In-cluster control plane options

• Enable optional features

  Enable optional features when you install the Anthos Service Mesh in-cluster control plane.

• Integrate IAP with Anthos Service Mesh

  Install the Anthos Service Mesh in-cluster control plane, configure a load balancer, and integrate with Identity-Aware Proxy (IAP).

• Configure end-user authentication

  Configure Anthos Service Mesh user authentication for browser-based end-user authentication and access control to your deployed workloads.

• Configure Anthos Service Mesh to use CA Service

  This preview provides you the opportunity to experiment with using Certificate Authority Service to secure workloads on Anthos Service Mesh.

• Configure audit policies for your services

  Configure an audit policy, which lets you audit data access to your services in Anthos Service Mesh with an in-cluster control plane.

• Install GKE on VMware using an HSM

  Install Anthos Service Mesh on existing GKE on VMware, and use Thales Luna HSM 7+ and Hashicorp Vault to securely generate and protect the CA signing key.

• Integrate with third-party add-ons

  Enable metrics export to Prometheus for your own instance of the Prometheus, Kiali, and Grafana dashboards.