<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="32681" language="en" source="https://portal.flane.ch/swisscom/en/xml-course/vmware-tkgicm2" lastchanged="2026-03-19T09:08:28+01:00" parent="https://portal.flane.ch/swisscom/en/xml-courses"><title>VMware Tanzu Kubernetes Grid: Install, Configure, Manage [V2.5]</title><productcode>TKGICM2</productcode><vendorcode>VM</vendorcode><vendorname>VMware</vendorname><fullproductcode>VM-TKGICM2</fullproductcode><version>2.5</version><objective>&lt;p&gt;By the end of the course, you should be able to meet the following objectives:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Describe how Tanzu Kubernetes Grid fits in the VMware Tanzu&amp;reg; portfolio&lt;/li&gt;&lt;li&gt;Describe the Tanzu Kubernetes Grid architecture&lt;/li&gt;&lt;li&gt;Deploy and manage Tanzu Kubernetes Grid management and supervisor clusters&lt;/li&gt;&lt;li&gt;Deploy and manage Tanzu Kubernetes Grid workload clusters&lt;/li&gt;&lt;li&gt;Deploy, configure, and manage Tanzu Kubernetes Grid packages&lt;/li&gt;&lt;li&gt;Perform day 2 operations&lt;/li&gt;&lt;li&gt;Perform basic troubleshooting&lt;/li&gt;&lt;/ul&gt;</objective><essentials>&lt;ul&gt;
&lt;li&gt;Understanding of Kubernetes and the Kubernetes cluster architecture&lt;/li&gt;&lt;li&gt;Experience deploying and managing multiple Kubernetes clusters&lt;/li&gt;&lt;/ul&gt;</essentials><audience>&lt;p&gt;Platform operators who are responsible for deploying and managing Tanzu Kubernetes clusters&lt;/p&gt;</audience><outline>&lt;p&gt;&lt;strong&gt;1 Course Introduction&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Introductions and course logistics&lt;/li&gt;&lt;li&gt;Course objectives&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;2 Introducing Tanzu Kubernetes Grid&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Describe Tanzu Kubernetes Grid&lt;/li&gt;&lt;li&gt;Describe VMware vSphere&amp;reg; with VMware Tanzu&amp;reg;&lt;/li&gt;&lt;li&gt;Describe VMware Tanzu&amp;reg; Mission ControlTM&lt;/li&gt;&lt;li&gt;Describe VMware Tanzu&amp;reg; for Kubernetes Operations&lt;/li&gt;&lt;li&gt;Describe the Tanzu Kubernetes Grid components&lt;/li&gt;&lt;li&gt;Discuss bootstrapping multiple Tanzu Kubernetes Grid instances&lt;/li&gt;&lt;li&gt;Describe vSphere Namespaces&lt;/li&gt;&lt;li&gt;Describe the benefits of registering with VMware Tanzu Mission Control&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;3 CLI Tools and Cluster API&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Describe the Tanzu CLI and plug-ins&lt;/li&gt;&lt;li&gt;Describe the Kubernetes CLI Tools for vSphere&lt;/li&gt;&lt;li&gt;Describe the Carvel tool set&lt;/li&gt;&lt;li&gt;Describe Cluster API&lt;/li&gt;&lt;li&gt;List the infrastructure providers&lt;/li&gt;&lt;li&gt;Detail the Cluster API controllers&lt;/li&gt;&lt;li&gt;List the Cluster API custom resource definitions&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;4 Authentication&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Define Kubernetes roles and RBAC API objects&lt;/li&gt;&lt;li&gt;Define Pinniped and OpenID Connect&lt;/li&gt;&lt;li&gt;Define Dex and LDAP authentication&lt;/li&gt;&lt;li&gt;Define VMware vCenter&amp;reg; Single Sign-On integration with Tanzu Kubernetes Grid&lt;/li&gt;&lt;li&gt;Identify the management cluster authentication components&lt;/li&gt;&lt;li&gt;Describe the Pinniped workflow in Tanzu Kubernetes Grid on a management cluster&lt;/li&gt;&lt;li&gt;Describe vSphere Namespace permissions and roles&lt;/li&gt;&lt;li&gt;Define authentication using vCenter Single Sign-On&lt;/li&gt;&lt;li&gt;Define