Cf-mgmt is a tool that is used to organize and declaratively maintain the infrastructure of your CloudFoundry foundations. It does this by representing your foundation’s structure as a collection of directories and yaml files (typically in a git repo). Then it uses a recurring Concourse pipeline to run commands against the foundation to ensure it matches the structure.
It provides automation for managing orgs, spaces, users (from ldap groups or internal store) mapping to roles, quotas, application security groups and private-domains that can be driven from concourse pipeline and git managed metadata.
cf-mgmt is composed by 2 CLIs, cf-mgmt and cf-mgmt-config:
cf-mgmt for TAS
There are currently (as of January 2026) 2 versions of cf-mgmt tool.
It’s not part of the Tanzu Platform product. It’s not released on support.broadcom.com, available at https://github.com/vmware-tanzu-labs/cf-mgmt
There are some customers using it, however the expectation is that there are no support guarantees.
The first commercial release of cf-mgmt is available from support.broadcom.com (cf-mgmt for VMware Tanzu Platform 1.0.107)
Product release advisory available at https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/ProductAdvisories/Commercial-support-for-cf-mgmt-is-now-available/36873
cf-mgmt oficial documentation available at https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/cf-mgmt-tanzu/1-0/cf-mgmt-for-tanzu-platform/commands-commands-index.html
If any issues arise when using commercial release of cf-mgmt please open a support ticket with Broadcom Support.