One of the new features that came with the latest update of vSphere with Tanzu was the ability to use TKG Extensions. This powerful framework allows simplified deployment and management of multiple open source projects that are backed by VMware support, including alerting with Prometheus, visualization with Grafana, ingress with Contour, and logging with Fluent Bit.

Security is hard to get right in a world of continuous delivery and containers. The increasingly diverse technology landscape and relentless speed of innovation afford us no time to step back and take stock of our risks, and even less time to perform remediation. In the past, we could perform point-in-time security audits, which was OK when our systems were mostly static, save a quarterly release. But that’s not the world we live in today.

While architectures and platforms like Kubernetes get a lot of attention in discussions about application modernization, we ignore the data layer at our own risk. How applications and users access data is a concern that gets more important by the day. It’s a trend we’ve seen playing out for a while, as technological concerns around latency and scalability have ceded ground to business-level concerns around compliance, security, and data privacy.

Did you know that the VMware Tanzu Observability by Wavefront engineering team not only listens to input from customers, but acts on that input to improve the overall Tanzu Observability experience? In fact, as a direct result of customer surveys, the Wavefront engineering team recently completed 30 days of improvement focused on query quality. I will quickly run through those improvements in this post.

Unifying three distinct teams—development, security, and operations—around a common approach to get application releases to production is challenging. This post explores how Tanzu Labs partnered with a major branch of the Department of Defense (DoD) to build an automated DevSecOps process using VMware Tanzu and several open source tools.