name, here my-vmware-src:

kubectl get SourceProvider
NAME                 STATE
my-vmware-src        READY

Viewing a list of sources

You can view the list of migration sources using the migctl source list command or the Google Cloud Console to confirm that you've successfully configured your environment with the migration source.

migctl

migctl source list
NAME            TYPE    STATE   PROJECT     CLOUD-DETAILS   CLOUD-EXTENSION     VCENTER/MANAGER-ADDRESS
my-vmware-src   VMware  READY my-project  VMware        my-cloud-extension  1.2.3.4

Where VCENTER/MANAGER-ADDRESS specifies:

• For Cloud migrations, the address of your Migrate for Compute Engine management server.
• For on-prem migrations, the vCenter DNS name or vCenter IP address.

If a source is not in the READY state, you can get more information about the source, including any error messages, by using the command:

migctl source status my-vmware-src

Console

1. Open the Migrate for Anthos page in the Cloud Console.

   Go to the Migrate for Anthos page

2. Click the Sources tab to display a table containing the available sources.

   In the table VCENTER/MANAGER-ADDRESS specifies the address of your Migrate for Compute Engine management server.

Deleting a source

You can use migctl source delete to delete the source if you want to make a change and create it again. If you run

migctl source delete my-vmware-src

Next Steps

• Begin creating a migration.