BTS network flows
The following diagram shows the basic network flows of Business Teams Service (BTS) operator.
- BTS operator needs to communicate with the Zen Framework.
- The Zen installation might be in a different namespace than the BTS operator pod.
- BTS operator sends API requests to
usermgmt-svc
on port 3443 in BTS namespace. - BTS operator sends API requests to
ibm-nginx-svc
on port 443 in BTS namespace. - BTS operator sends API requests to
zen-core-api-svc
on port 4444 in BTS namespace. - All external and internal communication is encrypted.
The following diagram shows the basic network flows of a BTS instance.
- Kubernetes or OpenShift router receives the UI or API request on the respective HTTPS port, which is usually port 443.
- BTS plugs-in the Zen framework under the
/teamserver
path. - Zen provides a route and a service, and directs the requests to the BTS service on HTTPS port 443.
- The BTS service directs the requests to the BTS pods.
- The BTS pods communicate on port 5432 with the PostgreSQL service by using SSL encryption.
- The BTS pods communicate with IM SCIM service on port 443 (
icp-management-ingress
) and the JWK endpoint service on port 12443 (internal-nginx-svc
). - All external and internal communication is encrypted.