---
# System prepended metadata

title: TAP 1.5 baseline

---

# TAP 1.5 baseline

Before running tap install, create these two resources:
1. tap-dev namespace
```
$ kubectl create ns tap-dev
```
2. registry-credentials secret in namespace tap-install
```

```

TAP values.yml
```
shared:
  ingress_domain: "taptestazure.carvelind.cloudfocused.in"

  image_registry: 
    project_path: "docker.io/rohitagg2020"
    secret:
      name: "registry-credentials"
      namespace: "tap-install"

  
  kubernetes_version: "1.26.10" # Required regardless of distribution when Kubernetes version is 1.25 or later.


ceip_policy_disclosed: TRUE # Installation fails if this is not set to true. Not a string.

#The above keys are minimum numbers of entries needed in tap-values.yaml to get a functioning TAP Full profile installation.

#Below are the keys which may have default values set, but can be overridden.

profile: full # Can take iterate, build, run, view.

supply_chain: basic # Can take testing, testing_scanning.

ootb_supply_chain_basic: # Based on supply_chain set above, can be changed to ootb_supply_chain_testing, ootb_supply_chain_testing_scanning.
  registry:
    server: "docker.io/rohitagg2020" # Takes the value from the shared section by default, but can be overridden by setting a different value.
    repository: "build-service" # Takes the value from the shared section by default, but can be overridden by setting a different value.
  gitops:
    ssh_secret: "" # Takes "" as value by default; but can be overridden by setting a different value.

contour:
  envoy:
    service:
      type: LoadBalancer # This is set by default, but can be overridden by setting a different value.

buildservice:
  # Takes the value from the shared section by default, but can be overridden by setting a different value.
  kp_default_repository: "docker.io/rohitagg2020"
  kp_default_repository_secret: # Takes the value from the shared section above by default, but can be overridden by setting a different value.
    name: "registry-credentials"
    namespace: "tap-install"

tap_gui:
  service_type: ClusterIP # If the shared.ingress_domain is set as earlier, this must be set to ClusterIP.
  metadataStoreAutoconfiguration: true # Create a service account, the Kubernetes control plane token and the requisite app_config block to enable communications between Tanzu Application Platform GUI and SCST - Store.
  app_config:
    catalog:
      locations:
        - type: url
          target: https://github.com/kumaritanushree/tap-catalog/blob/master/catalog-info.yaml

metadata_store:
  ns_for_export_app_cert: "tap-dev"
  app_service_type: ClusterIP # Defaults to LoadBalancer. If shared.ingress_domain is set earlier, this must be set to ClusterIP.

scanning:
  metadataStore:
    url: "" # Configuration is moved, so set this string to empty.

grype:
  namespace: "tap-dev"
 # targetImagePullSecret: "TARGET-REGISTRY-CREDENTIALS-SECRET"
  # In a single cluster, the connection between the scanning pod and the metadata store happens inside the cluster and does not pass through ingress. This is automatically configured, you do not need to provide an ingress connection to the store.
```
## AWS
* cluster creation: 16m
* install EBS CSI driver: 10m 
with error: 
```
 eksctl create iamserviceaccount \
  --name ebs-csi-controller-sa \
  --namespace kube-system \
  --cluster $EKS_CLUSTER_NAME \
  --attach-policy-arn arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy \
  --approve \
  --role-only \
  --role-name AmazonEKS_EBS_CSI_DriverRole
2023-03-24 15:05:11 [ℹ]  1 existing iamserviceaccount(s) (kube-system/aws-node) will be excluded
2023-03-24 15:05:11 [ℹ]  1 iamserviceaccount (kube-system/ebs-csi-controller-sa) was included (based on the include/exclude rules)
2023-03-24 15:05:11 [!]  serviceaccounts that exist in Kubernetes will be excluded, use --override-existing-serviceaccounts to override
2023-03-24 15:05:11 [ℹ]  1 task: { create IAM role for serviceaccount "kube-system/ebs-csi-controller-sa" }
2023-03-24 15:05:11 [ℹ]  building iamserviceaccount stack "eksctl-tap-on-aws-kt-addon-iamserviceaccount-kube-system-ebs-csi-controller-sa"
2023-03-24 15:05:11 [ℹ]  deploying stack "eksctl-tap-on-aws-kt-addon-iamserviceaccount-kube-system-ebs-csi-controller-sa"
2023-03-24 15:05:11 [ℹ]  waiting for CloudFormation stack "eksctl-tap-on-aws-kt-addon-iamserviceaccount-kube-system-ebs-csi-controller-sa"
2023-03-24 15:05:41 [ℹ]  waiting for CloudFormation stack "eksctl-tap-on-aws-kt-addon-iamserviceaccount-kube-system-ebs-csi-controller-sa"
2023-03-24 15:05:41 [ℹ]  1 error(s) occurred and IAM Role stacks haven't been created properly, you may wish to check CloudFormation console
2023-03-24 15:05:41 [✖]  waiter state transitioned to Failure
```

