HackMD
  • Prime
    Prime  Full-text search on all paid plans
    Search anywhere and reach everything in a Workspace with Prime plan.
    Got it
      • Create new note
      • Create a note from template
    • Prime  Full-text search on all paid plans
      Prime  Full-text search on all paid plans
      Search anywhere and reach everything in a Workspace with Prime plan.
      Got it
      • Options
      • Versions and GitHub Sync
      • Transfer ownership
      • Delete this note
      • Template
      • Save as template
      • Insert from template
      • Export
      • Dropbox
      • Google Drive
      • Gist
      • Import
      • Dropbox
      • Google Drive
      • Gist
      • Clipboard
      • Download
      • Markdown
      • HTML
      • Raw HTML
      • Sharing Link copied
      • /edit
      • View mode
        • Edit mode
        • View mode
        • Book mode
        • Slide mode
        Edit mode View mode Book mode Slide mode
      • Note Permission
      • Read
        • Owners
        • Signed-in users
        • Everyone
        Owners Signed-in users Everyone
      • Write
        • Owners
        • Signed-in users
        • Everyone
        Owners Signed-in users Everyone
      • More (Comment, Invitee)
      • Publishing
        Everyone on the web can find and read all notes of this public team.
        After the note is published, everyone on the web can find and read this note.
        See all published notes on profile page.
      • Commenting Enable
        Disabled Forbidden Owners Signed-in users Everyone
      • Permission
        • Forbidden
        • Owners
        • Signed-in users
        • Everyone
      • Invitee
      • No invitee
    Menu Sharing Create Help
    Create Create new note Create a note from template
    Menu
    Options
    Versions and GitHub Sync Transfer ownership Delete this note
    Export
    Dropbox Google Drive Gist
    Import
    Dropbox Google Drive Gist Clipboard
    Download
    Markdown HTML Raw HTML
    Back
    Sharing
    Sharing Link copied
    /edit
    View mode
    • Edit mode
    • View mode
    • Book mode
    • Slide mode
    Edit mode View mode Book mode Slide mode
    Note Permission
    Read
    Owners
    • Owners
    • Signed-in users
    • Everyone
    Owners Signed-in users Everyone
    Write
    Owners
    • Owners
    • Signed-in users
    • Everyone
    Owners Signed-in users Everyone
    More (Comment, Invitee)
    Publishing
    Everyone on the web can find and read all notes of this public team.
    After the note is published, everyone on the web can find and read this note.
    See all published notes on profile page.
    More (Comment, Invitee)
    Commenting Enable
    Disabled Forbidden Owners Signed-in users Everyone
    Permission
    Owners
    • Forbidden
    • Owners
    • Signed-in users
    • Everyone
    Invitee
    No invitee
       owned this note    owned this note      
    Published Linked with GitHub
    Like BookmarkBookmarked
    Subscribed
    • Any changes
      Be notified of any changes
    • Mention me
      Be notified of mention me
    • Unsubscribe
    Subscribe
    # Pre-Req for Demo Appliance for Tanzu Kubernetes Grid 1.2.1 Fling [TOC] # Introduction This workshop takes advantage of the the Demo Appliance for Tanzu Kubernetes Grid (TKG) Fling which bundles all the required dependencies to deploy TKG Clusters running on either VMware Cloud on AWS and/or vSphere 6.7 Update 3 infrastructure. Please refer to the infrastructure provider specific pre-reqs below before attempting the workshop. # VMware Cloud on AWS Prerequisite - [ ] Existing SDDC or deploy new 1-Node SDDC - [ ] vSphere Management Network (on-prem) or NSX-T Segment (VMC) to run TKG Demo Appliance which has access to VMC vCenter Server - [ ] DHCP Enabled Network to run TKG Workloads which has access to VMC vCenter Server - [ ] Desktop to access the SDDC and TKG Demo Appliance