Istio Service Mesh
Istio is an open-source service mesh that developers use on SAP BTP to manage and configure communication between workloads in a Kyma cluster. It works by injecting sidecar proxies into Pods, which handle traffic management, observability, and security without requiring changes to application code. Developers use the Istio module to expose workloads via VirtualService resources, secure them with JWT authentication, and configure custom Certificate Authority (CA) certificates for mutual TLS.
Docs explaining this concept
- Doc API Gateway Module
- Doc Configure Istio Certificate Authority (CA) with Custom Certificates
- Doc DNS Proxying
- Doc Enabling Istio Sidecar Proxy Injection
- Doc Expose Workloads with Istio VirtualService
- Doc Expose Workloads with Istio VirtualService
- Doc Expose and Secure a Workload with a JWT Using SAP Cloud Identity Services
- Doc Istio Module