This topic tells you how to create a workload in Tanzu Application Platform (commonly known as TAP) from a workload.yaml
file, a URL, a Git source, a local source, and a pre-built image.
For more information about the different types of workload creation, see Supply Chain How-to-guides.
workload.yaml
file or from a URLYou can create a workload from a workload.yaml
file or from a URL.
In many cases, workload life cycles are managed through CLI commands. However, there might be cases where managing the workload through direct interactions and edits of a yaml
file is preferred. The Apps CLI plug-in supports using yaml
files to meet the requirements.
When a workload is managed using a yaml
file, that file must contain a single workload definition.
For example, a valid file looks similar to the following example:
---
apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
name: tanzu-java-web-app
labels:
app.kubernetes.io/part-of: tanzu-java-web-app
apps.tanzu.vmware.com/workload-type: web
spec:
source:
git:
url: https://github.com/vmware-tanzu/application-accelerator-samples
ref:
tag: tap-1.6.0
subPath: tanzu-java-web-app
To create a workload from a file like the earlier example:
tanzu apps workload create --file my-workload-file.yaml
NoteWhen flags are passed in combination with
--file my-workload-file.yaml
the flag values take precedence over the associated property or values in the YAML.
The workload yaml
definition can also be passed in through stdin as follows:
tanzu apps workload create --file - --yes
The console waits for input, and the content with valid yaml
definitions for a workload can either be written or pasted. Then click Ctrl-D
three times to start the workload creation. This can also be done with the workload apply
command.
To pass a workload through stdin
, the --yes
flag is required. If not provided, the command fails.
tanzu apps workload create -f -y
โ WARNING: Configuration file update strategy is changing. By default, provided configuration files will replace rather than merge existing configuration. The change will take place in the January 2024 TAP release (use "--update-strategy" to control strategy explicitly).
---
apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
name: tanzu-java-web-app
labels:
app.kubernetes.io/part-of: tanzu-java-web-app
apps.tanzu.vmware.com/workload-type: web
spec:
source:
git:
url: https://github.com/vmware-tanzu/application-accelerator-samples
ref:
tag: tap-1.6.0
subPath: tanzu-java-web-app
๐ Create workload:
1 + |---
2 + |apiVersion: carto.run/v1alpha1
3 + |kind: Workload
4 + |metadata:
5 + | labels:
6 + | app.kubernetes.io/part-of: tanzu-java-web-app
7 + | apps.tanzu.vmware.com/workload-type: server
8 + | name: tanzu-java-web-app
9 + | namespace: default
10 + |spec:
11 + | source:
12 + | git:
13 + | ref:
14 + | tag: tap-1.6.0
15 + | url: https://github.com/vmware-tanzu/application-accelerator-samples
16 + | subPath: tanzu-java-web-app
๐ Created workload "tanzu-java-web-app"
To see logs: "tanzu apps workload tail tanzu-java-web-app --timestamp --since 1h"
To get status: "tanzu apps workload get tanzu-java-web-app"
Another way to pass a workload with the --file
flag is using a URL, which must contain a raw file with the workload definition.
Use the --git-repo
, --git-branch
, --git-tag
, and --git-commit
flags to create a workload from an existing Git repository. This allows the supply chain to get the source from the given repository to deploy the application.
To create a named workload and specify a Git source code location, run:
tanzu apps workload apply tanzu-java-web-app --git-repo https://github.com/vmware-tanzu/application-accelerator-samples --sub-path tanzu-java-web-app --git-tag tap-1.6.0 --type web
Respond Y
to prompts to complete process.
Where:
tanzu-java-web-app
is the name of the workload.--git-repo
is the location of the code to build the workload from.--sub-path
(optional) is the relative path inside the repository to treat as application root.--git-tag
(optional) specifies which tag in the repository to pull the code from.--git-branch
(optional) specifies which branch in the repository to pull the code from.--type
distinguishes the workload type.This process can also be done with non-publicly accessible repositories. These require authentication using credentials stored in a Kubernetes secret. The supply chain is in charge of managing these credentials.
View the full list of supported workload configuration options by running tanzu apps workload apply --help
.
There are various ways to update a workload. Use flags to change workload fields. Use a YAML file with the required changes, and run the tanzu apps workload apply
with the --update-strategy
set as replace
. For more information, see Control Workload Merge Behavior.
To delete fields, set the --git-*
flags as empty strings within the command. This removes the workload.spec.source.git
fields.