with the following ports open - [ ] Outbound Port 22 (SSH) - [ ] Outbound Port 443 (vCenter & K8s API) - [ ] Outbound Port 31001 (K8s Demo App) ## 1. NSX-T Network ### Network Segment For demo purposes, we will be running both the TKG Demo Appliance and the TKG Management and Workload Cluster on an NSX-T Segment running in VMC. With TKG 1.2.x, the HAProxy VM has been replaced with [kube-vip](https://kube-vip.io/) and this means that as part of any TKG Cluster deployment (Management or Workload), an additional IP Address must be specified for te Virtual IP. In our example below, we will carve up our `192.168.2.0/24` in to the following: | IP | Usage | | -------- | -------- | | 192.168.2.1 | Network Gateway | | 192.168.2.2 | TKG Demo Appliance | | 192.168.2.3 to 192.168.2.49 | TKG VIP Address Range | | 192.168.2.50 to 192.168.2.254 | TKG Workload Address Range | where `192.168.2.3 to 192.168.2.49` will NOT be included in the DHCP scope so that we can manually reserve those for both the TKG Demo Appliance and VIP addressess. * Create a new Network Segment which will run the TKG workloads with the following configuration: | Setting | Value | | ------ | ----------- | | Segment Name | tkg-network | | Type | Routed | | Subents | 192.168.2.1/24 | Click on the `Save` button to save our initial settings. ![](https://i.imgur.com/wZOCasx.png) > **Note:** If `192.168.2.1/24` is already in use, you can specify another network * When prompted to edit the new Network Segment, select Yes and then click on `SET DHCP CONFIG` in the upper right hand corner. Toggle the DHCP Config to `Enabled` and then add the DHCP range as specified in the table below and then click on Apply to save the changes. | Setting | Value | | ------ | ----------- | | DHCP Config | Enabled | | DHCP Ranges | 192.168.2.50-192.168.2.254 | ![](https://i.imgur.com/bMg6MRo.png) ## 2. NSX-T Inventory Group ### Configure Compute Inventory Group * Create the following three Inventory Groups for Compute by clicking Add Group and providing the name specified below and then "Set Members" to set the value | Group Name | Value | | ------ | ----------- | | Desktop | IP Address from https://www.whatismyip.com/ or network you will use to connect to TKG Network | | SDDC Management | The SDDC CIDR used when deploying your SDDC. You can find this under Network & Security->Overview page and search for "Infrastructure Network". It should look like 10.2.0.0/16 as example but subsitute your value | | TKG Network | 192.168.2.0/24 (or network you used) | ![](https://i.imgur.com/fmQ2Sud.png) Here is what the Compute Inventory Group should look like after you have completed the above. ![](https://i.imgur.com/CY37rWn.png) ### Configure Management Inventory Group * Create the following two Inventory Groups for Management by clicking Add Group and providing the name specified below and then "Set Members" to the value below | Group Name | Value | | ------ | ----------- | | Desktop | IP Address from https://www.whatismyip.com/ or network you will use to connect to TKG Network | | TKG Network | 192.168.2.0/24 (or network you used) | Here is what the Management Inventory Group should look like after you have completed the above. ![](https://i.imgur.com/dafdDth.png) ## 3. NSX-T Edge Gateway Firewall ### Configure Compute Gateway Firewall * Create the following three Compute Gateway Firewall Rules (ensure to click Publish to actualy create the Firewall Rules) | Rule Name | Sources | Destinations | Services | | ------ | ----------- |------ | ----------- | | Desktop to TKG Network | Desktop | TKG Network | ANY | | TKG Network to SDDC Management | TKG Network | SDDC Management | Any | Here is what the Compute Edge Firewall should look like after you have completed the above. ![](https://i.imgur.com/A4ZfN6n.png) ### Configure Management Gateway Firewall * Create the following Management Gateway Firewall Rules (ensure to click Publish to actualy create