VMware Tanzu

Definition

VMware Tanzu is a suite of products and services designed to help organizations build, run, and manage modern applications on Kubernetes. It provides a comprehensive platform for container orchestration, application lifecycle management, and infrastructure automation. Tanzu enables developers to deploy applications consistently across multi-cloud environments while ensuring security and compliance through integrated tools and policies.

Secure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: secure-pod
spec:
  containers:
  - name: secure-container
    image: myapp:latest
    securityContext:
      runAsNonRoot: true
      readOnlyRootFilesystem: true
      capabilities:
        drop:
        - ALL
  automountServiceAccountToken: false

Insecure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: insecure-pod
spec:
  containers:
  - name: insecure-container
    image: myapp:latest
    securityContext:
      runAsNonRoot: false
      readOnlyRootFilesystem: false
      capabilities:
        add:
        - NET_ADMIN
  automountServiceAccountToken: true