* Registry creation and role and arn for that registry: 3m   

* cluster essentials install: 4m (including download tar, export var and install. Install took 1m)

* export var for image relocation: 2m

* Image relocation: 1h44m


Need to look into it:
```
ktanushree4XJYT:mumbai-cluster ktanushree$ kubectl get pods -n accelerator-system
NAME                                              READY   STATUS      RESTARTS   AGE
acc-engine-5d596d96dd-mxlv4                       1/1     Running     0          4d16h
acc-jobs-28005600-clbhh                           0/1     Completed   0          2d2h
acc-jobs-28007040-ksw5c                           0/1     Completed   0          26h
acc-jobs-28008480-jhwkj                           0/1     Completed   0          167m
acc-server-6f9bf6dfbb-9l7sc                       1/1     Running     0          4d16h
accelerator-controller-manager-7dbb6764d4-s9bw7   1/1     Running     0          4d16h
ktanushree4XJYT:mumbai-cluster ktanushree$ 
ktanushree4XJYT:mumbai-cluster ktanushree$ 
ktanushree4XJYT:mumbai-cluster ktanushree$ 
ktanushree4XJYT:mumbai-cluster ktanushree$ kubectl logs acc-jobs-28005600-clbhh
Error from server (NotFound): pods "acc-jobs-28005600-clbhh" not found
ktanushree4XJYT:mumbai-cluster ktanushree$ 
ktanushree4XJYT:mumbai-cluster ktanushree$ kubectl logs acc-jobs-28005600-clbhh -n accelerator-system
{"level":"info","ts":"2023-04-01T08:00:01.056251634Z","msg":"Starting jobs ..."}
{"level":"info","ts":"2023-04-01T08:00:01.056330825Z","logger":"CleanInvocationEventsJob","msg":"Starting the Job"}
{"level":"info","ts":"2023-04-01T08:00:01.056339338Z","logger":"CleanInvocationEventsJob","msg":"Using","maxAgeInDays":30}
{"level":"info","ts":"2023-04-01T08:00:01.056346905Z","logger":"CleanInvocationEventsJob","msg":"Using","maxAgeDuration":2592000000000000}
{"level":"info","ts":"2023-04-01T08:00:01.064239898Z","msg":"Completed all jobs!"}
```

## AZURE
Cluster Configuration: Configuration: 4 Standard_D4as_v4 nodes, 4 vCPUs and 16 GB RAM each


**Container registry:** 5m (exploring option as well)
details: 
    name: testtapmages
    SKU: Basic (it has 10 GB storage)
    location central india
    login server: testtapmages.azurecr.io
    username: testtapmages
    pass: ibICvxj4q9vTY6zEpHUfn4b8c85vmEWaDV+G+wOF9U+ACRDKKyg5
    
    time taken to find username, pass: 20min
    (how to get cred: go to registry -> access key-> enable adin user -> copy username and password )
    
export ENV for image relocation: 4m

finding creds with read, right access for registry: 10m

**image relocation:** 71m
```
export IMGPKG_REGISTRY_HOSTNAME_0=registry.tanzu.vmware.com
export IMGPKG_REGISTRY_USERNAME_0=ktanushree@vmware.com
export IMGPKG_REGISTRY_PASSWORD_0=Tanu@123
export IMGPKG_REGISTRY_HOSTNAME_1=tapimagesnew.azurecr.io
export IMGPKG_REGISTRY_USERNAME_1=tapimagesnew
export IMGPKG_REGISTRY_PASSWORD_1=OOi+cz2mlcqPmLsNgTBohCgt5zATKGpU8hV08msgY2+ACRB+6+Vy
export INSTALL_REGISTRY_USERNAME=tapimagesnew
export INSTALL_REGISTRY_PASSWORD=OOi+cz2mlcqPmLsNgTBohCgt5zATKGpU8hV08msgY2+ACRB+6+Vy
export INSTALL_REGISTRY_HOSTNAME=tapimagesnew.azurecr.io
export TAP_VERSION=1.5.0
 export INSTALL_REPO=tap-images
 ```

**add secrets:**
```
tanzu secret registry add registry-credentials \
    --server   ${INSTALL_REGISTRY_HOSTNAME} \
    --username ${INSTALL_REGISTRY_USERNAME} \
    --password ${INSTALL_REGISTRY_PASSWORD} \
    --namespace tap-install \
    --export-to-all-namespaces \
    --yes
```

**cluster creation:** 15m (exploration and some failure due to node unavailability. Actual creation time is 5m)

```
export INSTALL_BUNDLE=registry.tanzu.vmware.com/tanzu-cluster-essentials/cluster-essentials-bundle@sha256:79abddbc3b49b44fc368fede0dab93c266ff7c1fe305e2d555ed52d00361b446
export INSTALL_REGISTRY_HOSTNAME=registry.tanzu.vmware.com
export INSTALL_REGISTRY_USERNAME=ktanushree@vmware.com
export INSTALL_REGISTRY_PASSWORD=Tanu@123
```


