What are two prerequisites to enable provisioning VMs via kubectl against tenant resources?

In VCF 9.0, the AllApps (AIIApps) organization model allows users to interact with infrastructure using Kubernetes-native tools like kubectl. To establish this connection, the user must first Generate an API token from the VCF Automation UI . This token provides the necessary authentication context for the specific organization and project the user belongs to. Once the token is obtained, the user must use the VCF CLI (vcf-cli) to create a context . The VCF CLI is the specialized tool that bridges the gap between the VCF Automation API and the local kubeconfig file. By running the login command within the VCF CLI, a specialized context is injected into the user ' s kubectl configuration, mapping the local environment to the remote Supervisor Namespace and its associated VPC resources. This allows developers to use standard kubectl apply commands to provision virtual machines and other resources directly into their assigned tenant space.