vSphere CNS/CSI – Architecture

Container applications are highly dynamic with hundreds and sometimes even thousands of containers being created and destroyed in a short span. vSphere solves the problem of managing the lifecycle of all these containers by leveraging Kubernetes and Tanzu. However managing the storage for the application is a different challenge. vSphere Cloud Native Storage (CNS) is …

Tanzu Kubernetes Grid – Backup and Restore with Velero

Tanzu Kubernetes Grid supports using Velero to back up and restore the workloads hosted by TKG Clusters. Velero is an open source community standard tool for backing up and restoring Kubernetes objects and persistent volumes. Velero supports backing up whole workload cluster as well as specific namespaces and resources. This gives the user freedom to …

MinIO – Introduction and Installation

Introduction MinIO is a virtual object storage which is API compatible with Amazon S3. MinIO supports multiple deployment methods starting with BareMetal, Private Cloud, Public Cloud and Kubernetes. MinIO allows us to provision S3 compliant storage in any public/ private cloud, allowing easy application migration and preventing vendor lock-ins. MinIO stores the data as blobs …

Tanzu Kubernetes Grid – Overview

Kubernetes is one of the most talked about subject these days in any organization. Kubernetes allows you to deploy and manage your application and services in a cloud agnostic manner without needing to worry about platform dependencies. But what happens when you have many developers creating multiple K8s clusters a day. How do we manage …

Tanzu Kubernetes Grid – Deploy NSX Advanced Load Balancer

When deploying Tanzu on a vSphere Distributed Switch, We have the option to use NSX Advanced Load Balancer (Formerly AVI) for Kube-VIP and LoadBalancer type K8s services. To deploy the LB download the AVI OVA from Vantage Download page, the site is SSO enabled so your VMware Customer Connect credentials will work here. The deployment …

Tanzu Kubernetes Grid – K8s Authentication – Under the Hood

TKG 1.5 employs Pinniped as the authentication mechanism for user authentication against an existing IdP (LDAP, OIDC etc.). While deploying TKG in my lab, I wanted to understand the mechanics of this implementation and how it works. So lets start with.... What is Pinniped Kubernetes itself does not have a way of creating and managing …