CAO 2.1 support for Istio

Couchbase Server Kubernetes
1

Hello,

I read CAO 2.1 introduces full support for Istio. Since Couchbase natively supports TLS, I am trying to understand, what is the purpose of providing support for Istio? Can someone help understand this?

Thanks

2

With Istio you define the policy for you entire enterprise in a single place. Every application is then forced to adhere to that policy.

If you used individual TLS configuration for every application in your enterprise, having to manage certificate issue and rotation on a per-app basis, that’s a lot of time and money wasted. Security policies could be allowed to differ between applications and that makes auditing a nightmare.

3

Thanks.

Then, would it mean that Couchbase native TLS and Istio, both would not co-exist in an env, is that correct?

4

That is correct, and running them together doesn’t work, so that decision is made for you :smiley:

1 Like