Management Plane
This page will introduce you to how the TSB Operator is used to configure management plane components, and which components are managed by the TSB Operator.
The TSB Operator configured to manage the lifecycle of the management plane
components, watches for ManagementPlane custom resources in the same namespace
as where it’s deployed. The default namespace for the Management plane is tsb.
For details about the custom resource API, refer to the
Management plane Install API Reference Docs.
Components
These are the types of custom components you can configure and manage using the management plane operator:
| Component | Service | Deployment | Cronjobs |
|---|---|---|---|
| apiServer | tsb | tsb | teamsync |
| iamServer | iam | iam | |
| webUI | web | web | |
| frontEnvoy | envoy | envoy | |
| spmServer | spm | spm | spmsync |
| oap | oap | oap | |
| zipkin | zipkin | zipkin | zipkin-cleanup |
| collector | otel-collector | otel-collector |
The components configured and installed by the operator are:
- apiServer: The TSB API server, responsible for:
- Managing user-created service mesh configurations
- Pushing service mesh configurations to control plane clusters
- Managing cluster information pushed from the control plane cluster
- Enforcing authorization of the operations performed by users
- Storing audit logs of the operations performed
- frontEnvoy: Ingress gateway into the Management Plane
- iamServer: Manages user and TSB agent token authentication
- webUI: TSB UI server
- oap: Serves GraphQL queries for the TSB UI and aggregates cross-cluster metrics
- spmServer: Responsible for alert configuration management
- zipkin: Serves the Zipkin distributed tracing UI
- collector: An Open Telemetry Collector that collects the management and control plane components’ metrics and exposes them through a Prometheus metrics endpoint
Demo install
As part of a demo install, in addition to the above, the TSB Operator will also spin up PostgreSQL and Elasticsearch components which are only suitable for a demonstration environment. They are not supported by Tetrate, and strongly discouraged for production or even detailed system evaluation purposes.