Overview
During this four-day course, you learn about installing VMware Tanzu® Kubernetes Grid™ in a VMware vSphere® environment and provisioning and managing Tanzu Kubernetes Grid clusters. The course covers how to install Tanzu Kubernetes Grid packages to provide services such as image registry, authentication, logging, ingress, multipod network interfaces, service discovery, image registry, and monitoring, in addition to day 2 operations such as backup, life cycle management, and application-specific tools. The concepts learned in this course are applicable for users who must install Tanzu Kubernetes Grid on supported clouds.
Audience
Platform operators who are responsible for deploying and managing Tanzu Kubernetes clusters
Products
- VMware Tanzu
Prerequisites
- Understanding of Kubernetes and the Kubernetes cluster architecture
- Experience deploying and managing multiple Kubernetes clusters
Delegates will learn how to
By the end of the course, you should be able to meet the following objectives:
- Describe how Tanzu Kubernetes Grid fits in the VMware Tanzu® portfolio
- Describe the Tanzu Kubernetes Grid architecture
- Deploy and manage Tanzu Kubernetes Grid management and supervisor clusters
- Deploy and manage Tanzu Kubernetes Grid workload clusters
- Deploy, configure, and manage Tanzu Kubernetes Grid packages
- Perform day 2 operations
- Perform basic troubleshooting
Outline
1 Course Introduction
- Introductions and course logistics
- Course objectives
2 Introducing Tanzu Kubernetes Grid
- Describe Tanzu Kubernetes Grid
- Describe VMware vSphere® with VMware Tanzu®
- Describe VMware Tanzu® Mission ControlTM
- Describe VMware Tanzu® for Kubernetes Operations
- Describe the Tanzu Kubernetes Grid components
- Discuss bootstrapping multiple Tanzu Kubernetes Grid instances
- Describe vSphere Namespaces
- Describe the benefits of registering with VMware Tanzu Mission Control
3 CLI Tools and Cluster API
- Describe the Tanzu CLI and plug-ins
- Describe the Kubernetes CLI Tools for vSphere
- Describe the Carvel tool set
- Describe Cluster API
- List the infrastructure providers
- Detail the Cluster API controllers
- List the Cluster API custom resource definitions
4 Authentication
- Define Kubernetes roles and RBAC API objects
- Define Pinniped and OpenID Connect
- Define Dex and LDAP authentication
- Define VMware vCenter® Single Sign-On integration with Tanzu Kubernetes Grid
- Identify the management cluster authentication components
- Describe the Pinniped workflow in Tanzu Kubernetes Grid on a management cluster
- Describe vSphere Namespace permissions and roles
- Define authentication using vCenter Single Sign-On
- Define authentication using external identity providers
- Identify the authentication options for kubectl and the Tanzu CLI
5 Load Balancers
- Explain load balancing in Tanzu Kubernetes Grid
- Describe the different load balancers that integrate with Tanzu Kubernetes Grid
- Discuss public cloud load balancing
- Describe the components of VMware NSX® Advanced Load BalancerTM
- Explain how Tanzu Kubernetes Grid integrates with NSX Advanced Load Balancer
6 VMware Tanzu Kubernetes Grid on vSphere
- Outline the requirements for deploying a supervisor cluster in a vSphere environment
- Describe the different options for deploying the supervisor cluster
- Describe the licensing requirements for supervisor clusters
- List the steps to install a Tanzu Kubernetes Grid supervisor cluster and retrieve its status
- Describe how to apply a full license to the supervisor cluster
- List the requirements for deploying a management cluster in a vSphere environment
- List the requirements for a bootstrap machine
- List the requirements for Internet-restricted environments
- Explain how the Tanzu Kubernetes Grid version relates to specific OVA versions
- Describe the optional configuration for deploying a management cluster in a vSphere environment
- List the steps to install a Tanzu Kubernetes Grid management cluster
- Summarize the creation of a management cluster
- Define the commands available for working with management clusters
- List the steps to register Tanzu Kubernetes Grid management clusters with VMware Tanzu Mission Control
7 VMware Tanzu Kubernetes Grid on Public Clouds
- Describe the requirements for deploying a management cluster on AWS and Azure
- Summarize the process of creating a management cluster on a public cloud
8 Tanzu Kubernetes Grid Workload Clusters
- List the options for deploying Tanzu Kubernetes Grid workload clusters
- Describe the different types of Tanzu Kubernetes Grid workload clusters
- Explain how Tanzu Kubernetes Grid clusters are created
- Describe the VMs that are included in a workload cluster
- Describe the components of a workload cluster
- Describe the difference between machine images and custom machine images
- List the available customizations
- Explain how to build custom images
- Describe how to use custom images
- Describe the commands available for working with workload clusters
- Explain how to scale workload clusters
- Describe machine health checks
9 Tanzu Kubernetes Grid Packages
- Explain how Tanzu Kubernetes Grid uses packages
- Identify the different package repositories
- Describe the different types of packages and their dependencies
- Define auto-managed packages
- Identify the auto-managed packages that are installed to every cluster and those that are installed based on configuration
- Explain how auto-managed packages are installed and configured
- Define CLI-managed packages
- Explain how CLI-managed packages are installed and configured
- Use the Tanzu CLI to configure and install optional packages and repositories
10 Configuring and Managing Tanzu Kubernetes Grid Networking Packages
- Describe cert-manager
- Explain how to install cert-manager
- Describe the Contour ingress controller
- Explain how to install Contour
- Describe service discovery
- Describe ExternalDNS
- Detail the configuration options for BIND servers
- Explain how to install ExternalDNS
- Describe Multus
- Describe Multus pod configuration
- Describe Whereabouts
- Explain how to install Multus and Whereabouts
11 Configuring and Managing Tanzu Kubernetes Grid Operation and Analytics Packages
- Describe Fluent Bit
- Detail the logs that Fluent Bit collects
- Describe basic Fluent Bit configuration
- Explain how to install Fluent Bit
- Describe Prometheus
- Describe Grafana
- Describe the Harbor image registry
- Explain Harbor vulnerability scanning
12 Tanzu Kubernetes Grid Day 2 Operations
- Explain the process of authenticating Tanzu Kubernetes Grid workload clusters
- Identify the method of creating restricted role-based access to components inside a workload cluster
- Explain how Tanzu Kubernetes Grid integrates with NSX Advanced Load Balancer for ingress
- Describe VMware Tanzu® Application PlatformTM
- List the steps to install Tanzu Application Platform on Tanzu Kubernetes Grid workload clusters
- Describe the prerequisites and steps for upgrading Tanzu Kubernetes Grid instances
- Describe the prerequisites and steps for updating Tanzu Kubernetes Grid workload clusters
- Understand how VMware Tanzu Mission Control manages the life cycle of Tanzu Kubernetes Grid
- Define Velero Plugin for vSphere and standalone Velero
- Describe Velero Plugin for vSphere
- Identify the steps to install Velero on workload clusters
- Explain how to back up and restore workload clusters with the Velero CLI and VMware Tanzu Mission Control
13 Troubleshooting Tanzu Kubernetes Grid
- Describe the various Tanzu Kubernetes Grid logs
- Explain how to review the Cluster API controller logs
- Identify the location of the Tanzu Kubernetes Grid logs
- Explain the purpose of Crash Diagnostics
- Describe how to use SSH to connect to Tanzu Kubernetes Grid nodes
- Explain how to troubleshoot package installation errors
Frequently asked questions
See all of our FAQsHow can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting (more details in the link below) to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
Learn more about our Virtual Classrooms.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
Learn more about QA’s online courses.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.