vSphere with Tanzu requires specific networking configuration to enable connectivity to the Supervisor Clusters, Supervisor Namespaces, and all objects that run inside the namespaces, such as vSphere Pods and Tanzu Kubernetes clusters. As a vSphere administrator, install and configure NSX-T Data Center for vSphere with Tanzu.
uses an opinionated networking configuration. Two methods exist to configure the
networking that result in deploying the same networking model:
The simplest way to configure the
Supervisor Cluster networking is by using the VMware Cloud Foundation SDDC Manager. For more information, see the VMware Cloud Foundation SDDC Manager documentation. For more information, see Working with Workload Management. You can also configure the
Supervisor Cluster networking manually by using an existing NSX-T Data Center deployment or by deploying a new instance of NSX-T Data Center.
This section describes how to configure the
Supervisor Cluster networking by deploying a new NSX-T Data Center instance, but the procedures are applicable against an existing NSX-T Data Center deployment as well. This section also provides background to understand what VMware Cloud Foundation SDDC Manager is doing when it sets up the Supervisor Cluster workload domain.
Verify that your environment meets the system requirements for configuring a vSphere cluster as a
Supervisor Cluster. For information about requirements, see System Requirements and Topologies for Setting Up a Supervisor Cluster with NSX-T Data Center. Assign the VMware vSphere 7 Enterprise Plus with Add-on for Kubernetes license to all ESXi hosts that will be part of the
Supervisor Cluster. Create storage policies for the placement of control plane VMs, pod ephemeral disks, and container images.
Configure shared storage for the cluster. Shared storage is required for vSphere DRS, HA, and storing persistent volumes of containers.
Verify that DRS and HA is enabled on the vSphere cluster, and DRS is in the fully automated mode.
Verify that you have the
Modify cluster-wide configuration privilege on the cluster.
Create a vSphere Distributed Switch To handle the networking configuration for all hosts in the Supervisor Cluster, create a vSphere Distributed Switch.
Create Distributed Port Groups Create distributed port groups for each NSX Edge node uplink, Edge node TEP, management network, and shared storage.
Add Hosts to the vSphere Distributed Switch To manage the networking of your environment by using the vSphere Distributed Switch, you must associate hosts with the switch. Connect the physical NICs, VMkernel adapters, and virtual machine network adapters of the hosts to the distributed switch.
Deploy and Configure NSX Manager You can use the vSphere Client to deploy the NSX Manager to the vSphere cluster and use it with vSphere with Tanzu.
Deploy NSX Manager Nodes to Form a Cluster An NSX Manager cluster provides high availability. You can deploy NSX Manager nodes using the user interface only on ESXi hosts managed by vCenter Server. To create an NSX Manager cluster, deploy two additional nodes to form a cluster of three nodes total. When you deploy a new node from the UI, the node connects to the first deployed node to form a cluster. All the repository details and the password of the first deployed node are synchronized with the newly deployed node.
Add a License Add a license using the NSX Manager.
Add a Compute Manager A compute manager is an application that manages resources such as hosts and virtual machines. Configure the vCenter Server that is associated with the NSX-T Data Center as a compute manager in the NSX Manager.
Create Transport Zones Transport zones indicate which hosts and VMs can use a particular network. A transport zone can span one or more host clusters.
Create an IP Pool for Host Tunnel Endpoint IP Addresses Create IP pools for the ESXI host tunnel endpoints (TEPs) and the Edge nodes. TEPs are the source and destination IP addresses used in the external IP header to identify the ESXi hosts that originate and end the NSX-T encapsulation of overlay frames. You can use DHCP or manually configured IP pools for TEP IP addresses.
Create a Host Uplink Profile A host uplink profile defines policies for the uplinks from the ESXi hosts to NSX-T Data Center segments.
Create an Edge Uplink Profile Create an uplink profile with the failover order teaming policy with one active uplink for edge virtual machine overlay traffic.
Create a Transport Node Profile A transport node profile defines how NSX-T Data Center is installed and configured on the hosts in a particular cluster the profile is attached to.
Configure NSX-T Data Center on the Cluster To install NSX-T Data Center and prepare the overlay TEPs, apply the transport node profile to the vSphere cluster.
Configure and Deploy an NSX Edge Transport Node You can add an NSX Edge virtual machine (VM) to the NSX-T Data Center fabric and proceed to configure it as an NSX Edge transport node VM.
Create an NSX Edge Cluster To ensure that at least one NSX Edge is always available, create an NSX Edge cluster.
Create a Tier-0 Uplink Segment The tier-0 uplink segment provides the North-South connectivity from NSX-T Data Center to the physical infrastructure.
Create a Tier-0 Gateway The tier-0 gateway is the NSX-T Data Center logical router that provides the North-South connectivity for the NSX-T Data Center logical networking to the physical infrastructure. vSphere with Tanzu supports multiple tier-0 gateways on multiple NSX Edge clusters in the same transport zone.