the Firewall Rules) | Rule Name | Sources | Destinations | Services | | ------ | ----------- |------ | ----------- | | Desktop to vCenter Server | Desktop | vCenter Server | HTTPS | | TKG Network to vCenter Server | TKG Network | vCenter Server | HTTPS | Here is what the Management Edge Firewall should look like after you have completed the above. ![](https://i.imgur.com/l3xbVXh.png) ## 4. Public IP and NAT (optional for going over internet) This step is only required if you do not have Desktop system that already has access to the SDDC via Direct Connect and/or VPN. ### Configure Public IP for TKG Demo Appliance Request a new Public IP Address and name the entry `TKG Demo Appliance`. Make a note of this IP as you will be SSH'ingn to this address during the workshop ![](https://i.imgur.com/zJOcdmI.png) ### Configure NAT for TKG Demo Appliance Create a new NAT mapping to the Public IP Address from the previous step using the following settings: | Name | Public IP | Service | Port | Internal IP | | ------ | ----------- |------ | ----------- |----------- | | TKG Demo Appliance | Public IP from prevoius step | Any | Any | 192.168.2.2|(or any valid IP from TKG Network that will be used for TKG Demo Appliance) | ![](https://i.imgur.com/H6MqHlX.png) ## 5. Configure VMC vCenter Server Inventory ### Configure Resource Pool for TKG in vCenter Server ![](https://i.imgur.com/ebTWKJL.png) ### Configure VMC VM Folder for TKG in vCenter Server ![](https://i.imgur.com/u8VRBx8.png) ## 6. Configure VMC vCenter Server Content Library ### Sync K8s and TKG Demo Appliance OVAs Navigate to **Menu->Content Library** in the vSphere UI and create a new vSphere Content Library with the following configurations: | Setting | Value | | -------- | -------- | | Name | TKG Demo | | Subscribed URL | https://download3.vmware.com/software/vmw-tools/tkg-demo-appliance/cl4/lib.json | | Download Content | Immediately | | Storage | WorkloadDatastore | ![](https://i.imgur.com/Hpf7kGH.png) > **Note:** Ensure that your vCenter Server has outbound connectivity to sync from the S3 Content Library To download TKG Demo Appliance offline, you can find it at: * **TKG Demo Appliance OVA**- https://download3.vmware.com/software/vmw-tools/tkg-demo-appliance/TKG-Demo-Appliance-1.2.1.ova To download K8s OVA offline, you can also find it on MyVMware: * **K8s v1.19.3 OVA** - https://my.vmware.com/web/vmware/downloads/details?downloadGroup=TKG-120&productId=988&rPId=53095 * **K8s v1.18.10 OVA** - https://my.vmware.com/web/vmware/downloads/details?downloadGroup=TKG-120&productId=988&rPId=53095 Once the vSphere Content Library has been created, it should start downloading the content immediately. ![](https://i.imgur.com/7c2Hm3l.png) > **Note:** To verify everything was downloaded correctly, you should see the "Stored Locally" value show *Yes* under the "OVF & OVA Templates" tab of the vSphere Content Library. If you do not see this value, either the content is still being downloaded or you have a connectivity issue preventing you from connecting to the S3 Content Library from the vCenter Server. If you are having issues sync'ing from S3 Content Library in a VMC environment, please make sure you have reviewed the following [accessing S3 endpoint in VMC](https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws-operations/GUID-B501FA3C-EAF9-4005-AC72-155C3F592281.html) ## 7. Configure K8s vSphere Template ### Deploy K8s OVA from vSphere Content Library Right click on vSphere Content Library item `photon-3-kube-v1.19.3_vmware.1` and select "New VM from this Template" with the following configuration: | Setting | Value | | -------- | -------- | | Name | photon-3-kube-v1.19.3_vmware.1 | | VM Folder | VM Templates | | Resource Pool | TKG | | Storage | WorkloadDatastore | | Network | tkg-network | Right click on vSphere Content Library item `photon-3-kube-v1.18.10_vmware.1` and select "New VM from this Template" with the