For example, for a workload that includes specifications such as --git-tag
, --git-commit
or --git-branch
, remove these by setting them as empty strings in the command as shown in the following example:
# existing workload definition
---
apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
labels:
apps.tanzu.vmware.com/workload-type: web
name: tanzu-java-web-app
namespace: default
spec:
source:
git:
ref:
branch: main
tag: tap-1.6.0
url: https://github.com/vmware-tanzu/application-accelerator-samples
subPath: tanzu-java-web-app
# Update the workload to remove one of its git fields
tanzu apps workload apply tanzu-java-web-app --git-branch ""
๐ Update workload:
...
9, 9 |spec:
10, 10 | source:
11, 11 | git:
12, 12 | ref:
13 - | branch: main
14, 13 | tag: tap-1.6.0
15, 14 | url: https://github.com/vmware-tanzu/application-accelerator-samples
16, 15 | subPath: tanzu-java-web-app
โ Really update the workload "tanzu-java-web-app"? [yN]: y
๐ Updated workload "tanzu-java-web-app"
To see logs: "tanzu apps workload tail tanzu-java-web-app --timestamp --since 1h"
To get status: "tanzu apps workload get tanzu-java-web-app"
# Export the workload to see that `spec.source.git.ref.tag` is not part of the definition
tanzu apps workload get tanzu-java-web-app --export
---
apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
labels:
apps.tanzu.vmware.com/workload-type: web
name: tanzu-java-web-app
namespace: default
spec:
source:
git:
ref:
tag: tap-1.6.0
url: https://github.com/vmware-tanzu/application-accelerator-samples
subPath: tanzu-java-web-app
NoteIf
--git-repo
is set to empty, then the whole Git section is removed from the workload definition.
tanzu apps workload apply tanzu-java-web-app --git-repo ""
๐ Update workload:
...
5, 5 | labels:
6, 6 | apps.tanzu.vmware.com/workload-type: web
7, 7 | name: tanzu-java-web-app
8, 8 | namespace: default
9 - |spec:
10 - | source:
11 - | git:
12 - | ref:
13 - | tag: tap-1.6.0
14 - | url: https://github.com/vmware-tanzu/application-accelerator-samples
15 - | subPath: tanzu-java-web-app
9 + |spec: {}
โ NOTICE: no source code or image has been specified for this workload.
โ Really update the workload "tanzu-java-web-app"? [yN]: y
๐ Updated workload "tanzu-java-web-app"
To see logs: "tanzu apps workload tail tanzu-java-web-app --timestamp --since 1h"
To get status: "tanzu apps workload get tanzu-java-web-app"
# Export the workload and check that the git source section does not exist
tanzu apps workload get tanzu-java-web-app --export
---
apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
labels:
apps.tanzu.vmware.com/workload-type: web
name: tanzu-java-web-app
namespace: default
spec: {}
Use the --subpath
flag to create workloads within a repository, where the repository, such as a monorepo, consists of multiple folders or projects.
# The Git repository for this sample contains several applications, each on its own folder
tanzu apps workload apply tanzu-where-for-dinner --git-repo https://github.com/vmware-tanzu/application-accelerator-samples --git-branch main --sub-path where-for-dinner
๐ Create workload:
1 + |---
2 + |apiVersion: carto.run/v1alpha1
3 + |kind: Workload
4 + |metadata:
5 + | labels:
6 + | apps.tanzu.vmware.com/workload-type: web
7 + | name: tanzu-where-for-dinner
8 + | namespace: default
9 + |spec:
10 + | source:
11 + | git:
12 + | ref:
13 + | branch: main
14 + | url: https://github.com/vmware-tanzu/application-accelerator-samples
15 + | subPath: where-for-dinner
โ Do you want to create this workload? [yN]: y
๐ Created workload "tanzu-where-for-dinner"
To see logs: "tanzu apps workload tail tanzu-where-for-dinner --timestamp --since 1h"
To get status: "tanzu apps workload get tanzu-where-for-dinner"
There are multiple ways to upload local source code to a Tanzu Application Platform cluster.
For more information, see Install Local Source Proxy. To create a workload that pushes to an already configured registry through Local Source Proxy, use --local-path
flag without --source-image
, like the following example:
# Point the local path flag to the folder containing the source code
tanzu apps workload create tanzu-java-web-app --local-path /path/to/java/app
The files and/ directories listed in the .tanzuignore file are being excluded from the uploaded source code.
Publishing source in "/path/to/java/app" to "local-source-proxy.tap-local-source-system.svc.cluster.local/source:default-tanzu-java-web-app"...