**tanzu cli:** 7m (took time to check correct version and cmd)
issues: https://docs-staging.vmware.com/en/draft/VMware-Tanzu-Application-Platform/1.5/tap/install-tanzu-cli.html

tar file name is: tanzu-framework-darwin-amd64-v0.28.1.1.tar
tanzu version is: v0.28.1
for install cmd should be: sudo install cli/core/v0.28.1/tanzu-core-darwin_amd64 /usr/local/bin/tanzu

**Install CE:** 
download and unstar: 1m
export env and install: 2m

Add repo and secrets for TAP: 4m (failed for adding secret for registry due to wrong ENVs)

write tap-values.yaml: 15m (go through each field as there are chnages in format)

MY_DEV_NAMESPACE : document should says this namespace should be available before installing TAP.


tap isntall is  failing and then started reconciling automatically.
```
$ time tanzu package install tap -p tap.tanzu.vmware.com -v $TAP_VERSION --values-file tap-values.yaml -n tap-install

11:07:52PM: Creating service account 'tap-tap-install-sa'
11:07:52PM: Creating cluster admin role 'tap-tap-install-cluster-role'
11:07:52PM: Creating cluster role binding 'tap-tap-install-cluster-rolebinding'
11:07:52PM: Creating secret 'tap-tap-install-values'
11:07:52PM: Creating overlay secrets
11:07:52PM: Creating package install resource
11:07:53PM: Waiting for PackageInstall reconciliation for 'tap'
11:07:53PM: Fetch started 
11:07:53PM: Fetching 
	    | apiVersion: vendir.k14s.io/v1alpha1
	    | directories:
	    | - contents:
	    |   - imgpkgBundle:
	    |       image: tapimagesnew.azurecr.io/tap-images/tap-packages@sha256:2ef21f69c3c1d9106836d01d8f0369352a3c30889c41dc8f7455b4b2a8d5c918
	    |     path: .
	    |   path: "0"
	    | kind: LockConfig
	    | 
11:07:53PM: Fetch succeeded 
11:07:54PM: Template succeeded 
11:07:54PM: Deploy started (2s ago)
11:07:56PM: Deploying 
	    | Target cluster 'https://10.0.0.1:443' (nodes: aks-agentpool-12860209-vmss000000, 3+)
	    | Changes
	    | Namespace    Name                                    Kind                Age  Op      Op st.  Wait to    Rs  Ri
	    | (cluster)    tap-install-cluster-admin-role          ClusterRole         -    create  -       reconcile  -   -
	    | ^            tap-install-cluster-admin-role-binding  ClusterRoleBinding  -    create  -       reconcile  -   -
	    | tap-install  accelerator                             PackageInstall      -    create  -       reconcile  -   -
	    | ^            accelerator-values-ver-1                Secret              -    create  -       reconcile  -   -
	    | ^            api-auto-registration                   PackageInstall      -    create  -       reconcile  -   -
	    | ^            api-auto-registration-values-ver-1      Secret              -    create  -       reconcile  -   -
	    | ^            api-portal                              PackageInstall      -    create  -       reconcile  -   -
	    | ^            api-portal-values-ver-1                 Secret              -    create  -       reconcile  -   -
	    | ^            appliveview                             PackageInstall      -    create  -       reconcile  -   -
	    | ^            appliveview-apiserver                   PackageInstall      -    create  -       reconcile  -   -
	    | ^            appliveview-apiserver-values-ver-1      Secret              -    create  -       reconcile  -   -
	    | ^            appliveview-connector                   PackageInstall      -    create  -       reconcile  -   -
	    | ^            appliveview-connector-values-ver-1      Secret              -    create  -       reconcile  -   -
	    | ^            appliveview-conventions                 PackageInstall      -    create  -       reconcile  -   -
	    | ^            appliveview-conventions-values-ver-1    Secret              -    create  -       reconcile  -   -
	    | ^            appliveview-values-ver-1                Secret              -    create  -       reconcile  -   -
	    | ^            appsso                                  PackageInstall      -    create  -       reconcile  -   -
	    | ^            appsso-values-ver-1                     Secret              -    create  -       reconcile  -   -
	    | ^            bitnami-services                        PackageInstall      -    create  -       reconcile  -   -
	    | ^            bitnami-services-values-ver-1           Secret              -    create  -       reconcile  -   -
	    | ^            buildservice                            PackageInstall      -    create  -       reconcile  -   -
	    | ^            buildservice-values-ver-1               Secret              -    create  -       reconcile  -   -
	    | ^            cartographer                            PackageInstall      -    create  -       reconcile  -   -
	    | ^            cartographer-values-ver-1               Secret              -    create  -       reconcile  -   -
	    | ^            cert-manager                            PackageInstall      -    create  -       reconcile  -   -
	    | ^            cert-manager-values-ver-1               Secret              -    create  -       reconcile  -   -
	    | ^            cnrs                                    PackageInstall      -    create  -       reconcile  -   -
	    | ^            cnrs-values-ver-1                       Secret              -    create  -       reconcile  -   -
	    | ^            contour                                 PackageInstall      -    create  -       reconcile  -   -
	    | ^            contour-values-ver-1                    Secret              -    create  -       reconcile  -   -
	    | ^            crossplane                              PackageInstall      -    create  -       reconcile  -   -
	    | ^            crossplane-values-ver-1                 Secret              -    create  -       reconcile  -   -
	    | ^            developer-conventions                   PackageInstall      -    create  -       reconcile  -   -
	    | ^            developer-conventions-values-ver-1      Secret              -    create  -       reconcile  -   -
	    | ^            eventing                                PackageInstall      -    create  -       reconcile  -   -
	    | ^            eventing-values-ver-1                   Secret              -    create  -       reconcile  -   -
	    | ^            fluxcd-source-controller                PackageInstall      -    create  -       reconcile  -   -
	    | ^            fluxcd-source-controller-values-ver-1   Secret              -    create  -       reconcile  -   -
	    | ^            grype                                   PackageInstall      -    create  -       reconcile  -   -
