BTS network flows

The following diagram shows the basic network flows of Business Teams Service (BTS) operator.

BTS operator network flows

  • BTS operator needs to communicate with the Zen Framework.
  • The Zen installation might be in a different namespace than the BTS operator pod.
  • BTS operator sends API requests to usermgmt-svc on port 3443 in BTS namespace.
  • BTS operator sends API requests to ibm-nginx-svc on port 443 in BTS namespace.
  • BTS operator sends API requests to zen-core-api-svc on port 4444 in BTS namespace.
  • All external and internal communication is encrypted.

The following diagram shows the basic network flows of a BTS instance.

BTS instance network flows

  • Kubernetes or OpenShift router receives the UI or API request on the respective HTTPS port, which is usually port 443.
  • BTS plugs-in the Zen framework under the /teamserver path.
  • Zen provides a route and a service, and directs the requests to the BTS service on HTTPS port 443.
  • The BTS service directs the requests to the BTS pods.
  • The BTS pods communicate on port 5432 with the PostgreSQL service by using SSL encryption.
  • The BTS pods communicate with IM SCIM service on port 443 (icp-management-ingress) and the JWK endpoint service on port 12443 (internal-nginx-svc).
  • All external and internal communication is encrypted.