๐ฅ Published source
๐ Create workload:
1 + |---
2 + |apiVersion: carto.run/v1alpha1
3 + |kind: Workload
4 + |metadata:
5 + | annotations:
6 + | local-source-proxy.apps.tanzu.vmware.com: registry.io/project/source:default-tanzu-java-web-app@sha256:447db92e289dbe3a6969521917496ff2b6b0a1d6fbff1beec3af726430ce8493
7 + | labels:
8 + | apps.tanzu.vmware.com/workload-type: web
9 + | name: tanzu-java-web-app
10 + | namespace: default
11 + |spec:
12 + | source:
13 + | image: registry.io/project/source:default-tanzu-java-web-app@sha256:447db92e289dbe3a6969521917496ff2b6b0a1d6fbff1beec3af726430ce8493
โ Do you want to create this workload? [yN]:
A workload created using Local Source Proxy is easily recognizable because it has the local-source-proxy.apps.tanzu.vmware.com
annotation with a value the same as the spec.source.image
field.
--source-image
flag. Use this flag to specify the registry path where the local source code is uploaded as an image.
Both the cluster and the developerโs machine must be configured to properly provide credentials for accessing the container image registry where the local source code is published to. For more information about authentication requirements, see Building from Local Source.
To create a workload using a source image, use --local-path
flag with --source-image
, like the following example:
tanzu apps workload create tanzu-java-web-app --local-path /path/to/java/app --source-image registry.io/path/to/project/image-name
The files and directories listed in the .tanzuignore file are being excluded from the uploaded source code.
Publishing source in "." to "registry.io/path/to/project/image-name"...
๐ฅ Published source
๐ Create workload:
1 + |---
2 + |apiVersion: carto.run/v1alpha1
3 + |kind: Workload
4 + |metadata:
5 + | labels:
6 + | apps.tanzu.vmware.com/workload-type: web
7 + | name: tanzu-java-web-app
8 + | namespace: default
9 + |spec:
10 + | source:
11 + | image: registry.io/path/to/project/image-name:latest@sha256:447db92e289dbe3a6969521917496ff2b6b0a1d6fbff1beec3af726430ce8493
โ Do you want to create this workload? [yN]:
--live-update
Use the --live-update
flag to ensure that local source code changes are reflected quickly on the running workload. This is particularly valuable when iterating on features that require the workload to be deployed and running to validate.
Live update is ideally situated for running from within one of our supported IDE extensions, but it can also be utilized independently as shown in the following Spring Boot application example:
Prerequisites: Tilt must be installed on the client.
Clone the repository by running:
git clone https://github.com/vmware-tanzu/application-accelerator-samples
Change into the tanzu-java-web-app
directory.
Tiltfile
, first, change the SOURCE_IMAGE
variable to use your registry and project.At the very end of the file add:
allow_k8s_contexts('your-cluster-name')
Inside the directory, run:
tanzu apps workload apply tanzu-java-web-app --live-update --local-path . -s
gcr.io/PROJECT/tanzu-java-web-app-live-update -y
Expected output:
The files and directories listed in the .tanzuignore file are being excluded from the uploaded source code.
Publishing source in "." to "gcr.io/PROJECT/tanzu-java-web-app-live-update"...
๐ฅ Published source
๐ Create workload:
1 + |---
2 + |apiVersion: carto.run/v1alpha1
3 + |kind: Workload
4 + |metadata:
5 + | name: tanzu-java-web-app
6 + | namespace: default
7 + |spec:
8 + | params:
9 + | - name: live-update
10 + | value: "true"
11 + | source:
12 + | image: gcr.io/PROJECT/tanzu-java-web-app-live-update:latest@sha256:3c9fd738492a23ac532a709301fcf0c9aa2a8761b2b9347bdbab52ce9404264b
๐ Created workload "tanzu-java-web-app"
To see logs: "tanzu apps workload tail tanzu-java-web-app --timestamp --since 1h"
To get status: "tanzu apps workload get tanzu-java-web-app"
Run Tilt to deploy the workload.
tilt up
Tilt started on http://localhost:10350/
v0.23.6, built 2022-01-14
(space) to open the browser
(s) to stream logs (--stream=true)
(t) to open legacy terminal mode (--legacy=true)
(ctrl-c) to exit
Tilt started on http://localhost:10350/
v0.23.6, built 2022-01-14
Initial Build โข (Tiltfile)
Loading Tiltfile at: /path/to/repo/tanzu-java-web-app/Tiltfile
Successfully loaded Tiltfile (1.500809ms)
tanzu-java-wโฆ โ
tanzu-java-wโฆ โ Initial Build โข tanzu-java-web-app
tanzu-java-wโฆ โ WARNING: Live Update failed with unexpected error:
tanzu-java-wโฆ โ Cannot extract live updates on this build graph structure
tanzu-java-wโฆ โ Falling back to a full image build + deploy
tanzu-java-wโฆ โ STEP 1/1 โ Deploying
tanzu-java-wโฆ โ Objects applied to cluster:
tanzu-java-wโฆ โ โ tanzu-java-web-app:workload
tanzu-java-wโฆ โ
tanzu-java-wโฆ โ Step 1 - 8.87s (Deploying)
tanzu-java-wโฆ โ DONE IN: 8.87s
tanzu-java-wโฆ โ
tanzu-java-wโฆ โ
tanzu-java-wโฆ โ Tracking new pod rollout (tanzu-java-web-app-build-1-build-pod):
tanzu-java-wโฆ โ โ Scheduled - (โฆ) Pending
tanzu-java-wโฆ โ โ Initialized - (โฆ) Pending
tanzu-java-wโฆ โ โ Ready - (โฆ) Pending
...
