vSphere IaaS control plane requires specific networking configuration to enable connectivity to the Supervisors, vSphere Namespaces, and all objects that run inside the namespaces, such as vSphere Pods, VMs, and Tanzu Kubernetes clusters. As a vSphere administrator, install and configure NSX for vSphere IaaS control plane.

Figure 1. Workflow for Configuring a Supervisor with NSX

Workflow for Configuring a Supervisor with NSX
This section describes how to configure the Supervisor networking by deploying a new NSX instance, but the procedures are applicable against an existing NSX deployment as well. This section also provides background to understand what VMware Cloud Foundation SDDC Manager is doing when it sets up the Supervisor workload domain.

Prerequisites

  • Verify that your environment meets the system requirements for configuring a vSphere cluster as a Supervisor. For information about requirements, see Requirements for a Zonal Supervisor with NSX and Requirements for Cluster Supervisor Deployment with NSX in vSphere IaaS Control Plane Concepts and Planning.
  • Assign a Tanzu edition license to the Supervisor.
  • Create storage policies for the placement of control plane VMs, pod ephemeral disks, and container images.
  • Configure shared storage for the cluster. Shared storage is required for vSphere DRS, HA, and storing persistent volumes of containers.
  • Verify that DRS and HA is enabled on the vSphere cluster, and DRS is in the fully automated mode.
  • Verify that you have the Modify cluster-wide configuration privilege on the cluster.