Logging into a Kubernetes cluster with an OIDC LDAP account
I confess, most of my experience with Kubernetes is with Pivotal Container Service (PKS) Enterprise. PKS makes it rather easy to get started and I found that I took some tasks for granted. In PKS...
View ArticleAdding a private Docker registry to a PKS 1.5 Windows Kubernetes cluster
Pivotal Container Service (PKS) 1.5 and Kubernetes 1.14 bring *beta* support for Workers running Windows. This means that we can provide the advantages of Kubernetes to a huge array of applications...
View ArticleReplicating images from DockerHub to Harbor
I found the documentation for actually replicating images from DockerHub to a local Harbor instance to be missing. So here’s what I’ve found: Objective: Replicate the images for the Yelb sample...
View ArticleConfigure Tanzu Kubernetes Grid to use Active Directory
Tanzu Kubernetes Grid includes and supports packages for dex and Gangway. These are used to extend authentication to LDAP and OIDC endpoints. Recall that Kubernetes does not do user-management or...
View ArticleUse Helm to deploy Harbor with Annotations for Velero
So, lets say you want to deploy an instance of Harbor to your “services” kubernetes cluster. The cluster is protected by a scheduled Velero backup Velero pickup all resources in all namespaces by...
View ArticleRetrieving the Admin Password for Harbor Image Registry in Tanzu Kubernetes...
In TKGS on vSphere 7.0 through (at least) 7.0.1d, a Harbor Image Registry may be enabled for the vSphere Cluster (Under Configure|Namespaces| Image Registry). This feature currently (as of 7.0.1d)...
View ArticleAdding trusted certs to nodes on TKGS 7.0 U2
A new feature added to TKGS as of 7.0 Update 2 is support for adding private SSL certificates to the “trust” on TKG cluster nodes. This is very important as it finally provides a supported mechanism...
View ArticleGetting Started with VMware Tanzu SQL with MySQL for Kubernetes
VMware Tanzu SQL with MySQL for Kubernetes is quite a mouthful. For this post, I’ll refer to the product as Tanzu SQL/MySQL. We’re going to deploy it onto an existing Tanzu Kubernetes Grid cluster....
View ArticleConfiguring VMware Tanzu SQL with MySQL for Kubernetes for High Availability
As a follow up to the getting started post, let’s touch on what it takes to configure a MySQL instance for High Availability in Tanzu SQL/MySQL Why this is important In kubernetes, pods are generally...
View ArticleConfiguring Backup in Tanzu SQL with MySQL for Kubernetes
Backup & Restore Prerequisite: A reachable S3 endpoint. Can be local or remote, but the pods must be able to resolve its name or IP. Create or select and existing bucket for your database backups....
View Article