Kubernetes is great platform that provides development teams with a single API to deploy, manage, and run applications. However, running, maintaining, and securing Kubernetes is a complex task. VMware Tanzu for Kubernetes Operations simplifies Kubernetes operations. It determines what base OS instances to use, which Kubernetes Container Network Interface (CNI) and Container Storage Interfaces (CSI) to use, how to secure the Kubernetes API, and much more. It monitors, upgrades, and backs up clusters and helps teams provision, manage, secure, and maintain Kubernetes clusters on a day-to-day basis.
This document provides a reference architecture for deploying Tanzu for Kubernetes Operations. The reference architecture uses the Tanzu components that make up Tanzu for Kubernetes Operations and provides a high-level architecture for deploying the components together as a solution. The reference architecture is tested and supported by VMware. The following diagram shows the reference architecture.
In addition to the reference architecture, several reference designs and the instructions for deploying the reference designs are available. The reference designs are tailored for deploying Tanzu for Kubernetes Operations on your IaaS or infrastructure of choice. The reference designs are based on the high-level architecture.
The following components are used in the reference architecture:
VMware Tanzu Kubernetes Grid - Enables creation and lifecycle management operations of Kubernetes clusters.
VMware Tanzu Mission Control - Provides a global view of Kubernetes clusters and allows for centralized policy management across all deployed and attached clusters.
VMware Tanzu Observability by Wavefront - Provides a centralized management platform for consistently operating and securing your Kubernetes infrastructure and modern applications across multiple teams and clouds.
VMware Tanzu Service Mesh - Provides consistent control and security for microservices, end users, and data, across all your clusters and clouds.
VMware NSX Advanced Load Balancer Basic Edition - Provides layer 4 service type load balancer support. NSX Advanced Load Balancer is recommended for vSphere deployments without NSX-T, or which have unique scale requirements.
Pinniped - Provides identity services to Kubernetes. It is an authentication service for Kubernetes to set up integration with identity providers such as OKTA, Dex, and LDAP.
User-managed packages - Provides in-cluster and shared services to the Kubernetes clusters that are running in your Tanzu Kubernetes Grid environment.
The following documents provide reference designs for specific infrastructure providers. The reference designs are based on the high-level architecture.