TKG Shared AVI SE Group using Antrea NodePortLocal Introduction If you have been following my blogs on TKG with AKO or have been testing AKO, you will soon realize you will need multiple AVI SE Groups, one AVI SE Group per Kubernetes Cluster. So with TKG and powered by ClusterAPI, you can create Kuberetes cluster really easily, and thus if you want to use AKO, you will quickly found out that you will need to create multiple AVI SE Groups. ...

AVI / NSX ALB WAF POC Introduction Recently there have been a few customers who wanted to test out the AVI WAF and so I thought it would be great to document down some of the testing and learnings. Pre-requisite I would assume you already understand the AVI architecture and iWAF architecture. If not, there are some good videos on AVI Networks explaining these concepts. Application Delivery How-To Videos: App Security / WAF ...

- How to install AMKO on TKG Multicloud (TKG-M) In my previous post, I written a guide on how to install AMKO on TKG-Service. In this guide, I will share on how to get AMKO on TKG-Multi-Cloud. There are quite a few good blogs on how to install TKG-M so I will skip that for my blog and just focusing on the installation of AMKO. At this point of writing which Jul/Aug 2021, the version of TKG-M is v1. ...

How to install AMKO on Tanzu Kubernetes Clusters(TKC) / TKG-Service ***Disclaimer: If you are using TKG-Service with NSX-T network with AMKO, this solution is not supported by VMware at the moment. It would be good for POC / Testing only. ***Update (May 2021): I have tested this on vSphere 7.0U2, NSX-T 3.1 and AMKO 1.4.1, below steps are still valid. Introduction Well, let me guess. If you stumble on this blog post, I would assume you have seen the goodness and coolness of AKO (AVI Kubernetes Operator). ...

In this section, we will perform some testing on the TKG clusters.   Step 1 – Login to the TKG Cluster and switch to the tkg cluster context. kubectl vsphere login server 10.30.10.1 vsphere-username administrator@vsphere.local insecure-skip-tls-verify tanzu-kug-cluster tanzu-kubernetes-cluster-namespace demo-app-01 kubectl config use-context tkg-cluster kubectl get nodes   Step 2 – Apply ClusterRole Security Policies. kubectl apply -f https://raw.githubusercontent.com/dstamen/Kubernetes/master/demo-applications/allow-runasnonroot-clusterrole.yaml   Step 3 – Deploy the application. ...

In this section, we will enable Workload Management, creation of Supervisor Cluster, enabling Content Library as well as creation of TKG Clusters also known as Guest Clusters. Step 1 – Create the VM Storage Policies. Login to vCenter if you have not. Menu -> Datastores. Click on the datastore that you like to use for vSphere with Kubernetes. Under Tags, Click on Assign. Click on ADD TAG. ...