A cluster enabled with
vSphere with Tanzu is called a Supervisor Cluster. The cluster is at the base of the vSphere with Tanzu providing the necessary components and resources for running vSphere Pods and Tanzu Kubernetes clusters.
vSphere with Tanzu Architecture When vSphere with Tanzu is enabled on a vSphere cluster, it creates a Kubernetes control plane inside the hypervisor layer. This layer contains specific objects that enable the capability to run Kubernetes workloads within ESXi.
Tanzu Kubernetes Grid Service Architecture The Tanzu Kubernetes Grid Service provides self-service lifecycle management of Tanzu Kubernetes clusters. You use the Tanzu Kubernetes Grid Service to create and manage Tanzu Kubernetes clusters in a declarative manner that is familiar to Kubernetes operators and developers.
Tanzu Kubernetes Cluster Tenancy Model The Supervisor Cluster is the management plane for Tanzu Kubernetes clusters provisioned by the Tanzu Kubernetes Grid Service. The tenancy model is enforced using a Supervisor Namespace where Tanzu Kubernetes clusters reside.
Networking for vSphere with Tanzu A Supervisor Cluster can either use the vSphere networking stack or VMware NSX-T™ Data Center to provide connectivity to Kubernetes control plane VMs, services, and workloads. When a Supervisor Cluster is configured with the vSphere networking stack, all hosts from the cluster are connected to a vSphere Distributed Switch that provides connectivity to Kubernetes workloads and control plane VMs. A Supervisor Cluster that uses the vSphere networking stack requires a third-party load balancer that provides connectivity to DevOps useres and external services. A Supervisor Cluster that is configured with VMware NSX-T™ Data Center, uses the software-based networks of the solution as well as an NSX Edge load balancer to provide connectivity to external services and DevOps users.
Tanzu Kubernetes Cluster Networking The networking used for Tanzu Kubernetes clusters provisioned by the Tanzu Kubernetes Grid Service is a combination of the fabric that underlies the vSphere with Tanzu infrastructure and open-source software that provides networking for cluster pods, services, and ingress. VMware provides you with options for both networking stacks.
Authentication for vSphere with Tanzu As a vSphere administrator, you need privileges to configure a Supervisor Cluster and to manage namespaces. You define permission on namespaces to determine which DevOps engineers can access them. As a DevOps engineer, you authenticate with the Supervisor Cluster by using your vCenter Single Sign-On credentials, and can access only the namespaces for which you have permissions.
How to Authenticate with Tanzu Kubernetes Clusters You can authenticate with the Tanzu Kubernetes cluster environment in various ways depending on your role and purpose.