Book Image

DevSecOps in Practice with VMware Tanzu

By : Parth Pandit, Robert Hardt
Book Image

DevSecOps in Practice with VMware Tanzu

By: Parth Pandit, Robert Hardt

Overview of this book

As Kubernetes (or K8s) becomes more prolific, managing large clusters at scale in a multi-cloud environment becomes more challenging – especially from a developer productivity and operational efficiency point of view. DevSecOps in Practice with VMware Tanzu addresses these challenges by automating the delivery of containerized workloads and controlling multi-cloud Kubernetes operations using Tanzu tools. This comprehensive guide begins with an overview of the VMWare Tanzu platform and discusses its tools for building useful and secure applications using the App Accelerator, Build Service, Catalog service, and API portal. Next, you’ll delve into running those applications efficiently at scale with Tanzu Kubernetes Grid and Tanzu Application Platform. As you advance, you’ll find out how to manage these applications, and control, observe, and connect them using Tanzu Mission Control, Tanzu Observability, and Tanzu Service Mesh. Finally, you’ll explore the architecture, capabilities, features, installation, configuration, implementation, and benefits of these services with the help of examples. By the end of this VMware book, you’ll have gained a thorough understanding of the VMWare Tanzu platform and be able to efficiently articulate and solve real-world business problems.
Table of Contents (19 chapters)
Part 1 – Building Cloud-Native Applications on the Tanzu Platform
Part 2 – Running Cloud-Native Applications on Tanzu
Part 3 – Managing Modern Applications on the Tanzu Platform


Running business applications in the form of microservices that are packaged in containers is the norm today. As per a survey done by Cloud Native Computing Foundation in 2021 (, around 80% of applications are deployed on Kubernetes. However, building containerized applications and production-grade Kubernetes platforms are some hard nuts to crack. Moreover, enterprises consider a multi-cloud deployment strategy that adds more operational complexities for different reasons. In this book, we will learn how different tools in the VMware Tanzu portfolio come together to solve the challenges of building, running, and managing modern applications on multi-cloud Kubernetes platforms.

We have divided this book into three logical parts in line with the application development life cycle. In the first part, we will review different tools that help build secure applications. In this part, we will also see how to containerize these applications and manage the APIs exposed by them. In the second part, we will dive deeper into the tools that help run these apps at scale. We will cover tools that will help manage container images and deploy Kubernetes platforms in multi-cloud setups. This section also covers deploying secure paths to production with supply chain choreography. In the last part of the book, we will see how to manage large Kubernetes deployments. This section covers a single pane of glass for monitoring, securing, and governing multi-cloud deployments.

Each chapter in this book covers one aspect of the modern application life cycle and the respective Tanzu tool(s) related to that aspect. These chapters describe the business case and its applicable challenges first – the why behind the tool(s). Then, they provide the required details for the applicable tool(s) at a high level – the what behind the tool(s). Finally, they cover the details on how to get started with them – the how behind the tool(s).

By the end of this book, you will have an in-depth understanding of the Tanzu platform and its capabilities to put DevSecOps into practice for your modern containerized apps.