Simplified Kubernetes management

VMware Tanzu Mission Control is a centralized management hub with a robust policy engine that simplifies multi-cloud and fleet Kubernetes management.

Platform operators can reduce complexity through centralized management, increase consistency through configuration management, and offer a better developer experience with self-service through Tanzu Mission Control.

The key capabilities of Tanzu Mission Control include:

• Simplified Cluster Lifecycle Management. Create, update, upgrade, and delete Tanzu Kubernetes Grid and Amazon EKS clusters in many environments or adopt existing clusters.
• Multi-cluster management of attached clusters. Attach any conformant Kubernetes clusters running in other environments—either on-prem or in public clouds—for central management.
• Unified and centralized policy management. Utilize a robust policy engine with out-of-the-box access policies, image registry policies, network traffic policies, and quota policies.
• Data Protection & business continuity. Create and schedule backups and restore to the same or different cluster, in different clouds if you so choose.
• Integrations with the VMware portfolio and open source. Open/extensible approach so users can leverage the tools (Tanzu, third party, open source, in-house) of their choice.
• Baseline observability and diagnostics. Gain global observability of the health of clusters and workloads across clouds through integration with Aria Operations for Applications.
• Security for distributed applications. Easily deploy infrastructure and enable routing across environments with always-on mTLS using Tanzu Service Mesh.
• Cluster inspection. Cluster conformance and Center for Internet Security (CIS) Benchmark Inspection available for configuration and security issues.
• Identity and access management. Implement centralized authentication and authorization and federated identity from multiple sources, such as AD, LDAP, and SAML.

Tanzu Mission Control benefits both the applications teams and operations teams by

• increasing developer agility and productivity through enabling them with self-service access to Kubernetes clusters with guardrails;
• enhancing operational efficiency by enabling operators to centrally observe and manage multiple clusters across disparate teams and environments at scale; and
• strengthening security and compliance by allowing operators to consistently apply security policies across environments and do regular cluster inspection for potential risks.

Tanzu Mission Control benefits three distinct user groups: operators, DevOps teams and developers.

The infrastructure and platform teams use Tanzu Mission Control to enable developers and technical teams with self-service access to Kubernetes and at the same time, centrally operate and manage the Kubernetes clusters and modern apps running on them with efficiency, consistency, and security.

The application teams use Tanzu Mission Control to better manage and maintain applications by easily deploying services and workloads across clusters, better understanding the health of applications and quickly troubleshooting issues.

Yes. Tanzu Mission Control allows you to provision Tanzu Kubernetes Grid and Amazon EKS clusters directly from Tanzu Mission Control and perform lifecycle management of these provisioned clusters via UI, API, or CLI. Today, Tanzu Mission Control supports provisioning, scaling, upgrading, and deleting Amazon EKS clusters and Tanzu Kubernetes Grid clusters on vSphere, VMware Cloud Foundation, and VMware Cloud on AWS. For Tanzu Kubernetes Grid clusters, additional deployment targets are Azure VMware Solution, Google Cloud VMware Engine, and Oracle Cloud VMware Solution.

Yes, you can enroll in our Hands-On Lab and complete four beginner modules to better understand the product.

You can attach CNCF conformant Kubernetes clusters to Tanzu Mission Control no matter where they are running: on vSphere, in any public clouds, or through other Kubernetes vendors.

Yes. A key design principle of Tanzu Mission Control is extensibility into organizations’ existing workflows and toolkits. Tanzu Mission Control provides this through a documented API, with a CLI and UI for ease of use.

Tanzu Mission Control was built with a SaaS-first approach, and currently there is no on-premises deployment of Tanzu Mission Control. In early November 2022, the VMware team announced they are working on a new initiative (via a private beta program with selected customers) to design and offer private, self-managed deployments of Tanzu Mission Control giving users full control over their network infrastructure connectivity. This space will be updated with new information as it becomes available.

* VMware makes no guarantee that services announced in preview or beta will become available at a future date. The information in this webpage is for informational purposes only and may not be incorporated into any contract.

We use open source technologies to build core functionalities of Tanzu Mission Control. For example, Project Sonobuoy is behind the cluster conformance inspection functionality, and Project Velero is leveraged to build the data protection function, and we use Open Policy Agent Gatekeeper for policy enforcement.

Today, Tanzu Mission Control integrates with Tanzu Kubernetes Grid, Tanzu Service Mesh, Aria Operations for Applications, and Aria Automation. We are working on adding more integrations with other VMware products.

Talk to a Tanzu Expert for further details on the commercial versions of Tanzu Mission Control:

• Tanzu Mission Control Essentials was made specifically for VMware Cloud offerings such as VMware Cloud on AWS and VMware Cloud on Dell and can only be purchased/accessed via VMware Cloud offerings.
• Tanzu Mission Control Advanced can be purchased either standalone or via Tanzu for Kubernetes Operations.

This feature comparison chart shows which features are included in each version.