A small test/example supervisor service, following along:

• https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-service-administration-and-development/9-1/vcf-services-development-guide/supervisor-services-carvel-dev-guide.html
• https://carvel.dev/imgpkg/docs/v0.46.x/basic-workflow/
• https://github.com/carvel-dev/imgpkg/tree/develop/examples/basic-step-2

Package is based on ArgoCD supervisor service

Lab

Build

Build and deploy image:

./build.sh

Add New Service

Then click "Add New Service" on the Supervisor Service. Then upload/attach example-0.0.0-1.yml. You will get an informational message stating:

YAML was uploaded successfully. Note: YAML content is not verified and could fail during installation into a Supervisor.

Press "Finish".

Now on "Supervisor Example Service" press "Actions -> Manage Service", then pick your supervisor, and press "Next". You will now get a Warning:

Administrator settings allow installation of unverified services. Proceed with caution.

Signature Verification: Warning

[W] Image docker-snapshots.artrepo.vegvesen.no/simstr/example-service:0.0.0-1 of Service Version 0.0.0-1 has no signature and Supervisor is unable to verify the developer's identity.

[W] Running unverified services on user workloads has security risks. An unverified service has network access to user workloads, vSphere Pods, and exposed APIs.

[I] Signature Certificate is not available.

Press "Next", and then "OK" when prompted:

Confirmation

Do you agree to install the service despite the signature warnings?

Then press "Finish".

Then verify from Kubernetes:

$ kubectl get configmap --all-namespaces --field-selector metadata.name=test -o json | jq '.items[0].data'
{
  "hello": "Nice to meet you, my name is svc-example-service-83n9i",
  "version": "0.0.0-1"
}

Add New Version

Then on "Supervisor Example Service" click "Add New Version", and upload example-0.0.0-2.yml. You will then get a warning:

The YAML content defines an existing Supervisor Service (example-service.maezu.vegvesen.no), which may prevent creating a Supervisor Service from the content.

Pressing "Finish" now will result in the Supervisor Service going down. And potentially the "Supervisor Service" view is lost to the vSphere WebUI. It can be restored by manually starting WCP.