We’re now shipping a full on agentic platform, built on Tanzu Platform. It’s probably the only enterprise grade, proven, private cloud platform stack out there for running apps, serving up AI, and providing all that isolated VM and deny by default stuff you want for your enterprise AI apps…or any app in general as our customer pleasurably have experienced for years.
First, cf push lands on Kubernetes: workloads run on vSphere Kubernetes Service or VMs chosen by platform policy, developers keep manifests and buildpacks and never see YAML, Helm or kubectl, and rolling updates, canaries, sidecars, tasks and app security groups survive. Second, an agent runtime: disposable deny-by-default sandboxes with no shell, an MCP gateway that brokers tool access so agents never hold raw credentials, a managed memory service, RBAC and rate limits on MCP servers, and tracing of prompts, tokens, latency and tool calls. Third, TrueSource, a new Broadcom offering of maintainer-verified cleanroom builds of Spring and its dependencies plus curated Java, Python and Node libraries. Fourth, “environmentally adjusted CVE scoring” that rescores a CVE for the platform’s actual controls, with Spring4Shell’s 9.8 cited as a score that would drop in place, and a restage that rebuilds and rolls an image without a developer commit. Multi-region becomes first-class with capacity rebalancing across foundations, and data services get decoupled lifecycles so PostgreSQL 16 and 17 or Kafka 4.2 and 4.3 can run side by side.
🔗 VMware Tanzu Platform 11.0: The Agent Platform for VMware Private AI Cloud
Leave a Reply