vrabbi

apiVersion: audit.k8s.io/v1
kind: Policy
rules:
  #! The following requests were manually identified as high-volume and low-risk,
  #! so drop them.
  - level: None
    users: ["system:serviceaccount:kube-system:kube-proxy"]
    verbs: ["watch"]
    resources:
      - group: "" #! core

vrabbi

1. Set your kubectl context against your TKG Management cluster
2. Create a service account and needed RBAC using the bellow commands:

kubectl create ns terasky-monitoring
kubectl create sa -n terasky-monitoring terasky-monitoring-user
kubectl create clusterrolebinding terasky-monitoring-rbac --serviceaccount terasky-monitoring:terasky-monitoring-user --clusterrole view

3. create the token for the service account using the bellow command

kubectl apply -f - <

vrabbi

---
apiVersion: v1
kind: Namespace
metadata:
  name: sock-shop
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: carts

vrabbi

apiVersion: apps/v1
kind: Deployment
metadata:
  name: demo-app-00001-deployment
  namespace: tdp
spec:
  template:
    spec:
      containers:
      - image: harbor.vrabbi.cloud/tap/workloads/demo-app-tdp@sha256:2ce13838a7a47a80543b167c834010559852da80dfbf3ca0edae6474cbec552e

vrabbi

Setup Developer Machine for working with TAP

Steps

1. Install Tanzu CLI

• download the following file: https://github.com/vmware-tanzu/tanzu-cli/releases/download/v0.90.1/tanzu-cli-windows-amd64.zip
• unzip the file
• move the tanzu cli exe file from the extracted zip to a place on your path and rename it to tanzu.exe

2. Install TAP Plugins for Tanzu CLI

• run the command:

vrabbi

With the following base ytt file

#@ load("@ytt:data", "data")

#@ def labels():
app: echo
org: test
#@ end

#@ def name(echo):

vrabbi

profile: full
ceip_policy_disclosed: true

shared:
  ingress_domain: "INGRESS-DOMAIN"
  ca_cert_data: |
    -----BEGIN CERTIFICATE-----
    MIIFXzCCA0egAwIBAgIJAJYm37SFocjlMA0GCSqGSIb3DQEBDQUAMEY...
    -----END CERTIFICATE-----
  image_registry:

vrabbi

apiVersion: carto.run/v1alpha1
kind: Workload
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"carto.run/v1alpha1","kind":"Workload","metadata":{"annotations":{},"labels":{"app.kubernetes.io/part-of":"demo-01","apps.tanzu.vmware.com/auto-configure-actuators":"true","apps.tanzu.vmware.com/has-tests":"true","apps.tanzu.vmware.com/workload-type":"web"},"name":"demo-01","namespace":"workloads"},"spec":{"build":{"env":[{"name":"BP_JVM_VERSION","value":"11"}]},"env":[{"name":"JAVA_TOOL_OPTIONS","value":"-Dmanagement.server.port=8081 -Dserver.port=8081 -Dmanagement.health.probes.enabled=\"false\""}],"params":[{"name":"annotations","value":{"autoscaling.knative.dev/minScale":"1"}},{"name":"debug","value":"true"},{"name":"live-update","value":"true"},{"name":"testing_pipeline_matching_labels","value":{"apps.tanzu.vmware.com/pipeline":"acme-fitness-generic-test"}}],"source":{"git":{"ref":{"branch":"main"},"url":"https://github.com/vrabbi/java-web-app"}}}}
  creationT

vrabbi

namespace_provisioner:
  additional_sources:
  - git:
      ref: origin/main
      subPath: overlays
      url: https://
      secretRef:
        name: git-creds-overlays
    path: _ytt_lib/customize
  - git:

vrabbi

apiVersion: v1
stringData:
  password: 
  username: tap
kind: Secret
metadata:
  annotations:
    tekton.dev/git-0: https://REPLACE_ME
  name: git-creds
  namespace: tap-install