authentication using external identity providers&lt;/li&gt;&lt;li&gt;Identify the authentication options for kubectl and the Tanzu CLI&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;5 Load Balancers&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Explain load balancing in Tanzu Kubernetes Grid&lt;/li&gt;&lt;li&gt;Describe the different load balancers that integrate with Tanzu Kubernetes Grid&lt;/li&gt;&lt;li&gt;Describe the components of VMware NSX&amp;reg; Advanced Load BalancerTM&lt;/li&gt;&lt;li&gt;Explain how Tanzu Kubernetes Grid integrates with NSX Advanced Load Balancer&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;6 VMware Tanzu Kubernetes Grid on vSphere&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Outline the requirements for deploying a supervisorcluster in a vSphere environment&lt;/li&gt;&lt;li&gt;Describe the different options for deploying the supervisor cluster&lt;/li&gt;&lt;li&gt;Describe the licensing requirements for supervisor clusters&lt;/li&gt;&lt;li&gt;List the steps to install a Tanzu Kubernetes Grid supervisor cluster and retrieve its status&lt;/li&gt;&lt;li&gt;Describe how to apply a full license to the supervisor cluster&lt;/li&gt;&lt;li&gt;List the requirements for deploying a management cluster in a vSphere environment&lt;/li&gt;&lt;li&gt;List the requirements for a bootstrap machine&lt;/li&gt;&lt;li&gt;List the requirements for Internet-restricted environments&lt;/li&gt;&lt;li&gt;Explain how the Tanzu Kubernetes Grid version relates to specific OVA versions&lt;/li&gt;&lt;li&gt;Describe the optional configuration for deploying a management cluster in a vSphere environment&lt;/li&gt;&lt;li&gt;List the steps to install a Tanzu Kubernetes Grid management cluster&lt;/li&gt;&lt;li&gt;Summarize the creation of a management cluster&lt;/li&gt;&lt;li&gt;Define the commands available for working with management clusters&lt;/li&gt;&lt;li&gt;List the steps to register Tanzu Kubernetes Grid management clusters with VMware Tanzu Mission Control&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;7 Tanzu Kubernetes Grid Workload Clusters&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;List the options for deploying Tanzu Kubernetes Grid workload clusters&lt;/li&gt;&lt;li&gt;Describe the different types of Tanzu Kubernetes Grid workload clusters&lt;/li&gt;&lt;li&gt;Explain how Tanzu Kubernetes Grid clusters are created&lt;/li&gt;&lt;li&gt;Describe the VMs that are included in a workload cluster&lt;/li&gt;&lt;li&gt;Describe the components of a workload cluster&lt;/li&gt;&lt;li&gt;Describe the difference between machine images and custom machine images&lt;/li&gt;&lt;li&gt;List the available customizations&lt;/li&gt;&lt;li&gt;Explain how to build custom images&lt;/li&gt;&lt;li&gt;Describe how to use custom images&lt;/li&gt;&lt;li&gt;Describe the commands available for working with workload clusters&lt;/li&gt;&lt;li&gt;Explain how to scale workload clusters&lt;/li&gt;&lt;li&gt;Describe machine health checks&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;8 Tanzu Kubernetes Grid Packages&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Explain how Tanzu Kubernetes Grid uses packages&lt;/li&gt;&lt;li&gt;Identify the different package repositories&lt;/li&gt;&lt;li&gt;Describe the different types of packages and their dependencies&lt;/li&gt;&lt;li&gt;Define auto-managed packages&lt;/li&gt;&lt;li&gt;Identify the auto-managed packages that are installed to every cluster and those that are installed based on configuration&lt;/li&gt;&lt;li&gt;Explain how auto-managed packages are installed and