following configuration: | Setting | Value | | -------- | -------- | | Name | photon-3-kube-v1.18.10_vmware.1 | | VM Folder | VM Templates | | Resource Pool | TKG | | Storage | WorkloadDatastore | | Network | tkg-network | > **Note:** Do not power on these VMs, these will be used by TKG to provision TKG Clusters Once both VMs have been deployed, right click on the VM and select `Template->Convert to Template` to convert the VM to vSphere VM Template ## 8. Configure TKG Demo OVA ### Deploy TKG Demo Appliance from vSphere Content Library Right click on the `TKG` Resource Pool and select "New Virtual Machine" and chose the "Deploy from Template" option and specify the TKG Demo Appliance and provide a name for the VM. ![](https://i.imgur.com/hauMZW1.png) Select the `TKG` VM Folder: ![](https://i.imgur.com/4tuHqyT.png) Select the `TKG` Resource Pool: ![](https://i.imgur.com/zXTWDsJ.png) Select the`WorkloadDatastore` Datastore: ![](https://i.imgur.com/f1G0C82.png) Select `tkg-network` Network: ![](https://i.imgur.com/MgAaXZ2.png) In the `Networking` section, please fill in the respective setings based on your network configuration. A static IP Address will be required for proper functionality. ![](https://i.imgur.com/jOlIg0b.png) Scroll down to `OS Credentials` and select a secure password, especially if you plan to connect from the Internet. SSH key authentication can also be used to connect to appliance. To do so, simply add your SSH key. ![](https://i.imgur.com/YJjnjJ8.png) Click finish to start the deployment of the OVA. > **Note:** It is recommended that if you are un-sure of some of the settings to take an offline snapshot prior to powering on, this way you can adjust settings or easily revert the enviorment if you wish to walk through this again without having to re-deploy the OVA Lastly, power on the TKG Demo Apppliance and then SSH using root to the Public IP that you had requested earlier. If you can access the VM without going over the public internet, then the address would be the IP Address you had configured for the TKG Demo Appliance. ![](https://i.imgur.com/OSbRz7c.png) # VMware Cloud on DellEMC Prerequisite - [ ] Existing SDDC or deploy new 3-Node SDDC (ensure CIDR does not overlap with 172.17.0.0/16 network) - [ ] NSX-T Segment to run TKG Demo Appliance which will need access to SDDC vCenter Server - [ ] DHCP Enabled Network to run TKG Workloads which has access to SDDC vCenter Server - [ ] Desktop access from the upstream customer network to connect to SDDC and TKG Demo Appliance with the following ports open - [ ] Outbound Port 22 (SSH) - [ ] Outbound Port 443 (vCenter & K8s API) - [ ] Outbound Port 31001 (K8s Demo App) ## 1. NSX-T Network ### Network Segment For demo purposes, we will be running both the TKG Demo Appliance and the TKG Management and Workload Cluster on an NSX-T Segment running in VMConDellEMC. With TKG 1.2.x, the HAProxy VM has been replaced with [kube-vip](https://kube-vip.io/) and this means that as part of any TKG Cluster deployment (Management or Workload), an additional IP Address must be specified for te Virtual IP. In our example below, we will use the default NSX-T Segment called `sddc-cgw-network-1` which is configured as`192.168.1.1/24` and we will logically carve it out into the following: | IP | Usage | | -------- | -------- | | 192.168.1.1 | Network Gateway | | 192.168.1.2 | TKG Demo Appliance | | 192.168.1.3 to 192.168.1.49 | TKG VIP Address Range | | 192.168.1.50 to 192.168.1.254 | TKG Workload Address Range | where `192.168.1.3 to 192.168.1.49` will NOT be included in the DHCP scope so that we can manually reserve those for both the TKG Demo Appliance and VIP addressess. Click on the three "dots" to edit the sddc-cgw-network-1 and click on the "Edge DHCP COnfig" to change the DHCP scope. ![](https://i.imgur.com/fqBwUf2.png) ![](https://i.imgur.com/2jFVFdz.png) > **Note:** If `192.168.1.1/24` is already in use, you