	    | ^            grype-values-ver-1                      Secret              -    create  -       reconcile  -   -
	    | ^            learningcenter                          PackageInstall      -    create  -       reconcile  -   -
	    | ^            learningcenter-values-ver-1             Secret              -    create  -       reconcile  -   -
	    | ^            learningcenter-workshops                PackageInstall      -    create  -       reconcile  -   -
	    | ^            metadata-store                          PackageInstall      -    create  -       reconcile  -   -
	    | ^            metadata-store-values-ver-1             Secret              -    create  -       reconcile  -   -
	    | ^            namespace-provisioner                   PackageInstall      -    create  -       reconcile  -   -
	    | ^            namespace-provisioner-values-ver-1      Secret              -    create  -       reconcile  -   -
	    | ^            ootb-delivery-basic                     PackageInstall      -    create  -       reconcile  -   -
	    | ^            ootb-delivery-basic-values-ver-1        Secret              -    create  -       reconcile  -   -
	    | ^            ootb-supply-chain-basic                 PackageInstall      -    create  -       reconcile  -   -
	    | ^            ootb-supply-chain-basic-values-ver-1    Secret              -    create  -       reconcile  -   -
	    | ^            ootb-templates                          PackageInstall      -    create  -       reconcile  -   -
	    | ^            ootb-templates-values-ver-1             Secret              -    create  -       reconcile  -   -
	    | ^            policy-controller                       PackageInstall      -    create  -       reconcile  -   -
	    | ^            policy-values-ver-1                     Secret              -    create  -       reconcile  -   -
	    | ^            scanning                                PackageInstall      -    create  -       reconcile  -   -
	    | ^            scanning-values-ver-1                   Secret              -    create  -       reconcile  -   -
	    | ^            service-bindings                        PackageInstall      -    create  -       reconcile  -   -
	    | ^            services-toolkit                        PackageInstall      -    create  -       reconcile  -   -
	    | ^            services-toolkit-values-ver-1           Secret              -    create  -       reconcile  -   -
	    | ^            source-controller                       PackageInstall      -    create  -       reconcile  -   -
	    | ^            source-controller-values-ver-1          Secret              -    create  -       reconcile  -   -
	    | ^            spring-boot-conventions                 PackageInstall      -    create  -       reconcile  -   -
	    | ^            springboot-conventions-values-ver-1     Secret              -    create  -       reconcile  -   -
	    | ^            tap-auth                                PackageInstall      -    create  -       reconcile  -   -
	    | ^            tap-gui                                 PackageInstall      -    create  -       reconcile  -   -
	    | ^            tap-gui-values-ver-1                    Secret              -    create  -       reconcile  -   -
	    | ^            tap-install-sa                          ServiceAccount      -    create  -       reconcile  -   -
	    | ^            tap-telemetry                           PackageInstall      -    create  -       reconcile  -   -
	    | ^            tap-telemetry-values-ver-1              Secret              -    create  -       reconcile  -   -
	    | ^            tekton-pipelines                        PackageInstall      -    create  -       reconcile  -   -
	    | ^            tekton-pipelines-values-ver-1           Secret              -    create  -       reconcile  -   -
	    | Op:      72 create, 0 delete, 0 update, 0 noop, 0 exists
	    | Wait to: 72 reconcile, 0 delete, 0 noop
	    | 5:37:54PM: ---- applying 35 changes [0/72 done] ----
	    | 5:37:54PM: create secret/contour-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/source-controller-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/api-auto-registration-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/bitnami-services-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create serviceaccount/tap-install-sa (v1) namespace: tap-install
	    | 5:37:54PM: create secret/appliveview-apiserver-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/appliveview-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/cert-manager-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/cartographer-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/buildservice-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/ootb-supply-chain-basic-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/crossplane-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/appliveview-conventions-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/cnrs-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/developer-conventions-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/appliveview-connector-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/eventing-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/fluxcd-source-controller-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/learningcenter-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/grype-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/metadata-store-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/namespace-provisioner-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/ootb-delivery-basic-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/springboot-conventions-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/accelerator-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/ootb-templates-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/scanning-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/policy-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/tap-telemetry-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/services-toolkit-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/appsso-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/tap-gui-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/api-portal-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create secret/tekton-pipelines-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: create clusterrole/tap-install-cluster-admin-role (rbac.authorization.k8s.io/v1) cluster
