Install the prerequisite applications on each Tanzu Kubernetes cluster where you plan to install one or more TKG Extensions v1.3.1.

TKG Extensions v1.3.1 require two prerequisite components: Kapp Controller and Cert Manager.
Note: As an alternative to Cert Manager you can use your own TLS certificates. See Use Your Own TLS Certificate for TKG Extensions.



  1. Download the TKG Extensions v1.3.1 Bundle.
  2. Install Cert Manager on the cluster.

    Navigate to the root directory of the TKG Extensions bundle you downloaded and extracted.

    cd /tkg-extensions-v1.3.1+vmware.1

    Cert Manager includes several components. There are three YAML files in the directory named /cert-manager. Use ls to verify the presence of this directory.

    Install all Cert Manager components by issuing the following single command:

    kubectl apply -f cert-manager/
    This operation creates the cert-manager namespace, components, certificates, and associated objects.
  3. Install Kapp Controller on the cluster.
    You install Kapp Controller using kapp-controller.yaml. If necessary you can customize the Kapp Controller configuration using kapp-controller-config.yaml.
    Navigate to the home directory of the TKG Extensions.
    cd /tkg-extensions-v1.3.1+vmware.1/extensions

    Use ls to verify presence of both Kapp Controller files kapp-controller.yaml and kapp-controller-config.yaml.

    The Kapp Controller container is installed with default configuration parameters. Typically you can install Kapp Controller without customizing the configuration. If you need to customize the Kapp Controller, edit the kapp-controller-config.yaml. For example, you will need to edit this file if you are deploying Kapp Controller behind a proxy.

    If necessary, edit the kapp-controller-config.yaml file. If you edit the configuration file, save the file and apply the changes using the following command.
    kubectl apply -f kapp-controller-config.yaml

    The Kapp Controller container is installed using the kapp-controller.yaml. The spec.containers.image path in this YAML file points to the public VMware registry. For air-gapped installations, update this path to point to your private registry.

    Run the following command to install Kapp Controller.

    kubectl apply -f kapp-controller.yaml
    This operation creates the tkg-system namespace, kapp-controller application, and role objects.
  4. Verify installation of Cert Manager and Kapp Controller.
    Run the command kubectl get pods -A. You should see each are running.
    cert-manager       cert-manager-cainjector-...    1/1     Running    0      7h54m
    cert-manager       cert-manager-...               1/1     Running    0      7h54m
    cert-manager       cert-manager-webhook-...       1/1     Running    0      7h54m
    tkg-system         kapp-controller-...            1/1     Running    0      16m