Plain Virtualization

A great day 1 for VMworld 2021. If you have not manage to listen and attend to all the sessions, there were several project been announced. Here are a summary for those who missed it. A quick summary of some of the topics can be found here . Project Cascade (Tech Preview) A unified kubernetes interface across VMware Cloud for IaaS (infra) and CaaS (container). This in turn provide open CLI, API and GUI. This address the problem that developers have to learn a different interface for every cloud running kubenetes. With Project Cascade, developer only need to know one and run in any Cloud. With initial milestone for VM service on VMware Cloud. The good thing is this is build on open foundation. Read more about it here . Project Arctic (Tech Preview) This allows vSphere to have cloud connectivity giving it Cloud-aware. This is extremely useful for customer who are still running on prem workloads and leveraging the cloud for use case such as DR. This allows customers to consume VMware Clou...

Critical Security Vulnerability Workspace One Access and vRealize Automation VMware has release a security notice VMSA-2021-0016 in regards to Workspace One Access (WOA) i.e VMware Identity Manager (vIDM) with a CVSSv3 base score of 8.6 . It is encourage to apply the patch or workaround as soon as possible. This also applies to vRealize Automation that has embedded vIDM aka WOA. Server Side Request Forgery in vRealize Operations Manager API ( CVE-2021-21975 ) This is impacting vRealize Operations Manager which can be a standalone product, in VMware Cloud Foundation or vCloud Suite and deployed by vRealize Suite Lifecycle Manager. It has a CVSSv3 base score of 8.6 which is highly critical. This allows authenticated user via API to vROps the permission to write files directly locally to the underlying OS, Photon.  VMware vExpert 2021 Second Half Congrats to all new vExpert 2021 from Second Half announcement . It is not easy to have such a big community with everyone contributing wit...