Clik here to view.
Configuring Backup in Tanzu SQL with MySQL for Kubernetes
Backup & Restore Prerequisite: A reachable S3 endpoint. Can be local or remote, but the pods must be able to resolve its name or IP. Create or select and existing bucket for your database backups....
View ArticleClik here to view.
Configuring VMware Tanzu SQL with MySQL for Kubernetes for High Availability
As a follow up to the getting started post, let’s touch on what it takes to configure a MySQL instance for High Availability in Tanzu SQL/MySQL Why this is important In kubernetes, pods are generally...
View ArticleClik here to view.
Getting Started with VMware Tanzu SQL with MySQL for Kubernetes
VMware Tanzu SQL with MySQL for Kubernetes is quite a mouthful. For this post, I’ll refer to the product as Tanzu SQL/MySQL. We’re going to deploy it onto an existing Tanzu Kubernetes Grid cluster....
View ArticleClik here to view.
Adding trusted certs to nodes on TKGS 7.0 U2
A new feature added to TKGS as of 7.0 Update 2 is support for adding private SSL certificates to the “trust” on TKG cluster nodes. This is very important as it finally provides a supported mechanism...
View ArticleRetrieving the Admin Password for Harbor Image Registry in Tanzu Kubernetes...
In TKGS on vSphere 7.0 through (at least) 7.0.1d, a Harbor Image Registry may be enabled for the vSphere Cluster (Under Configure|Namespaces| Image Registry). This feature currently (as of 7.0.1d)...
View ArticleClik here to view.
Use Helm to deploy Harbor with Annotations for Velero
So, lets say you want to deploy an instance of Harbor to your “services” kubernetes cluster. The cluster is protected by a scheduled Velero backup Velero pickup all resources in all namespaces by...
View ArticleClik here to view.
Configure Tanzu Kubernetes Grid to use Active Directory
Tanzu Kubernetes Grid includes and supports packages for dex and Gangway. These are used to extend authentication to LDAP and OIDC endpoints. Recall that Kubernetes does not do user-management or...
View ArticleClik here to view.
Replicating images from DockerHub to Harbor
I found the documentation for actually replicating images from DockerHub to a local Harbor instance to be missing. So here’s what I’ve found: Objective: Replicate the images for the Yelb sample...
View ArticleClik here to view.
Adding a private Docker registry to a PKS 1.5 Windows Kubernetes cluster
Pivotal Container Service (PKS) 1.5 and Kubernetes 1.14 bring *beta* support for Workers running Windows. This means that we can provide the advantages of Kubernetes to a huge array of applications...
View ArticleClik here to view.
Logging into a Kubernetes cluster with an OIDC LDAP account
I confess, most of my experience with Kubernetes is with Pivotal Container Service (PKS) Enterprise. PKS makes it rather easy to get started and I found that I took some tasks for granted. In PKS...
View ArticleClik here to view.
Getting Started with CredHub in Concourse
First, some background – I promise to keep it short. You should never have credentials in a public github repo. Probably not good to have them in a private repo either. At Pivotal, the github client...
View ArticleClik here to view.
Manually creating a Kubernetes cluster with kubeadm
I’ve talked about Pivotal Container Service (PKS) before and now work for Pivotal, so I’ve frequently got K8s on my mind. I’ve discussed at length the benefits of PKS and the creation of K8s clusters,...
View ArticleClik here to view.
Hands-on with VxRail v4.7.100
Recently (yesterday!) upgraded the VxRail clusters in a lab my team uses for Pivotal Ready Architecture development and testing and immediately noticed many differences. When trying to go to the VxRail...
View ArticleClik here to view.
Using Helm and Dynamic PersistentVolumes with Multi-AZ PKS on vSphere
So, you’ve installed PKS and created a PKS cluster. Excellent! Now what? We want to use helm charts to deploy applications. Many of the charts use PersistentVolumes, so getting PVs set up is our...
View ArticleClik here to view.
PAS with NSX-T Tip: use a fresh IP Block
I’ve fought with this for an embarrassingly long time. Had a failed PAS (Pivotal Application Services) deployment (missed several of the NSX configuration requirements) but removed the cruft and tried...
View ArticleNSX-T 2.2 – Error 100 when trying to enum Firewall Rules
After upgrading to NSX-T 2.2, my environment began throwing this error in the GUI when I tried to navigate to the firewall section or any router. In addition, the nsx-cli shell script for cleanup was...
View ArticleClik here to view.
Automating PKS Upgrades
Last night, Pivotal announced new versions of PKS and Harbor, so I thought it’s time to simplify the upgrade process. Here is a concourse pipeline that essentially aggregates the upgrade-tile pipeline...
View ArticleClik here to view.
PKS and NSX-T: I did everything wrong
I’ve fought with PKS and NSX-T for a month or so now. I’ll admit it: I did everything wrong, several times. One thing for certain, I know how NOT to configure it. So, now that I’ve finally gotten past...
View ArticleClik here to view.
Replacing the self-signed Certificate on NSX-T
Ran into a difficulty trying to use the self-signed certificate that comes pre-configured on the manager for NSX-T. In my case, Pivotal Operations Manager refused to accept the self-signed certificate....
View ArticleBOSH Stemcell 3541.2 breaks Concourse 3.9.0
Looks like there was a breaking change in stemcell v3541.2 where the default umask was set to 077. If this stemcell is used with BOSH-deployed-Concourse.CI v3.9.0, resource checking fails with a...
View Article
![BLACKPINK – DEADLINE – EP [iTunes Plus M4A]](http://is1-ssl.mzstatic.com/image/thumb/Video211/v4/de/b3/b1/deb3b1d4-ba28-22e8-2428-ef97617b2a4b/90d54d743002a6d66308f217cd867947_Preview_Image_Intermediate_nonvideo_sdr_426725135_2574858051.png/316x316bb.webp)
