Configure Red Hat OpenShift Service Mesh in Planning Analytics Workspace Distributed
You can configure IBM® Planning Analytics Workspace Distributed to use Service Mesh if Red Hat OpenShift Service Mesh was enabled for your cluster.
Note: You need to first install and configure Red Hat OpenShift Service Mesh before you can enable Service
Mesh in Planning Analytics Workspace Distributed. You also need to add the namespace in which
Planning Analytics Workspace Distributed was installed, to the Service Mesh Member Roll.
To enable Service Mesh support in Planning Analytics Workspace Distributed, add the following to paw.env:
export PA_KUBE_ISTIO_CONFIGURED=true
export PA_KUBE_INGRESS_CERT=<path to public key to be used by istio ingress gateway>
export PA_KUBE_INGRESS_KEY=<path to private key to be used by istio ingress gateway>
When
PA_KUBE_ISTIO_CONFIGURED
is set to true, Planning Analytics Workspace
Distributed configures as follows:Important: Service Mesh does not currently support
NTLM authentication (integrated security mode 3).
PA_KUBE_INGRESS_TYPE
is set toistio-ingressgateway
- All deployments configure with the following annotations:
sidecar.istio.io/inject: “true”
sidecar.istio.ioi/rewriteAppHTTPProbers: “true”
- All jobs are configured to end the Istio sidecar when processing completes. The job is then marked as completed.