can create another network ## 2. NSX-T Inventory Group ### Configure Compute Inventory Group * Create the following three Inventory Groups for Compute by clicking Add Group and providing the name specified below and then "Set Members" to set the value | Group Name | Value | | ------ | ----------- | | SDDC Management | The SDDC CIDR used when deploying your SDDC. You can find this under Network & Security->Overview page and search for "Infrastructure Network". It should look like 172.17.5.0/24 as example but subsitute your value | | TKG Network | 192.168.1.1/24 (or network you used) | ![](https://i.imgur.com/wzP5i2P.png) ### Configure Management Inventory Group * Create the following two Inventory Groups for Management by clicking Add Group and providing the name specified below and then "Set Members" to the value below | Group Name | Value | | ------ | ----------- | | TKG Network | 192.168.1.0/24 (or network you used) | ![](https://i.imgur.com/XCuA1Bx.png) ## 3. NSX-T Edge Gateway Firewall ### Configure Compute Gateway Firewall * Create the following three Compute Gateway Firewall Rules (ensure to click Publish to actualy create the Firewall Rules) | Rule Name | Sources | Destinations | Services | | ------ | ----------- |------ | ----------- | | TKG Network to SDDC Management | TKG Network | SDDC Management | Any | ![](https://i.imgur.com/HatYrjo.png) ### Configure Management Gateway Firewall * Create the following Management Gateway Firewall Rules (ensure to click Publish to actualy create the Firewall Rules) | Rule Name | Sources | Destinations | Services | | ------ | ----------- |------ | ----------- | | TKG Network to vCenter Server | TKG Network | vCenter Server | HTTPS | ![](https://i.imgur.com/oyrQ6ut.png) ## 5. Configure VMConDellEMC vCenter Server Inventory ### Configure Resource Pool for TKG in vCenter Server ![](https://i.imgur.com/McgJlxj.png) ### Configure VM Folder for TKG in vCenter Server ![](https://i.imgur.com/rrHwgPX.png) ## 6. Configure vCenter Server Content Library ### Sync K8s and TKG Demo Appliance OVAs Navigate to **Menu->Content Library** in the vSphere UI and create a new vSphere Content Library with the following configurations: | Setting | Value | | -------- | -------- | | Name | TKG Demo | | Subscribed URL | https://download3.vmware.com/software/vmw-tools/tkg-demo-appliance/cl4/lib.json | | Download Content | Immediately | | Storage | WorkloadDatastore | ![](https://i.imgur.com/Hpf7kGH.png) > **Note:** Ensure that your vCenter Server has outbound connectivity to sync from the S3 Content Library To download TKG Demo Appliance offline, you can find it at: * **TKG Demo Appliance OVA**- https://download3.vmware.com/software/vmw-tools/tkg-demo-appliance/TKG-Demo-Appliance-1.2.1.ova To download K8s OVA offline, you can also find it on MyVMware: * **K8s v1.19.3 OVA** - https://my.vmware.com/web/vmware/downloads/details?downloadGroup=TKG-120&productId=988&rPId=53095 * **K8s v1.18.10 OVA** - https://my.vmware.com/web/vmware/downloads/details?downloadGroup=TKG-120&productId=988&rPId=53095 Once the vSphere Content Library has been created, it should start downloading the content immediately. ![](https://i.imgur.com/7c2Hm3l.png) > **Note:** To verify everything was downloaded correctly, you should see the "Stored Locally" value show *Yes* under the "OVF & OVA Templates" tab of the vSphere Content Library. If you do not see this value, either the content is still being downloaded or you have a connectivity issue preventing you from connecting to the Content Library from the vCenter Server. ## 7. Configure K8s vSphere Template ### Deploy K8s OVA from vSphere Content Library Right click on vSphere Content Library item `photon-3-kube-v1.19.3_vmware.2` and select "New VM from this Template" with the following configuration: | Setting | Value | | -------- | -------- | | Name | photon-3-kube-v1.19.3_vmware.2 | | VM Folder | VM Templates | | Resource