The ORY Hydra SAP BTP, Kyma runtime component is approaching its end of life. In this blog post, I would like to show you the migration procedure to SAP Cloud Identity Services.
Starting point
To keep things simple, this blog post uses Istio HttpBin ...
In my previous blog post, I explained the upcoming architectural changes in API Gateway. Today, I would like to show you a preview of the forthcoming changes related to API Exposure topics and invite you to try out the Istio-based JWT handler in API ...
I'm part of the Kyma team responsible for API Exposure topics. My team and I work on providing a convenient, reliable, and secure way to expose workloads. In this blog post, I would like to share our plan for redesigning APIRule CR and explain how th...
I'm part of the Kyma team responsible for Service Mesh and Security topics. My team and I aim to provide a stable environment that enables exposing and securing a workload with ease. The recently introduced Istio Container Network Interface (CNI) plu...
hello Matthias, Istio is Kyma managed module and any changes to Istio configuration will be reconciled back to original state provided by Istio module.At this moment it is not possible to configure extension providers but this topic is on our roadma...
hello tshifa,
thanks for reaching out. you can retrieve token url from well-know OPENID configuration: https://{YOUR_IAS_TENANT}.accounts.ondemand.com/.well-known/openid-configuration
When you create application in IAS you also need to create a secr...
Thanks Piotr for your comment! According to Istio documentation other two mitigation settings should be applied to Pod. Here's example of Deployment Pod template annotation:
apiVersion: apps/v1
kind: Deployment
metadata:
...
name: example-workload...