	    | 5:37:54PM: ---- waiting on 35 changes [0/72 done] ----
	    | 5:37:54PM: ok: reconcile secret/api-auto-registration-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/source-controller-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile serviceaccount/tap-install-sa (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile clusterrole/tap-install-cluster-admin-role (rbac.authorization.k8s.io/v1) cluster
	    | 5:37:54PM: ok: reconcile secret/contour-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/appliveview-apiserver-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/cert-manager-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/cartographer-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/buildservice-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/appliveview-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/ootb-supply-chain-basic-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/cnrs-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/appliveview-conventions-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/crossplane-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/developer-conventions-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/grype-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/eventing-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/appliveview-connector-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/fluxcd-source-controller-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/learningcenter-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/ootb-delivery-basic-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/accelerator-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/metadata-store-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/springboot-conventions-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/namespace-provisioner-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/scanning-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/services-toolkit-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/ootb-templates-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/policy-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/tap-telemetry-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/appsso-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/tap-gui-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/bitnami-services-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/api-portal-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ok: reconcile secret/tekton-pipelines-values-ver-1 (v1) namespace: tap-install
	    | 5:37:54PM: ---- applying 1 changes [35/72 done] ----
	    | 5:37:54PM: create clusterrolebinding/tap-install-cluster-admin-role-binding (rbac.authorization.k8s.io/v1) cluster
	    | 5:37:54PM: ---- waiting on 1 changes [35/72 done] ----
	    | 5:37:54PM: ok: reconcile clusterrolebinding/tap-install-cluster-admin-role-binding (rbac.authorization.k8s.io/v1) cluster
	    | 5:37:54PM: ---- applying 1 changes [36/72 done] ----
	    | 5:37:54PM: create packageinstall/tap-telemetry (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:37:54PM: ---- waiting on 1 changes [36/72 done] ----
	    | 5:37:54PM: ongoing: reconcile packageinstall/tap-telemetry (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:37:54PM:  ^ Waiting for generation 1 to be observed
	    | 5:37:57PM: ongoing: reconcile packageinstall/tap-telemetry (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:37:57PM:  ^ Reconciling
	    | 5:38:03PM: ok: reconcile packageinstall/tap-telemetry (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: ---- applying 11 changes [37/72 done] ----
	    | 5:38:03PM: create packageinstall/cert-manager (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/crossplane (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/appliveview-connector (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/eventing (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/tekton-pipelines (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/buildservice (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/fluxcd-source-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/scanning (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/service-bindings (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/namespace-provisioner (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: create packageinstall/tap-auth (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM: ---- waiting on 11 changes [37/72 done] ----
	    | 5:38:03PM: ongoing: reconcile packageinstall/cert-manager (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/buildservice (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/service-bindings (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/tap-auth (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/tekton-pipelines (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/crossplane (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/appliveview-connector (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/fluxcd-source-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/namespace-provisioner (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/eventing (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:03PM: ongoing: reconcile packageinstall/scanning (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:03PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:06PM: ongoing: reconcile packageinstall/buildservice (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:06PM:  ^ Reconciling
	    | 5:38:06PM: ongoing: reconcile packageinstall/scanning (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:06PM:  ^ Reconciling
	    | 5:38:06PM: ongoing: reconcile packageinstall/cert-manager (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:06PM:  ^ Reconciling
	    | 5:38:06PM: ongoing: reconcile packageinstall/tekton-pipelines (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:06PM:  ^ Reconciling
	    | 5:38:06PM: ongoing: reconcile packageinstall/appliveview-connector (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:06PM:  ^ Reconciling
	    | 5:38:06PM: ongoing: reconcile packageinstall/crossplane (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:06PM:  ^ Reconciling
	    | 5:38:06PM: ongoing: reconcile packageinstall/eventing (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:06PM:  ^ Reconciling
	    | 5:38:09PM: ongoing: reconcile packageinstall/service-bindings (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:09PM:  ^ Reconciling