Pool | TKG | | Storage | WorkloadDatastore | | Network | tkg-network | Right click on vSphere Content Library item `photon-3-kube-v1.18.10_vmware.1` and select "New VM from this Template" with the following configuration: | Setting | Value | | -------- | -------- | | Name | photon-3-kube-v1.18.10_vmware.1 | | VM Folder | VM Templates | | Resource Pool | TKG | | Storage | WorkloadDatastore | | Network | tkg-network | > **Note:** Do not power on these VMs, these will be used by TKG to provision TKG Clusters Once both VMs have been deployed, right click on the VM and select `Template->Convert to Template` to convert the VM to vSphere VM Template ## 8. Configure TKG Demo OVA ### Deploy TKG Demo Appliance from vSphere Content Library Right click on the `TKG` Resource Pool and select "New Virtual Machine" and chose the "Deploy from Template" option and specify the TKG Demo Appliance and provide a name for the VM. ![](https://i.imgur.com/hauMZW1.png) Select the `TKG` VM Folder: ![](https://i.imgur.com/4tuHqyT.png) Select the `TKG` Resource Pool: ![](https://i.imgur.com/zXTWDsJ.png) Select the`WorkloadDatastore` Datastore: ![](https://i.imgur.com/f1G0C82.png) Select `sddc-cgw-network-1` Network: ![](https://i.imgur.com/Hn70BfW.png) In the `Networking` section, please fill in the respective setings based on your network configuration. A static IP Address will be required for proper functionality. ![](https://i.imgur.com/aZGVope.png) Scroll down to `OS Credentials` and select a secure password. SSH key authentication can also be used to connect to appliance. To do so, simply add your SSH key. ![](https://i.imgur.com/YJjnjJ8.png) Click finish to start the deployment of the OVA. > **Note:** It is recommended that if you are un-sure of some of the settings to take an offline snapshot prior to powering on, this way you can adjust settings or easily revert the enviorment if you wish to walk through this again without having to re-deploy the OVA Lastly, power on the TKG Demo Apppliance and then SSH using root and the IP Address (e.g. 192.168.1.2) you had configured for the TKG Demo Appliance. ![](https://i.imgur.com/OSbRz7c.png) # vSphere Prerequisite - [ ] vSphere 6.7 Update 3 environment - [ ] vSphere Management Network to run TKG Demo Appliance which has access to vCenter Server - [ ] DHCP Enabled Network to run TKG Workloads which has access to vCenter Server - [ ] Desktop to access TKG Demo Appliance with the following ports open - [ ] Outbound Port 22 (SSH) - [ ] Outbound Port 443 (vCenter & K8s API) - [ ] Outbound Port 31001 (K8s Demo App) ## 1. vSphere Network Create a new vSphere Portgroup (Standard/Distributed) or NSX-V/T Network which will run the TKG workloads and can support DHCP. In this example, we will name it `tkg-network` but you can choose any name that you wish. With TKG 1.2.x, the HAProxy VM has been replaced with [kube-vip](https://kube-vip.io/) and this means that as part of any TKG Cluster deployment (Management or Workload), an additional IP Address must be specified for te Virtual IP. Here is an example using `192.168.2.0/24` and one way to carve it up: | IP | Usage | | -------- | -------- | | 192.168.2.1 | Network Gateway | | 192.168.2.2 | TKG Demo Appliance | | 192.168.2.3 to 192.168.2.49 | TKG VIP Address Range | | 192.168.2.50 to 192.168.254 | TKG Workload Address Range | where `192.168.2.3 to 192.168.2.49` will NOT be included in the DHCP scope so that we can manually reserve those for both the TKG Demo Appliance and VIP addressess. ## 2. Configure vCenter Server Inventory ### Configure Resource Pool for TKG in vCenter Server ![](https://i.imgur.com/KoAGGEy.jpg) ### Configure VM Folder for TKG in vCenter Server ![](https://i.imgur.com/Olbd3Y3.png) ## 3. Configure vCenter Server Content Library ### Sync K8s and TKG Demo Appliance OVAs Navigate to **Menu->Content Library** in the vSphere UI and create a new vSphere Content Library with the following