Changelog
All notable changes to the VMSP Toolkit Appliance. Each release ships as a
new OVA on the Releases page with a SHA256 checksum.
v1.0.0 — first public release
Appliance
- Photon OS 5 base, fully patched at build; inbound firewall allows only
SSH (22) and the web UI (8443) - Deploy-time customization via OVF properties: hostname, static IP/CIDR or
DHCP, gateway, DNS, root password, SSH public key, read-only mode,
webhook URL - Forgiving static-IP handling: a bare IP assumes /24, invalid input falls
back to DHCP instead of leaving the appliance unreachable - Unique self-signed TLS certificate minted at first boot (replaceable)
Web UI
- Session login with disclaimer acceptance; optional server-enforced
read-only mode - Health cards, namespace-grouped topology map (pan/zoom), package
deployment table with pod drill-down - Known-issues rules engine with confirmation-gated one-click fixes,
extensible via YAML rules - Fleet-wide TLS certificate sweep with cert-manager renewal
(VCF-managed certs are flagged for the official workflow) - Velero backup status, warning-events viewer, connectivity matrix,
embedded web terminal - In-app themed confirmation dialogs for all mutating actions
CLI
vmsp-doctor: health sweep aligned to VCF 9.1 package-deployment phase
vocabulary, namespace log dump, support bundle collection, fluentd
remediation (VCFMS-HEALTH-002 / KB 438093)toolkitmenu: guarded kubeconfig fetch with input validation and live
API verification, worker-node detection with control-plane hint,
fleet-wide cert expiry sweep; shares the active instance with the web UI- kubectl, k9s, helm, yq, govc, cmctl preinstalled
Automation
- Hourly health watch with webhook alerts (Slack / Teams / generic JSON)
on failure-count change