Advanced clusters

This document provides information about the advanced clusters feature and the implications of enabling it. The advanced clusters feature is available for Preview for version 1.31 admin clusters and user clusters. The advanced clusters feature is in GA for version 1.32 admin clusters and user clusters and higher.

Note the following limitations of this preview:

  • You can enable advanced cluster at cluster creation time for new 1.31 clusters only.
  • After advanced cluster is enabled, you won't be able to upgrade the cluster to 1.32. Only enable advanced cluster in a test environment.
  • For version 1.32 and higher clusters that have the advanced clusters feature enabled, cluster upgrades are supported.

This page is for Admins and architects who define IT solutions and system architecture in accordance with company strategy, and create and manage policies related to user permissions. To learn more about common roles and example tasks that we reference in Google Cloud content, see Common GKE Enterprise user roles and tasks.

Consistent experience and implementation

The advanced clusters feature implements a cluster architecture that better aligns Google Distributed Cloud for VMware with the rest of the Google Distributed Cloud products. A cluster that has advanced clusters enabled has a shared platform with other Google Distributed Cloud clusters. This shared platform uses the same controllers and agents, which increases reliability and can help Google provide better support. There's also improved performance for cluster operations when advanced clusters is enabled.

The new architecture brings a consistent experience and implementation with all other Google Distributed Cloud offerings, and you can benefit from feature parity with other Google Distributed Cloud offerings in the long run.

Access to new features

You enable advanced clusters to access the latest features and capability, such as topology domains, which gives you better control over how your workloads are distributed across your cluster nodes.

In future minor releases, advanced features, such as topology domains, are available for advanced clusters only.

Differences when running advanced clusters

When you enable advanced clusters, some features or capabilities might not work the same as they do for clusters without the feature enabled. Some of these changes apply only while the feature is in Preview. The differences are noted throughout the documentation, where relevant.

The following table lists the features supported for Google Distributed Cloud for VMware, their availability status when advanced clusters is enabled , and any differences in behavior or use:

Feature/capability1.31 Adv. clusters (Preview)1.32 Not enabled1.32 Advanced clusters (GA)Differences
Advanced clustersPreviewGAGANot supported
Topology domainsPreviewPreviewChanges apply. For more information see Set up topology domains and related cluster configuration references.
Regional fleet membershipGAGAGANo differences.
Version skew n+2 admin cluster - user clusterGAGANot recommended: Since we don't support managing a lower version preview user cluster, this feature shouldn't be used.
Version skew n+2 node pool - user clusterGAGANot recommended: Since we don't support managing a lower version preview user cluster, this feature shouldn't be used.
Max surge setting for node pool updatesPreviewPreviewPreviewNo differences.
cgroup v2 for nodesGAGAGANo differences.
DSR mode for Dataplane V2GAGAGANo differences.
BinAuthz for Controlplane V2 user clustersGAGAGANo differences.
User-managed admin workstationGAGAGANo differences.
StatefulSet CSI migration toolGAGAGANo differences.
Seesaw to MetalLB migrationGAGAGANo differences.
Disable bundled ingressGAGAGANo differences.
Admin cluster prepared credentialsGAGANo differences.
Storage policy for a user clusterGAGAGANo differences.
Storage policy for an admin clusterGAGAGANo differences.
Node auto repairGAGAGAChanges apply: If advanced cluster is enabled, the periodic health checks aren't run as part of auto repair. For information and other differences, see Automatic node repair and health checking.
High availability admin clusterGAGAGANo differences.
VM-Host affinityGAChanges apply. Capability for this feature can be covered partly by topology domains, but this feature isn't fully covered in version 1.32.
Generate configuration files from an existing clusterGAGAGANo differences.
Google Cloud Managed Service for Prometheus system metrics collectionGAGAGANo differences.
Upgrade and rollback of nodepoolsGAGANo differences.
Update private registry credentialsGAGAGANo differences.
Admin cluster backup and restore with gkectlPreviewPreviewChanges apply. Updated the gkectl command for improved restoring of admin clusters and to support backing up and restoring user clusters. For more information, see Back up and restore advanced clusters with gkectl
User cluster nodepool autoscalingGAGAGANo differences.
Cluster automatic node resizingGANot supported.
Multiple vSphere cluster supportGAGAGANo differences.
Multiple vSphere data centers supportGAGAGANo differences.
OpenID Connect (OIDC) support for authentication to clustersGAGAGANo differences.
CA certificate rotationGAGANo differences.
Workload Identity Federation supportGAGAGANo differences.
AIS with LDAP authentication supportGAGAGANo differences.
Always-on secrets encryption without hardware security module (HSM)GAGANo differences.
Update vCenter CA certificates with gkectlGAGAGANo differences.
Egress NAT gatewayGAGAGANo differences.
Admin cluster fleet registrationGAGAGANo differences.
Windows node pool supportGANot supported.
containerd runtime for Windows node poolGANot supported.
Container-Optimized OS node pool supportGAGANo differences.
CoreDNS as the cluster DNS providerGAGAGANo differences.
User cluster lifecycle in the Google Cloud consoleGAPartial supportChanges apply. For more information, see Choose a tool to manage cluster lifecycle.
Admin cluster node creation with Container-Optimized OSGAGANo differences.
Multi-NIC capability for PodsGAGAGANo differences.
MetalLB load balancer optionGAGAGAChanges apply. For details, see Bundled load balancing with MetalLB.
gkectl update admin support for enabling and disabling Cloud Logging and Cloud MonitoringGAGAGANo differences.
Windows Dataplane V2 supportGANot supported.
Summary API metricsGAGAGANo differences.
gkectl update credentials support for updating component access service account keyPartial supportGAPartial supportChanges apply. For details about what is or isn't supported for updating credentials for advanced clusters, see Advanced cluster differences for rotating service account keys.
Prepared credentials for user clusterGAGANo differences.
Dry run upgrade of user clusterGAGAGANo differences.
Asynchronous upgrade of user clusterGAGAGANo differences.
Asynchronous upgrade of admin clusterGAGAGANo differences.
Sequential update of node poolsGAGANo differences.
Create volume snapshot with vSphere CSI driverPreviewPreviewPreviewNo differences.
Create user cluster with Controlplane V2 enabledGAGAGANo differences.
Storage migration with SPBMGAGAGANo differences.
Migrate a datastore to a SPBMGAGAGANo differences.
Migrate a user cluster to Controlplane V2GAGAGANo differences.
Migrate to an HA admin clusterGAGAGANo differences.
Migrate configuration settings for F5 BIG-IPGAGAGANo differences.
Load balancerPartial supportGAGAChanges apply. For more information, refer to the relevant load balancer and cluster configuration reference documentation.
Preflight checksPartial supportGAGANo differences.
Hardware requirementsGAGAGAChanges apply. For details, see CPU, RAM, and storage requirements.
SnapshotGAGAGANo differences.
Private registryGAGAGAChanges apply. For details about using a private registry on an advanced cluster, see Limitations with advanced clusters and the full bundle.
IPAM, DNS, NTP and multi-NICGAGAGANo differences.
Cluster creation/update/deletionGAGAGAChanges apply. Only minor differences. For more information, refer to the relevant cluster operation documentation.
ProxyGAGAGANo differences.
NodePool update policyGAGANo differences.
DiagnoseGAGAChanges apply. vCenter-related checks aren't available for advanced clusters. Since there's no longer a onprem-user-cluster-controller controller, the Diagnose cluster issues guide is obsolete for advanced clusters. For version 1.32 advanced clusters, the gkectl diagnose cluster command runs health checks for the specified cluster.
vSphere tags and VM trackingGANot supported.
vSphere host groupGANot supported.
Logging and monitoringGAGAGANo differences.
Anti affinity groupsGAGANo differences.
Non-HA user cluster control planeGANot supported.

What's next