	    | 5:38:09PM: ongoing: reconcile packageinstall/fluxcd-source-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:09PM:  ^ Reconciling
	    | 5:38:09PM: ongoing: reconcile packageinstall/namespace-provisioner (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:09PM:  ^ Reconciling
	    | 5:38:12PM: ongoing: reconcile packageinstall/tap-auth (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:12PM:  ^ Reconciling
	    | 5:38:21PM: ok: reconcile packageinstall/appliveview-connector (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:21PM: ---- waiting on 10 changes [38/72 done] ----
	    | 5:38:24PM: ok: reconcile packageinstall/fluxcd-source-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:24PM: ---- waiting on 9 changes [39/72 done] ----
	    | 5:38:27PM: ok: reconcile packageinstall/tekton-pipelines (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:27PM: ok: reconcile packageinstall/tap-auth (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:27PM: ---- waiting on 7 changes [41/72 done] ----
	    | 5:38:30PM: ok: reconcile packageinstall/scanning (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:30PM: ok: reconcile packageinstall/namespace-provisioner (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:30PM: ---- applying 1 changes [48/72 done] ----
	    | 5:38:30PM: create packageinstall/grype (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:30PM: ---- waiting on 6 changes [43/72 done] ----
	    | 5:38:30PM: ongoing: reconcile packageinstall/grype (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:30PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:33PM: ok: reconcile packageinstall/service-bindings (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:33PM: ongoing: reconcile packageinstall/grype (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:33PM:  ^ Reconciling
	    | 5:38:33PM: ---- waiting on 5 changes [44/72 done] ----
	    | 5:38:36PM: ok: reconcile packageinstall/grype (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:36PM: ok: reconcile packageinstall/crossplane (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:36PM: ---- waiting on 3 changes [46/72 done] ----
	    | 5:38:49PM: ok: reconcile packageinstall/cert-manager (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: ---- applying 9 changes [49/72 done] ----
	    | 5:38:49PM: create packageinstall/appliveview-apiserver (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/api-auto-registration (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/api-portal (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/cartographer (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/appsso (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/source-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/contour (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/services-toolkit (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: create packageinstall/policy-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM: ---- waiting on 11 changes [47/72 done] ----
	    | 5:38:49PM: ongoing: reconcile packageinstall/api-portal (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/cartographer (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/source-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/policy-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/appliveview-apiserver (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/appsso (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/api-auto-registration (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/contour (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:49PM: ongoing: reconcile packageinstall/services-toolkit (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:49PM:  ^ Waiting for generation 1 to be observed
	    | 5:38:52PM: ongoing: reconcile packageinstall/cartographer (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:52PM:  ^ Reconciling
	    | 5:38:52PM: ongoing: reconcile packageinstall/api-portal (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:52PM:  ^ Reconciling
	    | 5:38:52PM: ongoing: reconcile packageinstall/appsso (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:52PM:  ^ Reconciling
	    | 5:38:52PM: ongoing: reconcile packageinstall/appliveview-apiserver (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:52PM:  ^ Reconciling
	    | 5:38:52PM: ongoing: reconcile packageinstall/api-auto-registration (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:52PM:  ^ Reconciling
	    | 5:38:52PM: ongoing: reconcile packageinstall/contour (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:52PM:  ^ Reconciling
	    | 5:38:55PM: ongoing: reconcile packageinstall/policy-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:55PM:  ^ Reconciling
	    | 5:38:55PM: ongoing: reconcile packageinstall/services-toolkit (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:55PM:  ^ Reconciling
	    | 5:38:55PM: ongoing: reconcile packageinstall/source-controller (packaging.carvel.dev/v1alpha1) namespace: tap-install
	    | 5:38:55PM:  ^ Reconciling
11:08:58PM: Deploy failed 
	    | kapp: Error: waiting on reconcile packageinstall/api-portal (packaging.carvel.dev/v1alpha1) namespace: tap-install:
	    |   Finished unsuccessfully (Reconcile failed:  (message: kapp: Error: Expected to find kind 'projectcontour.io/v1/HTTPProxy', but did not:
	    | - Kubernetes API server did not have matching apiVersion + kind
	    | - No matching CRD was found in given configuration))
	    | Deploying: Error (see .status.usefulErrorMessage for details)
11:08:58PM: Error tailing app: Reconciling app: Deploy failed

11:08:59PM: packageinstall/tap (packaging.carvel.dev/v1alpha1) namespace: tap-install: Reconciling
11:09:02PM: packageinstall/tap (packaging.carvel.dev/v1alpha1) namespace: tap-install: ReconcileFailed
Error: packageinstall/tap (packaging.carvel.dev/v1alpha1) namespace: tap-install: Reconciling: kapp: Error: waiting on reconcile packageinstall/api-portal (packaging.carvel.dev/v1alpha1) namespace: tap-install:
  Finished unsuccessfully (Reconcile failed:  (message: kapp: Error: Expected to find kind 'projectcontour.io/v1/HTTPProxy', but did not:
- Kubernetes API server did not have matching apiVersion + kind
- No matching CRD was found in given configuration)). Reconcile failed: Error (see .status.usefulErrorMessage for details)

real	1m10.843s
user	0m0.431s
sys	0m0.218s
```
Could not capture error in api-portal as it started reconcilation automatically in second. 