configured&lt;/li&gt;&lt;li&gt;Define CLI-managed packages&lt;/li&gt;&lt;li&gt;Explain how CLI-managed packages are installed and configured&lt;/li&gt;&lt;li&gt;Use the Tanzu CLI to configure and install optional packages and repositories&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;9 Configuring and Managing Tanzu Kubernetes Grid Networking Packages&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Describe cert-manager&lt;/li&gt;&lt;li&gt;Explain how to install cert-manager&lt;/li&gt;&lt;li&gt;Describe the Contour ingress controller&lt;/li&gt;&lt;li&gt;Explain how to install Contour&lt;/li&gt;&lt;li&gt;Describe service discovery&lt;/li&gt;&lt;li&gt;Describe ExternalDNS&lt;/li&gt;&lt;li&gt;Detail the configuration options for BIND servers&lt;/li&gt;&lt;li&gt;Explain how to install ExternalDNS&lt;/li&gt;&lt;li&gt;Describe Multus&lt;/li&gt;&lt;li&gt;Describe Multus pod configuration&lt;/li&gt;&lt;li&gt;Describe Whereabouts&lt;/li&gt;&lt;li&gt;Explain how to install Multus and Whereabouts&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;10 Configuring and Managing Tanzu Kubernetes Grid Operation and Analytics Packages&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Describe Fluent Bit&lt;/li&gt;&lt;li&gt;Detail the logs that Fluent Bit collects&lt;/li&gt;&lt;li&gt;Describe basic Fluent Bit configuration&lt;/li&gt;&lt;li&gt;Explain how to install Fluent Bit&lt;/li&gt;&lt;li&gt;Describe Prometheus&lt;/li&gt;&lt;li&gt;Describe Grafana&lt;/li&gt;&lt;li&gt;Describe the Harbor image registry&lt;/li&gt;&lt;li&gt;Explain Harbor vulnerability scanning&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;11 Tanzu Kubernetes Grid Day 2 Operations&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Explain the process of authenticating Tanzu Kubernetes Grid workload clusters&lt;/li&gt;&lt;li&gt;Identify the method of creating restricted rolebased access to components inside a workload cluster&lt;/li&gt;&lt;li&gt;Explain how Tanzu Kubernetes Grid integrates with NSX Advanced Load Balancer for ingress&lt;/li&gt;&lt;li&gt;Describe VMware Tanzu&amp;reg; Application PlatformTM&lt;/li&gt;&lt;li&gt;List the steps to install Tanzu Application Platform on Tanzu Kubernetes Grid workload clusters&lt;/li&gt;&lt;li&gt;Describe the prerequisites and steps for upgrading Tanzu Kubernetes Grid instances&lt;/li&gt;&lt;li&gt;Describe the prerequisites and steps for updating Tanzu Kubernetes Grid workload clusters&lt;/li&gt;&lt;li&gt;Understand how VMware Tanzu Mission Control manages the life cycle of Tanzu Kubernetes Grid&lt;/li&gt;&lt;li&gt;Define Velero Plugin for vSphere and standalone Velero&lt;/li&gt;&lt;li&gt;Describe Velero Plugin for vSphere&lt;/li&gt;&lt;li&gt;Identify the steps to install Velero on workload clusters&lt;/li&gt;&lt;li&gt;Explain how to back up and restore workload clusters with the Velero CLI and VMware Tanzu Mission Control&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;strong&gt;12 Troubleshooting Tanzu Kubernetes Grid&lt;/strong&gt;
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Describe the various Tanzu Kubernetes Grid logs&lt;/li&gt;&lt;li&gt;Explain how to review the Cluster API controller logs&lt;/li&gt;&lt;li&gt;Identify the location of the Tanzu Kubernetes Grid logs&lt;/li&gt;&lt;li&gt;Explain the purpose of Crash Diagnostics&lt;/li&gt;&lt;li&gt;Describe how to use SSH to connect to Tanzu Kubernetes Grid nodes&lt;/li&gt;&lt;li&gt;Explain how to troubleshoot package installation errors&lt;/li&gt;&lt;/ul&gt;</outline><objective_plain>By the end of the course, you should be able to meet the following objectives:


