PKS with NSX-T Policy API (Simplified UI)

[Nane76]

From NSX-T 2.5 actually from NCP 2.5+, NSX Container Plugin for Kubenetes and Cloud Foundry supports Policy API (Simplified UI).

It means NCP calls the new intent-based API and all objects are visible in the Simplified UI.

NSX-T 2.5 – What’s New for Kubernetes

NSX Container Plug-in for Kubernetes and Cloud Foundry - Installation and Administration Guide

- Setting Up NSX-T Resources

The question is:

Is it already possible to install and use PKS (1.6.1) with NSX-T by Policy API (into Simplified UI)?

If yes how?

[daphnissov]

You can create the necessary infra in the policy API, but to have PKS continue to create objects there requires modifying the NCP configuration file. As part of Enterprise PKS, I do not know if such a change would be supported. If rolling your own by deploying the NCP into other K8s clusters, you would just make the modification in the ConfigMap.

[Nane76 · Accepted solution]

The only supported way is Advanced UI (Manager API) now.

Based on information in NSX-T Reference Guide and next fragments on the webs it can be expected that PKS will support the PoliceAPI over time as well.

And next the VMware recommended to use Simplified UI.

Related problem solved here: PKS Kubernetes Network Policy and NSX-T Firewall rules sequence problem