The vSphere with Tanzu design consists of multiple elements that enable a fully upstream-compliant Kubernetes cluster in your SDDC.

You enable and configure vSphere with Tanzu on your shared edge and workload cluster in the workload domain. NSX-T Edge nodes provide load balancing, north-south connectivity, and all required networking for the Kubernetes services. The ESXi hosts in the shared edge and workload cluster are prepared as NSX-T Data Center transport nodes to provide distributed routing and firewall services to your tenant workloads.

The Kubernetes environment consists of multiple elements.

Supervisor Cluster
The Supervisor Cluster is a special kind of Kubernetes cluster that uses ESXi hosts as worker nodes instead of Linux.
Registry Service
The Registry Service is a locally managed deployment of a VMware Harbor registry in the Supervisor Cluster.
Tanzu Kubernetes Grid Service
The Tanzu Kubernetes Grid Service deploys Tanzu Kubernetes clusters as Photon OS appliances on top of the Supervisor Cluster.
Figure 1. SDDC Logical Design for a Workload Domain with vSphere with Tanzu