- Describe how Tanzu Kubernetes Grid fits in the VMware Tanzu® portfolio
- Describe the Tanzu Kubernetes Grid architecture
- Deploy and manage Tanzu Kubernetes Grid management and supervisor clusters
- Deploy and manage Tanzu Kubernetes Grid workload clusters
- Deploy, configure, and manage Tanzu Kubernetes Grid packages
- Perform day 2 operations
- Perform basic troubleshooting</objective_plain><essentials_plain>- Understanding of Kubernetes and the Kubernetes cluster architecture
- Experience deploying and managing multiple Kubernetes clusters</essentials_plain><audience_plain>Platform operators who are responsible for deploying and managing Tanzu Kubernetes clusters</audience_plain><outline_plain>1 Course Introduction



- Introductions and course logistics
- Course objectives
2 Introducing Tanzu Kubernetes Grid



- Describe Tanzu Kubernetes Grid
- Describe VMware vSphere® with VMware Tanzu®
- Describe VMware Tanzu® Mission ControlTM
- Describe VMware Tanzu® for Kubernetes Operations
- Describe the Tanzu Kubernetes Grid components
- Discuss bootstrapping multiple Tanzu Kubernetes Grid instances
- Describe vSphere Namespaces
- Describe the benefits of registering with VMware Tanzu Mission Control
3 CLI Tools and Cluster API



- Describe the Tanzu CLI and plug-ins
- Describe the Kubernetes CLI Tools for vSphere
- Describe the Carvel tool set
- Describe Cluster API
- List the infrastructure providers
- Detail the Cluster API controllers
- List the Cluster API custom resource definitions
4 Authentication



- Define Kubernetes roles and RBAC API objects
- Define Pinniped and OpenID Connect
- Define Dex and LDAP authentication
- Define VMware vCenter® Single Sign-On integration with Tanzu Kubernetes Grid
- Identify the management cluster authentication components
- Describe the Pinniped workflow in Tanzu Kubernetes Grid on a management cluster
- Describe vSphere Namespace permissions and roles
- Define authentication using vCenter Single Sign-On
- Define authentication using external identity providers
- Identify the authentication options for kubectl and the Tanzu CLI
5 Load Balancers



- Explain load balancing in Tanzu Kubernetes Grid
- Describe the different load balancers that integrate with Tanzu Kubernetes Grid
- Describe the components of VMware NSX® Advanced Load BalancerTM
- Explain how Tanzu Kubernetes Grid integrates with NSX Advanced Load Balancer
6 VMware Tanzu Kubernetes Grid on vSphere



- Outline the requirements for deploying a supervisorcluster in a vSphere environment
- Describe the different options for deploying the supervisor cluster
- Describe the licensing requirements for supervisor clusters
- List the steps to install a Tanzu Kubernetes Grid supervisor cluster and retrieve its status
- Describe how to apply a full license to the supervisor cluster
- List the requirements for deploying a management cluster in a vSphere environment
- List the requirements for a bootstrap machine
- List the requirements for Internet-restricted environments
- Explain how the Tanzu Kubernetes Grid version relates to specific OVA versions
- Describe the optional configuration for deploying a management cluster in a vSphere environment
- List the steps to install a Tanzu Kubernetes Grid management cluster
- Summarize the creation of a management cluster
- Define the commands available for working with management clusters
- List the steps to register Tanzu Kubernetes Grid management clusters with VMware Tanzu Mission Control
7 Tanzu Kubernetes Grid Workload Clusters



