Installing NSX Container Plug-in (NCP) requires installing components on the master and worker nodes. Most of the steps are automated. What to read next Download Installation FilesTo install NCP, download the NCP YAML file and docker image for your environment. Prepare Kubernetes NodesMost of the steps to prepare the Kubernetes nodes are automated by two containers, nsx-ovs and nsx-ncp-bootstrap, that run in the nsx-node-agent and nsx-ncp-bootstrap DaemonSets, respectively. Create Secrets - KubernetesYou can create secrets to store NSX client certificate and key or load balancer certificate and key. Configure NSX-T Data Center Networking for Kubernetes NodesThis section describes how to configure NSX-T Data Center networking for Kubernetes master and worker nodes. Edit the NCP YAML FileThe NCP YAML file contains information to configure, install and run all the NCP components. The nsx-ncp-config ConfigMapThe NCP YAML file includes the nsx-ncp-config ConfugMap. You can update the options for your environment. Below is the nsx-ncp-config ConfigMap from ncp-ubuntu.yaml. The nsx-node-agent-config ConfigMapThe NCP YAML file includes the nsx-node-agent-config ConfugMap. You can update the options for your environment. Below is the nsx-ncp-config ConfigMap from ncp-ubuntu.yaml. Apply the NCP YAML FileAfter you edit the NCP YAML file, you can apply the YAML file to create and run the resources. Mount a Certificate File in the NCP PodYou need to mount a certificate file in the NCP Pod to configure certificate-based authentication with NSX-T API, or to configure a default certificate for SSL offloading for NSX-T load balancer. Configuring SyslogYou can run a syslog agent such as rsyslog or syslog-ng in a container to send logs from NCP and related components to a syslog server. Security ConsiderationsWhen deploying NCP, it is important to take steps to secure both the Kubernetes and the NSX-T Data Center environments. Tips on Configuring Network ResourcesWhen configuring some network resources, you should be aware of certain restrictions. Clean Up Kubernetes NodesYou can clean up file system changes made by the bootstrap container.
