Will Arroyo

Secure Kubernetes Secrets on VCF with External Secrets Operator and Secret Store Service

Tue, 05 May 2026 00:21:14 +0000

how to configure ESO on VKS with VCF Secret Store

Integrating ArgoCD authentication with VCF Automation

Mon, 16 Mar 2026 23:33:30 +0000

integrating ArgoCD OIDC auth with VCF Automation

Deploying Windows Clusters on vSphere Kubernetes Service with VKS Image Builder

Tue, 27 Jan 2026 16:35:23 +0000

There have been numerous how-to guides over the past few years on building and deploying Windows clusters on the different Kubernetes distributions supported by VMware. This post aims to solidify the understanding of the current most up to date process of doing this on vSphere Kubernetes Service which is the definitive Kubernetes service for VMware. At the time of writing the latest vSphere Kubernetes Release(VKR) is v1.34.1---vmware.1-vkr.4 so that is what this will be based on.

Auditing CNS Volumes in VCF

Tue, 06 Jan 2026 18:11:28 +0000

Learn how to effectively audit CNS volumes in VCF using a Python script to gain insights into volumes from a namespace-based view

Templating cluster creation with Tanzu Mission Control

Thu, 02 Nov 2023 15:28:30 +0000

Overview
#

I have had a question come up a few times with customers and coworkers about how to reduce duplication when creating clusters with Tanzu Mission Control(TMC). The question or issue that is usually brought up is that the platform engineering team wants to be able to create clusters quickly and many of the settings between cluster creation are the exact same, thus having a lot of duplication between clusters. When looking at the TMC UI there’s not a way to set custom defaults today to be able to remove the need to fill in every field each time you create a cluster. However, using the UI is probably not the approach a platform team wants to take to scale anyway. It’s much more efficient to codify the clusters and automate the creation. In this post, we will walk through creating cluster templates and using the Tanzu CLI to create clusters with minimal inputs. We will focus on TKG Clusters mostly, but I will also provide some commands that work with AKS and EKS clusters are well.

Setting static IPs for workloads in TKG

Thu, 21 Sep 2023 17:50:32 +0000

A question comes up often of how can a static IP be set for workloads running in TKG. The answer is generally “It depends” and then followed by a series of questions about why it’s needed and if there are alternatives that could be done etc. In many scenarios, this is needed so that workloads running in a container on TKG can be identified by an external firewall and be allowed to talk to some external service. For example, maybe a workload needs to get access to a particular database and it has a strict access policy based on IP.

How to create custom workload types with TAP

Thu, 19 Jan 2023 16:43:36 +0000

I was working with a customer the other day and some questions came up about how to support workloads that may vary from the ones that TAP supports out-of-the-box. Looking at the docs we can see that there are 3 types available to use today. This will support the majority of workloads that are commonly used, but what if another use case comes up and we need to quickly add support for deploying that workload on our existing TAP environment? This post will walk through the basic steps of adding a new workload type into TAP.

Integrating TAP with Azure DevOps Pipelines

Wed, 28 Dec 2022 21:26:22 +0000

TAP has an OOTB source code testing capability that makes use of Tekton pipelines to execute tests based on your workload types. However, many organizations have already implemented their testing processes in another tool like Jenkins or Azure DevOps (ADO). As of TAP 1.3, you can natively use Jenkins for your source testing in the TAP supply chain. In talking with several customers and co-workers it was apparent that integrating with ADO would be very useful. In this post, we will walk through the steps to get the TAP source code testing capability working with Azure DevOps pipelines.

About

Mon, 01 Jan 0001 00:00:00 +0000

Hey! I am Will Arroyo.

I am a Solution Engineer at VMware living in Denver and working on all things Cloud Native with a heavy focus on Kubernetes.

In the past, I have helped build large-scale infrastructure automation systems as well as helped modernize software deployments across enterprises.