configurations: | Setting | Value | | -------- | -------- | | Name | TKG Demo | | Subscribed URL | https://download3.vmware.com/software/vmw-tools/tkg-demo-appliance/cl4/lib.json | | Download Content | Immediately | | Storage | Select vSphere Datastore | ![](https://i.imgur.com/Jc8HlYV.png) > **Note:** Ensure that your vCenter Server has outbound connectivity to sync from the S3 Content Library To download TKG Demo Appliance offline, you can find it at: * **TKG Demo Appliance OVA**- https://download3.vmware.com/software/vmw-tools/tkg-demo-appliance/TKG-Demo-Appliance-1.2.1.ova To download K8s and HA Proxy OVA offline, you can also find it on MyVMware: * **K8s v1.19.3 OVA** - https://my.vmware.com/web/vmware/downloads/details?downloadGroup=TKG-120&productId=988&rPId=53095 * **K8s v1.18.10 OVA** - https://my.vmware.com/web/vmware/downloads/details?downloadGroup=TKG-120&productId=988&rPId=53095 Once the vSphere Content Library has been created, it should start downloading the content immediately. > **Note:** To verify everything was downloaded correctly, you should see the "Stored Locally" value show *Yes* under the "OVF & OVA Templates" tab of the vSphere Content Library. If you do not see this value, either the content is still being downloaded or you have a connectivity issue preventing you from connecting to the S3 Content Library from the vCenter Server. ## 4. Configure K8s vSphere Template ### Deploy K8s vSphere Content Library Right click on vSphere Content Library item `photon-3-kube-v1.19.3_vmware.2` and select "New VM from this Template" with the following configuration: | Setting | Value | | -------- | -------- | | Name | photon-3-kube-v1.19.3_vmware.2 | | VM Folder | VM Templates | | Resource Pool | TKG | | Storage | WorkloadDatastore | | Network | tkg-network | Right click on vSphere Content Library item `photon-3-kube-v1.18.10_vmware.1` and select "New VM from this Template" with the following configuration: | Setting | Value | | -------- | -------- | | Name | photon-3-kube-v1.18.10_vmware.1 | | VM Folder | VM Templates | | Resource Pool | TKG | | Storage | WorkloadDatastore | | Network | tkg-network | > **Note:** Do not power on these VMs, these will be used by TKG to provision TKG Clusters Once both VMs have been deployed, right click on the VM and select "Template->Convert to Template" to convert the VM to vSphere VM Template ## 5. Configure TKG Demo Appliance ### Deploy TKG Demo Appliance from vSphere Content Library Right click on the `TKG` Resource Pool and select "New Virtual Machine" and chose the "Deploy from Template" option and specify the TKG Demo Appliance and provide a name for the VM. Select the `TKG` VM Folder: ![](https://i.imgur.com/uCh9hZx.png) Select the `TKG` Resource Pool: ![](https://i.imgur.com/LgnFYaP.png) Select your vSphere Datastore: ![](https://i.imgur.com/33fqcsn.png) Select `tkg-network` Network: ![](https://i.imgur.com/g6eYyK1.png) In the `Networking` section, please fill in the respective setings based on your network configuration. A static IP Address will be required for proper functionality. ![](https://i.imgur.com/cXqE9vT.png) Scroll down to `OS Credentials` and select a secure password, especially if you plan to connect from the Internet. SSH key authentication can also be used to connect to appliance. To do so, simply add your SSH key. ![](https://i.imgur.com/YJjnjJ8.png) Click finish to start the deployment of the OVA. > **Note:** It is recommended that if you are un-sure of some of the settings to take an offline snapshot prior to powering on, this way you can adjust settings or easily revert the enviorment if you wish to walk through this again without having to re-deploy the OVA Finally, right click on the TKG Demo Appliance VM and power it on Lastly, power on the TKG Demo Apppliance and then SSH using root the IP Address you had configured for the TKG Demo Appliance. ![](https://i.imgur.com/OSbRz7c.png)

