papivot
/ nsxalb-deployment-pattern.csv
Last active
May 4, 2023 02:58
Ways to consume NSX ALB within a multi Supervisor Cluster deployment within a vCenter
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| VC+DC combo | Cloud | Cluster | Service Engine Group | VIP Network | Supported | Solution | |
|---|---|---|---|---|---|---|---|
| 1 | Use Default Cloud | Single | Use Default-Group | Single | Yes | TKO Standard | |
| 1 | Use Default Cloud | Multiple | Use Custom Groups (1 per cluster) mapped to Default Cloud | Single (shared across clusters) | Yes | TKO Enterprise | |
| 1 | Use Default Cloud | Multiple | Use Custom Groups (1 per cluster) mapped to Default Cloud | Multiple (shared or unique per cluster) | Yes | TKO Enterprise | |
| Multiple | Use Custom Cloud per VC+DC | Multiple | Use Custom Groups (1 per cluster) mapping to appropriate clouds | Multiple (unique per cluster) | No(TBD/WIP) | TKO Enterprise |
papivot
/ vsphere-with-tanzu-tko-ports.csv
Last active
March 7, 2024 11:05
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Source IP Address | Destination IP Address | Port Display | Protocol | Optional/Mandatory | Use | |
|---|---|---|---|---|---|---|
| Client | Service Installer VM | 22 | TCP | SSH | ||
| Client | NSX ALB VIP Network IP Range | 443 | TCP | HTTPS Workload | ||
| Client | NSX ALB VIP Network IP Range | 6443 | TCP | Cluster access | ||
| Client | Supervisor Management IP Range | 22 | TCP | (Optional) | Troubleshooting | |
| Client | Workload Cluster IP Range | 22 | TCP | (Optional) | Troubleshooting | |
| Client | Workload Cluster IP Range | 30000-32767 | TCP | (Optional) | If Nodeport Support is required | |
| Client | NSX ALB VIP Network IP Range | 80 | TCP | (Optional) | HTTP Workload | |
papivot
/ workload-cluster.csv
Created
September 17, 2021 19:49
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| clusterrolebindings | clusterrole | |
|---|---|---|
| vmware-system-auth-sync-wcp:demo1:group:vsphere.local:administrators | cluster-admin | |
| vmware-system-auth-sync-wcp:demo1:user:vsphere.local:user2 | cluster-admin | |
| vmware-system-auth-sync-wcp:demo1:user:vsphere.local:user3 | cluster-admin |
papivot
/ supervisor-ns-creatorrole.csv
Created
September 17, 2021 19:33
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| NAME | CREATE | GET | LIST | WATCH | UPDATE | PATCH | DELETE | DELETECOLLECTION | |
|---|---|---|---|---|---|---|---|---|---|
| namespaces | x | x | x | x | x | x | yes | n/a | |
| tanzukubernetesaddons.run.tanzu.vmware.com | x | yes | yes | yes | x | x | x | x | |
| tanzukubernetesreleases.run.tanzu.vmware.com | x | yes | yes | yes | x | x | x | x | |
| tkgserviceconfigurations.run.tanzu.vmware.com | x | yes | yes | yes | x | x | x | x | |
| virtualmachineclasses.vmoperator.vmware.com | x | yes | yes | yes | x | x | x | x | |
| virtualmachineimages.vmoperator.vmware.com | x | yes | yes | yes | x | x | x | x |
papivot
/ supervisor-ns-viewrole.csv
Created
September 17, 2021 19:25
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| NAME | CREATE | GET | LIST | WATCH | UPDATE | PATCH | DELETE | DELETECOLLECTION | |
|---|---|---|---|---|---|---|---|---|---|
| certificaterequests.cert-manager.io | x | yes | yes | yes | x | x | x | x | |
| certificates.cert-manager.io | x | yes | yes | yes | x | x | x | x | |
| clusters.cluster.x-k8s.io | x | yes | yes | yes | x | x | x | x | |
