Skip to content

Instantly share code, notes, and snippets.

View papivot's full-sized avatar
:octocat:

Navneet Verma papivot

:octocat:
View GitHub Profile
Component Type Deployment Pattern Name Purpose
Receiver Agent (DaemonSet) kubeletstats Collects node; pod and container resource metrics from the Kubelet API.
Receiver Agent (DaemonSet) filelog Tails and parses container logs written to standard output.
Receiver Agent (DaemonSet) hostmetrics Generates metrics about the host system scraped from various sources and host entity event as log.
Receiver Gateway (Deployment) k8sobjects Collects(pull/watch) objects from the Kubernetes API server.
Receiver Gateway (Deployment) k8s_cluster Collects cluster-level metrics and events from the K8s API Server.
Processor Agent & Gateway k8sattributes Enriches telemetry with K8s metadata (pod; node and namespace names).
Processor Agent & Gateway batch Batches telemetry data to improve compression and reduce egress traffic.
@papivot
papivot / nsxalb-deployment-pattern.csv
Last active May 4, 2023 02:58
Ways to consume NSX ALB within a multi Supervisor Cluster deployment within a vCenter
VC+DC combo Cloud Cluster Service Engine Group VIP Network Supported Solution
1 Use Default Cloud Single Use Default-Group Single Yes TKO Standard
1 Use Default Cloud Multiple Use Custom Groups (1 per cluster) mapped to Default Cloud Single (shared across clusters) Yes TKO Enterprise
1 Use Default Cloud Multiple Use Custom Groups (1 per cluster) mapped to Default Cloud Multiple (shared or unique per cluster) Yes TKO Enterprise
Multiple Use Custom Cloud per VC+DC Multiple Use Custom Groups (1 per cluster) mapping to appropriate clouds Multiple (unique per cluster) No(TBD/WIP) TKO Enterprise
Source IP Address Destination IP Address Port Display Protocol Optional/Mandatory/Critical Use
Client AVI VIP Network IP Range 22 TCP Optional Troubleshooting
Client AVI VIP Network IP Range 80 TCP Optional HTTP Workload - Use VIP Pool as Destination if using two seperate pools for VIP and vNIC
Client AVI VIP Network IP Range 443 TCP Mandatory HTTPS Workload - Use VIP Pool as Destination if using two seperate pools for VIP and vNIC
Client AVI VIP Network IP Range 6443 TCP Mandatory KubeAPI (Cluster) access - Use VIP Pool as Destination if using two seperate pools for VIP and vNIC
Client Supervisor Management IP Range 22 TCP Optional Troubleshooting
Client Workload Cluster IP Range 22 TCP Optional Troubleshooting
Client Workload Cluster IP Range 30000-32767 TCP Optional If Nodeport Support is required
clusterrolebindings clusterrole
vmware-system-auth-sync-wcp:demo1:group:vsphere.local:administrators cluster-admin
vmware-system-auth-sync-wcp:demo1:user:vsphere.local:user2 cluster-admin
vmware-system-auth-sync-wcp:demo1:user:vsphere.local:user3 cluster-admin
NAME CREATE GET LIST WATCH UPDATE PATCH DELETE DELETECOLLECTION
namespaces x x x x x x yes n/a
tanzukubernetesaddons.run.tanzu.vmware.com x yes yes yes x x x x
tanzukubernetesreleases.run.tanzu.vmware.com x yes yes yes x x x x
tkgserviceconfigurations.run.tanzu.vmware.com x yes yes yes x x x x
virtualmachineclasses.vmoperator.vmware.com x yes yes yes x x x x
virtualmachineimages.vmoperator.vmware.com x yes yes yes x x x x
NAME CREATE GET LIST WATCH UPDATE PATCH DELETE DELETECOLLECTION
certificaterequests.cert-manager.io x yes yes yes x x x x
certificates.cert-manager.io x yes yes yes x x x x
clusters.cluster.x-k8s.io x yes yes yes x x x x
configmaps x yes yes yes x x x x
contentsourcebindings.vmoperator.vmware.com x yes yes yes x x x x
controllerrevisions.apps x yes yes yes x x x x
cronjobs.batch x yes yes yes x x x x
daemonsets.apps x yes yes yes x x x x
deployments.apps x yes yes yes x x x x
NAME CREATE GET LIST WATCH UPDATE PATCH DELETE DELETECOLLECTION
agentinstalls.installers.tmc.cloud.vmware.com yes yes yes yes yes yes yes yes
certificaterequests.cert-manager.io yes yes yes yes yes yes yes yes
certificates.cert-manager.io yes yes yes yes yes yes yes yes
clusters.cluster.x-k8s.io x yes yes yes x x x x
cnsxdevmattachments.cns.vmware.com x yes yes yes x x x x
configmaps yes yes yes yes yes yes yes yes
contentsourcebindings.vmoperator.vmware.com x yes yes yes x x x x
controllerrevisions.apps x yes yes yes x x x x
cronjobs.batch yes yes yes yes yes yes yes yes
clusterrolebinding clusterrole
wcp:user:vsphere.local:user3:namespace-delete ClusterRole/vmware-system-nsop-namespace-delete-cluster-role
rolebinding role
wcp:demo1:user:vsphere.local:user1 ClusterRole/view
wcp:demo1:user:vsphere.local:user2 ClusterRole/edit
wcp:demo1:user:vsphere.local:user3 ClusterRole/edit
wcp:demo1:group:vsphere.local:administrators ClusterRole/edit
@papivot
papivot / supervisor-admin-verbs.csv
Last active September 17, 2021 01:09
Supervisor admin verb
NAME CREATE GET LIST WATCH UPDATE PATCH DELETE DELETECOLLECTION
agentinstalls.installers.tmc.cloud.vmware.com yes yes yes yes yes yes yes yes
certificaterequests.cert-manager.io x yes yes yes x x x x
certificates.cert-manager.io x yes yes yes x x x x
clusters.cluster.x-k8s.io x yes yes yes x x x x
cnsnodevmattachments.cns.vmware.com x yes yes yes x x x x
configmaps x yes yes yes x x x x
contentlibraryproviders.vmoperator.vmware.com x yes yes yes x x x x
contentsourcebindings.vmoperator.vmware.com x yes yes yes x x x x
contentsources.vmoperator.vmware.com x yes yes yes x x x x