total time taken in TAP installation: 5m

DNS configuration: 5m (used existing DNS zone and need TAP update with new domain)

## AZURE on separate doc

**login to azure and create subscription and resourcegroup:** 1m

**cluster creation:** 4.5m


## TKG

**Image relocation:** 113m (fails 2 times)
```
export IMGPKG_REGISTRY_HOSTNAME_0=registry.tanzu.vmware.com
export IMGPKG_REGISTRY_USERNAME_0=ktanushree@vmware.com
export IMGPKG_REGISTRY_PASSWORD_0=Tanu@123
export IMGPKG_REGISTRY_HOSTNAME_1=harbor-repo.vmware.com
export IMGPKG_REGISTRY_USERNAME_1=ktanushree
export IMGPKG_REGISTRY_PASSWORD_1=Vmw@0222#tanu
export INSTALL_REGISTRY_USERNAME=ktanushree
export INSTALL_REGISTRY_PASSWORD=Vmw@0222#tanu
export INSTALL_REGISTRY_HOSTNAME=harbor-repo.vmware.com
export TAP_VERSION=1.5.0
export INSTALL_REPO=carvelind # repo in harbor for which I have admin permission
 ```
 **Pre-install setup:** env, create secret, add repo -> 1.5m
 
 **create values.yaml:** 5m
 
 **tap install:** 9m (build-service took bit more time to recover after failure)
 
 
 api-portal always failing with below error and after second it start reconciling automatically (without any change) 
 ```
 $ kubectl describe pkgi  api-portal -n tap-install
Name:         api-portal
Namespace:    tap-install
Labels:       kapp.k14s.io/app=1681889254528350007
              kapp.k14s.io/association=v1.31801edfd2d246e80e8529593f369f83
Annotations:  kapp.k14s.io/change-rule: delete before deleting serviceaccount
              kapp.k14s.io/change-rule.cert-manager: upsert after upserting cert-manager
              kapp.k14s.io/change-rule.telemetry: upsert after upserting telemetry
              kapp.k14s.io/identity: v1;tap-install/packaging.carvel.dev/PackageInstall/api-portal;packaging.carvel.dev/v1alpha1
              kapp.k14s.io/original:
                {"apiVersion":"packaging.carvel.dev/v1alpha1","kind":"PackageInstall","metadata":{"annotations":{"kapp.k14s.io/change-rule":"delete before...
              kapp.k14s.io/original-diff-md5: 58e0494c51d30eb3494f7c9198986bb9
API Version:  packaging.carvel.dev/v1alpha1
Kind:         PackageInstall
Metadata:
  Creation Timestamp:  2023-04-19T07:30:51Z
  Finalizers:
    finalizers.packageinstall.packaging.carvel.dev/delete
  Generation:  1
  Managed Fields:
    API Version:  packaging.carvel.dev/v1alpha1
    Fields Type:  FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .:
          f:kapp.k14s.io/change-rule:
          f:kapp.k14s.io/change-rule.cert-manager:
          f:kapp.k14s.io/change-rule.telemetry:
          f:kapp.k14s.io/identity:
          f:kapp.k14s.io/original:
          f:kapp.k14s.io/original-diff-md5:
        f:labels:
          .:
          f:kapp.k14s.io/app:
          f:kapp.k14s.io/association:
      f:spec:
        .:
        f:packageRef:
          .:
          f:refName:
          f:versionSelection:
            .:
            f:constraints:
        f:serviceAccountName:
        f:values:
    Manager:      kapp
    Operation:    Update
    Time:         2023-04-19T07:30:51Z
    API Version:  packaging.carvel.dev/v1alpha1
    Fields Type:  FieldsV1
    fieldsV1:
      f:metadata:
        f:finalizers:
          .:
          v:"finalizers.packageinstall.packaging.carvel.dev/delete":
    Manager:      kapp-controller
    Operation:    Update
    Time:         2023-04-19T07:30:52Z
    API Version:  packaging.carvel.dev/v1alpha1
    Fields Type:  FieldsV1
    fieldsV1:
      f:status:
        .:
        f:conditions:
        f:friendlyDescription:
        f:lastAttemptedVersion:
        f:observedGeneration:
        f:usefulErrorMessage:
        f:version:
    Manager:         kapp-controller
    Operation:       Update
    Subresource:     status
    Time:            2023-04-19T07:30:56Z
  Resource Version:  311572
  UID:               0bec7baa-d8f2-462e-bcda-144564eacd1b
Spec:
  Package Ref:
    Ref Name:  api-portal.tanzu.vmware.com
    Version Selection:
      Constraints:       1.3.0
  Service Account Name:  tap-install-sa
  Values:
    Secret Ref:
      Name:  api-portal-values-ver-1
Status:
  Conditions:
    Message:               Error (see .status.usefulErrorMessage for details)
    Status:                True
    Type:                  ReconcileFailed
  Friendly Description:    Reconcile failed: Error (see .status.usefulErrorMessage for details)
  Last Attempted Version:  1.3.0
  Observed Generation:     1
  Useful Error Message:    kapp: Error: Expected to find kind 'projectcontour.io/v1/HTTPProxy', but did not:
- Kubernetes API server did not have matching apiVersion + kind
- No matching CRD was found in given configuration
  Version:  1.3.0
Events:     <none>
```
**Build service also failed with error and then start reconciling automatically after few seconds:**
```
Status:
  Conditions:
    Message:               Error (see .status.usefulErrorMessage for details)
    Status:                True
    Type:                  ReconcileFailed
  Friendly Description:    Reconcile failed: Error (see .status.usefulErrorMessage for details)
  Last Attempted Version:  1.10.8
  Observed Generation:     1
  Useful Error Message:    kapp: Error: waiting on reconcile tanzunetdependencyupdater/dependency-updater (buildservice.tanzu.vmware.com/v1alpha1) namespace: build-service:
  Finished unsuccessfully (Encountered failure condition Ready == False: CannotImportDescriptor (message: PUT https://harbor-repo.vmware.com/v2/carvelind/build-service/manifests/latest: multiple errors returned: MANIFEST_BLOB_UNKNOWN: blob unknown to registry; sha256:7cc4c1452eb7f0216be80936d9f9255b897332989fecd0489c82bb2f898c5418; MANIFEST_BLOB_UNKNOWN: blob unknown to registry; sha256:0057b8952a41a2b717ceb80349588415f9433aa73fd0080911041f4308eb6cc8; MANIFEST_BLOB_UNKNOWN: blob unknown to registry; sha256:a775b9fd3da6efc1ca5129ba7791235e2052b990d99e98be23d13da993cd6080; MANIFEST_BLOB_UNKNOWN: blob unknown to registry; sha256:e0b9091c372073eac92103f690826fc0c4e8a38c990d1dc3bab51c2f14e4cd99; MANIFEST_BLOB_UNKNOWN: blob unknown to registry; sha256:bdbca6a73be9e8b76c1e565ba846d6a6d69e9b82e2e68f2beaacb3dd5b930b2b))
  Version:  1.10.8
  ```
  
