VMware PKS is a production-grade Kubernetes-based container solution equipped with advanced networking, a private container registry, and full lifecycle management. The solution radically simplifies the deployment and operation of Kubernetes clusters so you can run and manage containers at scale on private and public clouds. VMware PKS combines Kubernetes, BOSH, VMware NSX-T, and Harbor to form a highly available container service. With built-in intelligence and integration, VMware PKS ties all these open source and commercial modules together, delivering a simple-to-use solution with an efficient Kubernetes deployment and management experience.
BOSH is an open source tool for release engineering that simplifies the deployment and lifecycle management of large distributed systems. With BOSH, developers can easily version, package, and deploy software in a consistent and reproducible manner. BOSH supports deployments of PKS across different IaaS providers, such as VMware vSphere, Google Compute Platform, Amazon Elastic Compute Cloud (EC2), and Microsoft Azure.
VMware NSX-T supplies Kubernetes clusters with advanced container networking and security features, such as micro-segmentation, load balancing, ingress control, and security policies. NSX furnishes the complete set of Layer 2 through Layer 7 networking services that is needed for pod-level networking in Kubernetes. You can quickly deploy networks with micro-segmentation and on-demand network virtualization for containers and pods.
Harbor is an open source, enterprise-class registry server that stores and distributes Docker images in a private registry behind your firewall. Harbor includes role-based access control, vulnerability scanning for container images, policy-based image replication, integration with LDAP or Microsoft Active Directory, and notary and auditing services.
Figure 37. VMware PKS on Cloud Foundation on VxRail architecture