You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Skupper Network Observer visualizes the Virtual Application Network — sites, listeners, connectors, and process-level traffic across hub, east, and west:
129
+
130
+
[](/images/hybrid-mesh-platform/service-interconnect-console.png)
131
+
132
+
[](/images/hybrid-mesh-platform/service-interconnect-console-topology-process.png)
Each spoke runs a Gateway API gateway (`components/spoke-gateway`) that fronts all Industrial Edge services. Skupper exposes **one** gateway per spoke instead of every microservice individually.
[](/images/hybrid-mesh-platform/connectivity-link-spoke-gateway.png)
174
+
175
+
Hub-side Gateway API and HTTPRoute policy topology: see [Hub Gateway — Connectivity Link topology](hub-gateway#connectivity-link-topology).
176
+
159
177
## Multi-cluster observability pipeline
160
178
161
179
Spoke Thanos Querier is reached through nginx auth-proxy Connectors. Hub Listeners `prometheus-east` and `prometheus-west` become Grafana HTTP datasources (no bearer token from hub).
The hub gateway provides centralized HTTP ingress on the hub cluster with behaviors similar to an F5 BIG-IP ADC: VIP-style routing, TLS termination at the edge, and weighted traffic splits across backend services or spoke-derived routes.
10
10
11
-
Implementation chart: `components/hub-gateway`.
11
+
Implementation chart: `components/hub-gateway`. Connectivity Link operator: `components/rhcl-operator`.
Connectivity Link (Kuadrant) brings multi-cluster ingress and policy using Kubernetes Gateway API — DNS, TLS, rate limiting, and auth patterns layered on `Gateway` and `HTTPRoute` resources. In this platform, Gateway API objects align with hub gateway routing (including weighted splits similar to hardware ADC behavior). Policies may be disabled initially; enable Kuadrant `AuthPolicy`, `RateLimitPolicy`, and DNS/TLS strategies as you harden environments.
16
+
17
+
[](/images/hybrid-mesh-platform/connectivity-link-hub.png)
18
+
19
+
_Gateway API policy topology — hub-gateway, HTTPRoute, and route rules in the OpenShift Console._
20
+
21
+
### Hub cluster
22
+
23
+
Hub cluster Gateway API resources and HTTPRoute attachment to `hub-gateway-system`:
24
+
25
+
[](/images/hybrid-mesh-platform/connectivity-link-hub-gateway.png)
26
+
27
+
### Spoke clusters
28
+
29
+
Spoke cluster Gateway API and backend services exposed through the mesh:
30
+
31
+
[](/images/hybrid-mesh-platform/connectivity-link-spoke.png)
32
+
33
+
Spoke gateway aggregating Industrial Edge services for cross-cluster exposure (single Skupper Connector target per spoke):
[](/images/hybrid-mesh-platform/arch-spoke-gateway.png)
38
+
39
+
Verify Connectivity Link reconciliation by inspecting `Gateway` status conditions and `HTTPRoute``spec.parentRefs` — not only Pod labels. Chart path: `components/rhcl-operator`.
16
40
17
41
## Gateway API theory
18
42
@@ -100,9 +124,9 @@ gateway:
100
124
101
125
Set `enabled: false` to disable circuit breaking entirely.
102
126
103
-
## Relationship to Connectivity Link
127
+
## Relationship to Connectivity Link and Service Mesh
104
128
105
-
Connectivity Link (Kuadrant) layers DNS automation, TLS policies, and advanced controls atop Gateway API. Start with plain HTTPRoutes for incremental adoption; enable Kuadrant policies when teams require DNS/TLS/rate-limit governance at scale.
129
+
Connectivity Link layers DNS automation, TLS policies, and advanced controls atop the Gateway API topology shown above. Service Mesh ambient (ztunnel/waypoints) carries east-west traffic between gateway hops and workloads. Start with plain HTTPRoutes for incremental adoption; enable Kuadrant policies when teams require DNS/TLS/rate-limit governance at scale.
[](/images/hybrid-mesh-platform/openshift-ia.png)
52
+
51
53
End-to-end on a spoke: sensor → MQTT → Camel K → Kafka → optional ML → dashboard; MirrorMaker streams toward centralized storage for model training (see [Architecture](architecture#follow-the-request--one-temperature-reading-end-to-end)).
Multi-cluster fleet dashboards on the hub (east/west traffic, Service Mesh L4/L7, Kafka health):
24
+
25
+
[](/images/hybrid-mesh-platform/product-grafana-observability-2.png)
[](/images/hybrid-mesh-platform/product-kiali-service-mesh-2.png)
34
+
35
+
## Kafka Console views
36
+
37
+
[](/images/hybrid-mesh-platform/product-kafka-console-amq-streams-2.png)
38
+
39
+
[](/images/hybrid-mesh-platform/product-kafka-console-amq-streams-3.png)
0 commit comments