You can create Container Service Extension 3.0 managed Kubernetes clusters by using the Kubernetes Container Clusters plug-in.

For more information about the different Kubernetes runtime options for the cluster creation, see Using Kubernetes with VMware Cloud Director.

You can manage Kubernetes clusters also by using the Container Service Extension CLI. See the Container Service Extension documentation.


  • Verify that your service provider published the Kubernetes Container Clusters plug-in to your organization. Kubernetes Container Clusters is the Container Service Extension plug-in for VMware Cloud Director. You can find the plug-in on the top navigation bar under More > Kubernetes Container Clusters.
  • To enable the organization VDC for native Kubernetes cluster deployment, set up the Container Service Extension server. See the CSE Server Management chapter in the Container Service Extension (CSE) documentation.
  • Publish the CSE native policy created during the CSE server setup to an organization VDC. To use the UI, see Add a VM Placement Policy to an Organization VDC. Alternatively, you can use the CSE 3.0 CLI to publish policy by running the vcd cse ovdc enable Organization_VDC_Name --org Organization _Name --native command.
  • You must publish the cse:nativeCluster Entitlement rights bundle to any organizations that you want to work with native clusters. After sharing the rights bundle, you must add the Edit CSE:NATIVECLUSTER right to the roles you want to create and modify Tanzu Kubernetes clusters. If you want the users also to delete clusters, you must add the Full Control CSE:NATIVECLUSTER right to the roles. In addition, you can assign the administrator rights to users that you want to view all Tanzu Kubernetes clusters in an organization or users that you want to manage clusters across sites. For information about the rights and access levels for Runtime Defined Entities (RDEs), see Managing Defined Entities.
  • Grant access to tenants or system administrators by creating Access Control List (ACL) entries. For more information on sharing Runtime Defined Entities (RDEs), see Sharing Defined Entities.


  1. From the top navigation bar, select More > Kubernetes Container Clusters.
  2. (Optional) If the organization VDC is enabled for TKGI cluster creation, on the Kubernetes Container Clusters page, select the vSphere with Tanzu & Native tab.
  3. Click New.
  4. Select the Native Kubernetes runtime option.
  5. Enter a name and select a Kubernetes Template from the list.
  6. (Optional) Enter a description for the new Kubernetes cluster and an SSH public key.
  7. Click Next.
  8. Select the organization VDC to which you want to deploy a native cluster and click Next.
  9. Select the number of control plane and worker nodes and, optionally, sizing policies for the nodes.
  10. Click Next.
  11. If you want to deploy an additional VM with NFS software, turn on the Enable NFS toggle.
  12. (Optional) Select storage policies for the control plane and worker nodes.
  13. Click Next.
  14. Select a network for the Kubernetes cluster and click Next.
  15. Review the cluster settings and click Finish.

What to do next

  • Resize the Kubernetes cluster if you want to change the number of worker nodes.
  • Download the kubeconfig file. The kubectl command-line tool uses kubeconfig files to obtain information about clusters, users, namespaces, and authentication mechanisms.
  • Delete a Kubernetes cluster.