Configure Red Hat OpenShift Service Mesh in Planning Analytics Workspace Distributed

You can configure IBM® Planning Analytics Workspace Distributed to use Service Mesh if Red Hat OpenShift Service Mesh was enabled for your cluster.

Note: You need to first install and configure Red Hat OpenShift Service Mesh before you can enable Service Mesh in Planning Analytics Workspace Distributed. You also need to add the namespace in which Planning Analytics Workspace Distributed was installed, to the Service Mesh Member Roll.

To enable Service Mesh support in Planning Analytics Workspace Distributed, add the following to paw.env:

export PA_KUBE_ISTIO_CONFIGURED=true
export PA_KUBE_INGRESS_CERT=<path to public key to be used by istio ingress gateway>
export PA_KUBE_INGRESS_KEY=<path to private key to be used by istio ingress gateway>
When PA_KUBE_ISTIO_CONFIGURED is set to true, Planning Analytics Workspace Distributed configures as follows:
Important: Service Mesh does not currently support NTLM authentication (integrated security mode 3).
  • PA_KUBE_INGRESS_TYPE is set to istio-ingressgateway
  • All deployments configure with the following annotations:
    • sidecar.istio.io/inject: “true”
    • sidecar.istio.ioi/rewriteAppHTTPProbers: “true”
  • All jobs are configured to end the Istio sidecar when processing completes. The job is then marked as completed.