| configmaps | x | yes | yes | yes | x | x | x | x | |
| contentsourcebindings.vmoperator.vmware.com | x | yes | yes | yes | x | x | x | x | |
| controllerrevisions.apps | x | yes | yes | yes | x | x | x | x | |
| cronjobs.batch | x | yes | yes | yes | x | x | x | x | |
| daemonsets.apps | x | yes | yes | yes | x | x | x | x | |
| deployments.apps | x | yes | yes | yes | x | x | x | x |
papivot
/ supervisor-ns-editrole.csv
Last active
September 17, 2021 19:18
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| NAME | CREATE | GET | LIST | WATCH | UPDATE | PATCH | DELETE | DELETECOLLECTION | |
|---|---|---|---|---|---|---|---|---|---|
| agentinstalls.installers.tmc.cloud.vmware.com | yes | yes | yes | yes | yes | yes | yes | yes | |
| certificaterequests.cert-manager.io | yes | yes | yes | yes | yes | yes | yes | yes | |
| certificates.cert-manager.io | yes | yes | yes | yes | yes | yes | yes | yes | |
| clusters.cluster.x-k8s.io | x | yes | yes | yes | x | x | x | x | |
| cnsxdevmattachments.cns.vmware.com | x | yes | yes | yes | x | x | x | x | |
| configmaps | yes | yes | yes | yes | yes | yes | yes | yes | |
| contentsourcebindings.vmoperator.vmware.com | x | yes | yes | yes | x | x | x | x | |
| controllerrevisions.apps | x | yes | yes | yes | x | x | x | x | |
| cronjobs.batch | yes | yes | yes | yes | yes | yes | yes | yes |
papivot
/ supervisor-ns-clusterrole.csv
Created
September 17, 2021 02:38
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| clusterrolebinding | clusterrole | |
|---|---|---|
| wcp:user:vsphere.local:user3:namespace-delete | ClusterRole/vmware-system-nsop-namespace-delete-cluster-role |
papivot
/ supervisor-ns-role.csv
Last active
September 17, 2021 02:36
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| rolebinding | role | |
|---|---|---|
| wcp:demo1:user:vsphere.local:user1 | ClusterRole/view | |
| wcp:demo1:user:vsphere.local:user2 | ClusterRole/edit | |
| wcp:demo1:user:vsphere.local:user3 | ClusterRole/edit | |
| wcp:demo1:group:vsphere.local:administrators | ClusterRole/edit |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| NAME | CREATE | GET | LIST | WATCH | UPDATE | PATCH | DELETE | DELETECOLLECTION | |
|---|---|---|---|---|---|---|---|---|---|
| agentinstalls.installers.tmc.cloud.vmware.com | yes | yes | yes | yes | yes | yes | yes | yes | |
| certificaterequests.cert-manager.io | x | yes | yes | yes | x | x | x | x | |
| certificates.cert-manager.io | x | yes | yes | yes | x | x | x | x | |
| clusters.cluster.x-k8s.io | x | yes | yes | yes | x | x | x | x | |
| cnsnodevmattachments.cns.vmware.com | x | yes | yes | yes | x | x | x | x | |
| configmaps | x | yes | yes | yes | x | x | x | x | |
| contentlibraryproviders.vmoperator.vmware.com | x | yes | yes | yes | x | x | x | x | |
| contentsourcebindings.vmoperator.vmware.com | x | yes | yes | yes | x | x | x | x | |
| contentsources.vmoperator.vmware.com | x | yes | yes | yes | x | x | x | x |
papivot
/ supervisor-admin-ns.csv
Created
September 16, 2021 20:54
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| namespace | rolebinding | role | |
|---|---|---|---|
| kube-system | vmware-image-fetcher-ca-bundle-edit-role-binding | vmware-image-fetcher-ca-bundle-edit | |
| svc-tmc-c8 | wcp:administrator:tmc-extension-config-role | vi-admin-tmc-extension-config-role |
NewerOlder