  **DNS configuration:** 5m
  
  
  
##   Script related rough work
**list of apps name in TAP:**

**Apps Name**     -----------------------**Namespace**
1. accelerator  --------------------     accelerator-system
1. api-auto-registration -----------     api-auto-registration
1. api-portal ----------------------     api-portal
1. appliveview  --------------------     app-live-view
1. appliveview-apiserver              appliveview-tokens-system (not sure)
1. appliveview-connector              app-live-view-connector
1. appliveview-conventions            app-live-view-conventions
1. appsso                             appsso
1. bitnami-services
1. buildservice                       build-service
1. cartographer                       cartographer-system
1. cert-manager                       cert-manager
1. cnrs
1. contour
3. crossplane
4. developer-conventions              developer-conventions
5. eventing
6. fluxcd-source-controller           flux-system
7. grype
8. learningcenter
9. learningcenter-workshops
10. metadata-store   ------------------ metadata-store
11. namespace-provisioner
12. ootb-delivery-basic
13. ootb-supply-chain-basic
14. ootb-templates
15. policy-controller
16. scanning
17. service-bindings
18. services-toolkit ----------------- services-toolkit
19. source-controller
20. spring-boot-conventions ----------- spring-boot-convention 
21. tap  -----------------------------  tap-namespace-provisioning
22. tap-auth
23. tap-gui                            tap-gui
24. tap-telemetry                      tap-telemetry, vmware-system-telemetry
25. tekton-pipelines                   tekton-pipelines, tekton-pipelines-resolvers









| Op | Condition | Behavior | Affecting annotations |
|---|---|---|---|
| create | resource present in manifest, but not present in cluster | create resource, see ... | ... |
| update | resource exists in cluster but is different than manifest, for differencing see ... | patch resource | ... |
| delete | resource not present in manifest, but [labelled as owned](./label-ownership) in cluster | delete resource | ... |
| noop | resource in cluster and manifest match, for diff see ... | no change | ... |
| exists | resource exists in manifest and cluster, manifest contents ignored | no change | ... |


## TAP 1.5.1 (to verify fixes)
### Azure
**image relocation:**
```
export IMGPKG_REGISTRY_HOSTNAME_0=registry.tanzu.vmware.com
export IMGPKG_REGISTRY_USERNAME_0=ktanushree@vmware.com
export IMGPKG_REGISTRY_PASSWORD_0=Tanu@123
export IMGPKG_REGISTRY_HOSTNAME_1=tapimages151.azurecr.io
export IMGPKG_REGISTRY_USERNAME_1=tapimages151
export IMGPKG_REGISTRY_PASSWORD_1=SrV/eZQYM8oSlzjRnthcYDBgTs+BD8MbQxyefaHMnM+ACRCNx0hH
export INSTALL_REGISTRY_USERNAME=tapimages151
export INSTALL_REGISTRY_PASSWORD=SrV/eZQYM8oSlzjRnthcYDBgTs+BD8MbQxyefaHMnM+ACRCNx0hH
export INSTALL_REGISTRY_HOSTNAME=tapimages151.azurecr.io
export TAP_VERSION=1.5.1
 export INSTALL_REPO=tap-images
```

