WilliamLam.com

Quick Tip - Configuring vSphere Kubernetes Service (VKS) Cluster with self-signed container registry

by // 1 Comment

Over the weekend, I had finished building a small container application that I had developed on my local desktop, which worked great. However, the real test was to deploy the application on a vSphere Kubernetes Service (VKS) Cluster, which would require the container image to be hosted in a container registry.

Rather than using a public container registry, like many organizations, you typically would setup an internal registry that your infrastructure could have access to. Harbor is my go to container registry and is extremely simple to setup as it uses docker-compose under the hood.

After uploading my container image to Harbor, if you try to deploy it to your VKS Cluster, you will immediately see the following image pull error:

tls: failed to verify certificate: x509: certificate signed by unknown authority


Just like any system that attempts to connect to an endpoint with a self-signed TLS certificate that it can not verify, it will not trust which is the default behavior.

For our VKS Cluster to be able to successfully pull an image from Harbor with a self-signed TLS certificate, we need to add the trusted CA to our vSphere Namespace and then reference that as part of our VKS Cluster deployment.

[Read more...]

MS-A2 VCF 9.0 Lab: Configuring vSphere Kubernetes Service (VKS)

by // 1 Comment

This post is part of a short series that builds on our minimal VMware Cloud Foundation (VCF) 9.0 deployment (2x Minisforum MS-A2) and showcases how to fully leverage the exciting new capabilities in the VCF 9 platform, all while maintaining a minimal resource footprint, which is ideal for lab and learning purposes.

In this blog post, we will explore one of the foundational vSphere Supervisor services called vSphere Kubernetes Service (VKS), enabling administrators to easily deploy, manage and lifecycle conformant Kubernetes Clusters at scale for their development and platform teams. VKS can be consumed through vCenter Server for single IT organizations, as well as through VCF Automation for organizations that require strong multi-tenancy, including cloud service providers.


Here are some additional VKS Resources that might be of interests if you would like to learn more:

Requirements:

[Read more...]

VMware Flings Update

by // 25 Comments

This has been a difficult week for all VMware employees due to the pending acquisition of VMware by Broadcom. Many VMware employees are still waiting to hear back from Broadcom about their employment status either before and/or after the planned acquisition close date. I wanted to provide this context before sharing a quick update regarding the VMware Flings program.

On Tuesday October 24th, VMware Fling authors was made aware that the VMware Flings site (flings.vmware.com) would be taken down and website would simply be redirected to developer.vmware.com/samples starting on Thursday October 26th.

The VMware Flings program was operated and run by VMware's Office of the CTO (OCTO) and while I do not have specifics on why it needed to go down, I tried my best to share out the news as broadly and as quickly as I could so that folks could at least grab what they needed. While the original notice mentioned the site would function up until 10/26 at 5pm PST, it looks VMware IT had already made the DNS changes and the redirect has already been propagated.

As of right now, I do not know the future of the VMware Flings program, but I did want to share a few updates since the site and its downloads are no longer available.

[Read more...]