Tanzu Community Edition

Optional Platform Packages

It's fast and easy to customize your platform by adding optional packages to your cluster. Learn more about VMware Tanzu's flexible packaging strategy and implementation in our docs.

Packages are currently available for all of the projects listed here.


Cartographer is a Kubernetes-native supply chain choreography tool that facilitates the creation and management of secure, flexible, and easy-to-use software supply chains. Ops teams can build loosely coupled, event-driven flows from reusable components, and Dev teams can integrate their favorite CI/CD tools. By clearly separating concerns, Cartographer enables both teams to work more efficiently and effectively together.


This Kubernetes certificate manager can help with issuing certificates from a variety of sources, ensure certificates are valid and up to date, and attempt to renew certificates at a configured time before expiry.

Cert Injection Webhook

The Cert Injection Webhook for Kubernetes extends kubernetes with a webhook that injects CA certificates and proxy environment variables into pods. The webhook uses certificates and environment variables defined in configmaps and injects them into pods with the desired labels or annotations.


Contour is a Kubernetes ingress controller that provides the control plane for the Envoy edge and service proxy. It supports dynamic configuration updates and multi-team ingress delegation out of the box while maintaining a lightweight profile.


ExternalDNS makes Kubernetes resources discoverable via public DNS servers and allows you to control DNS records dynamically in a DNS provider-agnostic way.

Fluent Bit

This fast and lightweight log processor, stream processor, and forwarder allows you to collect log events or metrics from different sources, process them, and deliver them to different backends. It supports more than 70 extensions for inputs, filters and outputs.

Flux CD Source Controller

A component of Flux CD, Source Controller is a Kubernetes operator that provides a common interface for artifact acquisition from external sources such as Git, Helm repositories, and Amazon S3 buckets. It monitors source repositories for code changes, pulls down these updates and brings them into the defined CI/CD pipeline or supply chains.


This package provides custom admission control using Gatekeeper. Under the hood, Gatekeeper uses Open Policy Agent to enforce policy when requests hit the Kubernetes API server.


Grafana allows you to query, visualize, alert on and understand your metrics no matter where they are stored. Create, explore, and share dashboards with your team and foster a data driven culture.


An open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from vulnerabilities, and signs images as trusted.

Knative Serving

Easily manage stateless services on Kubernetes by reducing the effort required for networking, autoscaling (even to zero), and revision tracking.


Kpack is a Kubernetes-native automated container build service that delivers containers securely, reliably, and consistently at scale. It uses buildpacks that adhere to Cloud Native Buildpacks specifications, including open source Paketo buildpacks.

Local Path Storage

Utilizing Kubernetes' Local Persistent Volume feature, Local Path Storage provides a simpler way to utilize the local storage in each node with dynamic provisioning of local volumes.

Multus CNI

Multus CNI is a container network interface (CNI) plugin for Kubernetes that can call multiple other CNI plugins, enabling multiple network interfaces to be attached to individual pods. Use it when you need to create multi-homed pods with multiple interfaces.


Prometheus is a systems and service monitoring system that collects metrics from configured targets at given intervals, evaluates rule expressions, displays the results, and can trigger alerts when specified conditions are observed.


Back up and restore your Kubernetes cluster resources and persistent volumes to protect against loss, migrate resources to other clusters, or replicate your production cluster to development and testing environments.

Ready to dive in?

Our documentation is a great place to start!