Feb 6Deliver Secure Access to Azure Key Vault from AKS Powered by TanzuOverview I’ve been in engaged in several discussions recently related to secrets management for Kubernetes. Particularly in use cases for applications that require credentials to access downstream services (e.g. databases). Sure, Kubernetes has the Secret resource. And for many small or bespoke implementations this may be the initial and perhaps final…Kuberentes7 min readKuberentes7 min read
Sep 6, 2022Monitoring Tanzu Standard Repository Enterprise ServicesYou’ve just deployed your Tanzu Kubernetes Grid clusters and setup enterprise services such as Cert-Manager, Fluent Bit, ExternalDNS and Harbor from the Tanzu Standard Repository. How do you know if everything is working? Are certificates being generated? When are their expiration dates? Any failures? How about automated management of DNS…Tanzu3 min readTanzu3 min read
May 21, 2022BYO Certs for TKG 1.5.3+ AuthTanzu Kubernetes Grid (TKG) provides the means to deploy consistent and upstream aligned Kubernetes clusters leveraging the Kubernetes subproject Cluster API. TKG 1.4.0 introduced the use of Carvel API Resources format for core and user-managed packages. TKG Auth is delivered by the core package Pinniped. This process was originally written…Tanzu Kubernetes Grid5 min readTanzu Kubernetes Grid5 min read
Apr 19, 2022Tanzu Application Platform’s OOTB Supply Chain with Testing and Scanning EventsA key value delivered by the Tanzu Application Platform (TAP) is to coordinate the work of developer and operators in an application’s path to production. TAP achieves this through Supply Chain Choreography. A platform operator describes the path to production with a Cartographer SupplyChain and a developer submits Workloads to…Tanzu6 min readTanzu6 min read
Apr 19, 2022Deep-dive on Tanzu Application Platform’s OOTB Supply ChainEach organization has a “path to production”; the process by which an application passes as it makes its way toward production. You can model this path as a supply chain with the Tanzu Application Platform (TAP). Under the hood, TAP delivers Supply Chain Choreography via Cartographer; which has a well…Tanzu6 min readTanzu6 min read
Jan 24, 2022BYO Certs for TKG 1.4.1+ AuthThe process described in this blog has changed slightly with TKG 1.5.3. If you are using TKG 1.5.3+ , please go to this version of the blog. Tanzu Kubernetes Grid (TKG) provides the means to deploy consistent and upstream aligned Kubernetes clusters leveraging the Kubernetes subproject Cluster API. TKG 1.4.0…Tkg5 min readTkg5 min read
Nov 3, 2021BYO Certs for TKG 1.4.0 AuthThe process described in this blog has changed slightly with TKG 1.4.1. If you are using TKG 1.4.1 through TKG 1.5.2, please go to this version of the blog. If you are using TKG 1.5.3+, please go to this version of the blog. Tanzu Kubernetes Grid (TKG) provides the means…Tanzu5 min readTanzu5 min read
May 18, 2021Creating Kubernetes Service Accounts for AutomationCI/CD tools require access to Kubernetes in order to perform actions. Just like the kubectl cli, they require a kubeconfig. We will walk through the steps to create the service account and kubeconfig. …Kubernetes2 min readKubernetes2 min read
May 16, 2021Overcoming Okta “thin tokens” with Kubeapps and Tanzu Kubernetes Grid 1.3Do you know what a “thin token” is? It’s ok, I didn’t either. I was attempting to deploy Kubeapps configured for OIDC auth with Okta on Tanzu Kubernetes Grid (TKG) 1.3. Michael Nelson’s Kubeapps on Tanzu Kubernetes Grid 1.3 …7 min read7 min read