    Import from clipboard

    Advanced permission required

    Your current role can only read. Ask the system administrator to acquire write and comment permission.

    This team is disabled

    Sorry, this team is disabled. You can't edit this note.

    This note is locked

    Sorry, only owner can edit this note.

    Reach the limit

    Sorry, you've reached the max length this note can be.
    Please reduce the content or divide it to more notes, thank you!

    Import from Gist

    Import from Snippet

    or

    Export to Snippet

    Are you sure?

    Do you really want to delete this note?
    All users will lost their connection.

    Create a note from template

    Create a note from template

    Oops...
    This template is not available.


    Upgrade

    All
    • All
    • Team
    No template found.

    Create custom template


    Upgrade

    Delete template

    Do you really want to delete this template?

    This page need refresh

    You have an incompatible client version.
    Refresh to update.
    New version available!
    See releases notes here
    Refresh to enjoy new features.
    Your user state has changed.
    Refresh to load new user state.

    Sign in

    Forgot password

    or

    By clicking below, you agree to our terms of service.

    Sign in via Facebook Sign in via Twitter Sign in via GitHub Sign in via Dropbox Sign in via Google

    New to HackMD? Sign up

    Help

    • English
    • 中文
    • Français
    • Deutsch
    • 日本語
    • Español
    • Català
    • Ελληνικά
    • Português
    • italiano
    • Türkçe
    • Русский
    • Nederlands
    • hrvatski jezik
    • język polski
    • Українська
    • हिन्दी
    • svenska
    • Esperanto
    • dansk

    Documents

    Tutorials

    Book Mode Tutorial

    Slide Mode Tutorial

    YAML Metadata

    Contacts

    Facebook

    Twitter

    Feedback

    Send us email

    Resources

    Releases

    Pricing

    Blog

    Policy

    Terms

    Privacy

    Cheatsheet

    Syntax Example Reference
    # Header Header 基本排版
    - Unordered List
    • Unordered List
    1. Ordered List
    1. Ordered List
    - [ ] Todo List
    • Todo List
    > Blockquote
    Blockquote
    **Bold font** Bold font
    *Italics font* Italics font
    ~~Strikethrough~~ Strikethrough
    19^th^ 19th
    H~2~O H2O
    ++Inserted text++ Inserted text
    ==Marked text== Marked text
    [link text](https:// "title") Link
    ![image alt](https:// "title") Image
    `Code` Code 在筆記中貼入程式碼
    ```javascript
    var i = 0;
    ```
    var i = 0;
    :smile: :smile: Emoji list
    {%youtube youtube_id %} Externals
    $L^aT_eX$ LaTeX
    :::info
    This is a alert area.
    :::

    This is a alert area.

    Versions

    Versions and GitHub Sync

    Sign in to link this note to GitHub Learn more
    This note is not linked with GitHub Learn more
     
    Add badge Pull Push GitHub Link Settings
    Upgrade now

    Version named by    

    More Less
    • Edit
    • Delete

    Note content is identical to the latest version.
    Compare with
      Choose a version
      No search result
      Version not found

    Feedback

    Submission failed, please try again

    Thanks for your support.

    On a scale of 0-10, how likely is it that you would recommend HackMD to your friends, family or business associates?

    Please give us some advice and help us improve HackMD.

     

    Thanks for your feedback

    Remove version name

    Do you want to remove this version name and description?

    Transfer ownership

    Transfer to
      Warning: is a public team. If you transfer note to this team, everyone on the web can find and read this note.

        Link with GitHub

        Please authorize HackMD on GitHub

        Please sign in to GitHub and install the HackMD app on your GitHub repo. Learn more

         Sign in to GitHub

        HackMD links with GitHub through a GitHub App. You can choose which repo to install our App.

        Push the note to GitHub Push to GitHub Pull a file from GitHub

          Authorize again
         

        Choose which file to push to

        Select repo
        Refresh Authorize more repos
        Select branch
        Select file
        Select branch
        Choose version(s) to push
        • Save a new version and push
        • Choose from existing versions
        Available push count

        Upgrade

        Pull from GitHub

         
        File from GitHub
        File from HackMD

        GitHub Link Settings

        File linked

        Linked by
        File path
        Last synced branch
        Available push count

        Upgrade

        Danger Zone

        Unlink
        You will no longer receive notification when GitHub file changes after unlink.

        Syncing

        Push failed

        Push successfully