- List the options for deploying Tanzu Kubernetes Grid workload clusters
- Describe the different types of Tanzu Kubernetes Grid workload clusters
- Explain how Tanzu Kubernetes Grid clusters are created
- Describe the VMs that are included in a workload cluster
- Describe the components of a workload cluster
- Describe the difference between machine images and custom machine images
- List the available customizations
- Explain how to build custom images
- Describe how to use custom images
- Describe the commands available for working with workload clusters
- Explain how to scale workload clusters
- Describe machine health checks
8 Tanzu Kubernetes Grid Packages



- Explain how Tanzu Kubernetes Grid uses packages
- Identify the different package repositories
- Describe the different types of packages and their dependencies
- Define auto-managed packages
- Identify the auto-managed packages that are installed to every cluster and those that are installed based on configuration
- Explain how auto-managed packages are installed and configured
- Define CLI-managed packages
- Explain how CLI-managed packages are installed and configured
- Use the Tanzu CLI to configure and install optional packages and repositories
9 Configuring and Managing Tanzu Kubernetes Grid Networking Packages



- Describe cert-manager
- Explain how to install cert-manager
- Describe the Contour ingress controller
- Explain how to install Contour
- Describe service discovery
- Describe ExternalDNS
- Detail the configuration options for BIND servers
- Explain how to install ExternalDNS
- Describe Multus
- Describe Multus pod configuration
- Describe Whereabouts
- Explain how to install Multus and Whereabouts
10 Configuring and Managing Tanzu Kubernetes Grid Operation and Analytics Packages



- Describe Fluent Bit
- Detail the logs that Fluent Bit collects
- Describe basic Fluent Bit configuration
- Explain how to install Fluent Bit
- Describe Prometheus
- Describe Grafana
- Describe the Harbor image registry
- Explain Harbor vulnerability scanning
11 Tanzu Kubernetes Grid Day 2 Operations



- Explain the process of authenticating Tanzu Kubernetes Grid workload clusters
- Identify the method of creating restricted rolebased access to components inside a workload cluster
- Explain how Tanzu Kubernetes Grid integrates with NSX Advanced Load Balancer for ingress
- Describe VMware Tanzu® Application PlatformTM
- List the steps to install Tanzu Application Platform on Tanzu Kubernetes Grid workload clusters
- Describe the prerequisites and steps for upgrading Tanzu Kubernetes Grid instances
- Describe the prerequisites and steps for updating Tanzu Kubernetes Grid workload clusters
- Understand how VMware Tanzu Mission Control manages the life cycle of Tanzu Kubernetes Grid
- Define Velero Plugin for vSphere and standalone Velero
- Describe Velero Plugin for vSphere
- Identify the steps to install Velero on workload clusters
- Explain how to back up and restore workload clusters with the Velero CLI and VMware Tanzu Mission Control
12 Troubleshooting Tanzu Kubernetes Grid



- Describe the various Tanzu Kubernetes Grid logs
- Explain how to review the Cluster API controller logs
- Identify the location of the Tanzu Kubernetes Grid logs
- Explain the purpose of Crash Diagnostics
- Describe how to use SSH to connect to Tanzu Kubernetes Grid nodes
- Explain how to troubleshoot package installation errors</outline_plain><duration unit="d" days="4">4 days</duration><pricelist><price country="DE" currency="EUR">2760.00</price><price country="SE" currency="EUR">2760.00</price><price country="CH" currency="EUR">2760.00</price><price country="AT" currency="EUR">2760.00</price><price country="NL" currency="EUR">2760.00</price><price country="BE" currency="EUR">2760.00</price><price country="GB" currency="GBP">2590.00</price><price country="IT" currency="EUR">2450.00</price><price country="PL" currency="EUR">1510.00</price><price country="SI" currency="EUR">2200.00</price></pricelist><miles><milesvalue country="AT" vendorcurrency="PSO" vendorcurrencyname="VMware PSO Credits">36.00</milesvalue></miles></course>