Prerequisites to install Application Service Adapter

To install Application Service Adapter, you need to first complete the prerequisites listed here.

Application Service Adapter requires using Cloud Foundry command-line interface (cf CLI) v8.1.0 or later. VMware recommends using v8.5.0 or later. For more information, see the cf CLI repository on GitHub.

Kubernetes cluster and container image registry

To install Application Service Adapter, you need:

  • Admin access to a Kubernetes cluster that meets the same requirements as the version of Tanzu Application Platform you have installed, which must be v1.5. See Kubernetes cluster requirements in Prerequisites.

    • As of Tanzu Application Platform v1.5, Kubernetes v1.24, v1.25, or v1.26 is required. There are additional requirements for some implementations. For example, Amazon Elastic Kubernetes Service (EKS) requires containerd as the Container Runtime Interface (CRI) among with other requirements.

  • A container image registry. See VMware Tanzu Network and container image registry requirements in Prerequisites.

Required installation tools

The following tools must be installed in the workstation environment in which you intend to perform the installation:

After you install the Tanzu CLI, run tanzu plugin list to verify that the required package and secret plug-ins are installed. To install these plug-ins, run:

tanzu plugin install --local cli package
tanzu plugin install --local cli secret

Required components

The following dependencies must be installed to the target Kubernetes cluster before installing Application Service Adapter. If you completed an installation of the full profile or the iterate profile of Tanzu Application Platform v1.3 or v1.4 in your target Kubernetes cluster, these dependencies are already present.

  • Cluster Essentials. See Deploying Cluster Essentials v1.5.

    Note

    If you are operating a Tanzu Kubernetes Grid cluster, the Cluster Essentials are already installed.

  • cert-manager v2.3.0 or later for managing internal certificates.

    • If you installed Tanzu Application Platform v1.5 with a profile, this package is installed.
    • If you installed Tanzu Application Platform v1.5 without using a profile, see Install cert-manager.

  • Contour v1.22.5 or later for ingress control.

    • If you installed Tanzu Application Platform v1.5 with a profile, this package is installed.
    • If you installed Tanzu Application Platform v1.5 without using a profile, see Install Contour.
    Note

    You must configure Contour's ingress to provision a LoadBalancer. See the default configuration in Install your Tanzu Application Platform profile in Installing Tanzu Application Platform Package and Profiles.

  • Service Bindings v0.9.1 or later.

    • If you installed Tanzu Application Platform v1.5 with the full, iterate, or run profile, this package is installed.
    • If you installed Tanzu Application Platform without using a profile, see Install Service Bindings.

  • Tanzu Build Service v1.10.8 or later for building images.

    • If you installed Tanzu Application Platform v1.5 with the full, iterate, or build profile, this package is installed.
    • If you installed Tanzu Application Platform without using a profile, see Installing Tanzu Build Service.

Required components for experimental Cartographer integration

The following dependencies are required to be installed to the target Kubernetes cluster to opt into using the experimental Cartographer integration. If you installed Tanzu Application Platform v1.3 or v1.4 with the full, iterate, or build profile, these dependencies are already present.

  • Out of the Box Templates v0.12.5 or later.

  • Supply Chain Choreographer v0.7.1 or later.

  • Source Controller v0.7.0 or later.

  • Tekton v0.41.0 or later.

    • If you installed Tanzu Application Platform without using a profile, see Install Tekton.

VMware recommends installing the following dependencies to the target Kubernetes cluster.

  • Kubernetes Metrics Server v0.4.0 or later for app instance resource metrics.
    Note

    Many Kubernetes distributions automatically come with the Metrics Server installed. If the API resources in your target cluster include the PodMetrics Kind in the metrics.k8s.io API group, the Metrics Server is already present.

After you installed these prerequisites, proceed to Install Application Service Adapter.

AWS IAM Configuration for ECR

When installed to Amazon Elastic Container Service with ECR, Application Service Adapter requires a similar configuration to the setup required by Tanzu Application Platform, but needs access to additional resources and trusted service accounts.

Follow the Tanzu Application Platform instructions, with these amendments:

  • In build-service-trust-policy.json add the following service accounts to the list of trusted service accounts:

    • "system:serviceaccount:tas-adapter-system:korifi-api-system-serviceaccount"
    • "system:serviceaccount:tas-adapter-system:korifi-controllers-controller-manager"
    • "system:serviceaccount:tas-adapter-system:cartographer-builder-runner-controller-manager"
    • "system:serviceaccount:*:kpack-service-account"

  • In build-service-policy.json, add the following Resource:

  • "arn:aws:ecr:\({AWS_REGION}:\):repository/$*"

    Where REPOSITORY_PREFIX_PATH is the path portion of the REPOSITORY-PREFIX you will provide when setting tas-adapter-values.yaml for installation.

check-circle-line exclamation-circle-line close-line
Scroll to top icon