As a platform operator, you can use VMware Tanzu Mission Control to manage the packages and releases installed in your clusters.
The Catalog page in the Tanzu Mission Control console allows you to view and install packages available from the Tanzu Standard package repository and packages from your own custom Carvel package repositories.
Before you can deploy packages to your clusters from the Tanzu Standard package repository, you must first make sure that those images are available in the private local image registry that you used to install Tanzu Mission Control Self-Managed. For more information, see Copying Tanzu Standard and Inspection Images in Installing and Running VMware Tanzu Mission Control Self-Managed.
Tanzu Mission Control uses Carvel (an open source community standard) for package management. For more information about packages and package management using Carvel, visit https://carvel.dev/kapp-controller/.
Set a Firewall Rule for kapp-controller
Tanzu Mission Control requires ingress access to workload clusters to communicate with kapp-controller.
Tanzu Mission Control uses Carvel's kapp-controller service running in the cluster to install packages and communicate with installed packages. Tanzu Mission Control uses port 32767 for the kapp-controller service on non-Tanzu Kubernetes Grid workload clusters, and port 10100 on Tanzu Kubernetes Grid workload clusters.
Add a firewall rule allowing ingress from the control plane to the workload clusters on the relevant ports to ensure the kapp-controller service can operate correctly.