For local source workloads, specify a subpath. A subpath points to a specific subfolder within the root folder.
# After cloning repo in https://github.com/vmware-tanzu/application-accelerator-samples and install Local Source Proxy
cd application-accelerator-samples
tanzu apps workload apply tanzu-java-web-app --local-path . --sub-path tanzu-java-web-app
Publishing source in "." to "local-source-proxy.tap-local-source-system.svc.cluster.local/source:default-tanzu-java-web-app"...
๐ฅ Published source
๐ Create workload:
1 + |---
2 + |apiVersion: carto.run/v1alpha1
3 + |kind: Workload
4 + |metadata:
5 + | annotations:
6 + | local-source-proxy.apps.tanzu.vmware.com: gcr.io/tanzu-framework-playground/source:default-tanzu-java-web-app@sha256:e6ee774bc427273afb6dcf6388aca8edd83b83c72e4de00bf0cf8dfce72f8446
7 + | labels:
8 + | apps.tanzu.vmware.com/workload-type: web
9 + | name: tanzu-java-web-app
10 + | namespace: default
11 + |spec:
12 + | source:
13 + | image: gcr.io/tanzu-framework-playground/source:default-tanzu-java-web-app@sha256:e6ee774bc427273afb6dcf6388aca8edd83b83c72e4de00bf0cf8dfce72f8446
14 + | subPath: tanzu-java-web-app
โ Do you want to create this workload? [yN]: y
๐ Created workload "tanzu-java-web-app"
To see logs: "tanzu apps workload tail tanzu-java-web-app --timestamp --since 1h"
To get status: "tanzu apps workload get tanzu-java-web-app"
Create a workload from an existing registry image by providing the reference to that image through the --image
flag. The supply chain references the provided registry image when the workload is deployed.
For example:
tanzu apps workload create petclinic-image --image springcommunity/spring-framework-petclinic
๐ Create workload:
1 + |---
2 + |apiVersion: carto.run/v1alpha1
3 + |kind: Workload
4 + |metadata:
5 + | labels:
6 + | apps.tanzu.vmware.com/workload-type: web
7 + | name: petclinic-image
8 + | namespace: default
9 + |spec:
10 + | image: springcommunity/spring-framework-petclinic
โ Do you want to create this workload? [yN]:
For information about requirements for prebuilt images and how to configure prebuilt images in a supply chains, see Use an existing image with Supply Chain Choreographer.
Create a workload from a Maven repository artifact by setting some specific properties as YAML parameters or using --maven-*
flags in the workload when using the supply chain. For more information about Maven repository artifact, see Source-Controller.
The Maven repository URL is set when the supply chain is created.
--maven-*
flagsTo create a Maven workload using the CLI provided flags, run:
tanzu apps workload apply my-workload \
--maven-artifact hello-world \
--maven-type jar
--maven-version 0.0.1 \
--maven-group carto.run \
--type web -y
For information about available commands, see the Tanzu CLI Command Reference documentation.
Param value:
artifactId: ...
type: ... # default jar if not provided
version: ...
groupId: ...
{
"artifactId": ...,
"type": ..., // default jar if not provided
"version": ...,
"groupId": ...
}
For example, to create a workload from a Maven artifact using parameters, run:
# YAML
tanzu apps workload create my-workload --type web --param-yaml maven=$"artifactId:hello-world\ntype:jar\nversion:0.0.1\ngroupId:carto.run"
# JSON
tanzu apps workload create my-workload --type web --param-yaml maven="{"artifactId":"hello-world", "type": "jar", "version": "0.0.1", "groupId": "carto.run"}"
For information about how to configure the Maven artifact authentication credentials, see Maven Repository Secret.
For any source-based supply chains, when you specify the new dockerfile parameter in a workload, the builds switch from using Kpack to using kaniko. Source-based supply chains are supply chains that donโt take a pre-built image. kaniko is an open-source tool for building container images from a Dockerfile without running Docker inside a container. For more information, see Dockerfile-based builds.