You can integrate with external services to add functionality and features to Tanzu Service Mesh. You can use the Integrations page to manage external integrations in Tanzu Service Mesh.

You can enable connections to external services that extend how you manage your microservices with Tanzu Service Mesh. For example, you can configure an integration with Amazon Web Services (AWS) to use it as a domain name system (DNS) provider for your services.

To integrate Tanzu Service Mesh with an external service, you must create an integration account with that service. Tanzu Service Mesh will use the credentials that you provided in the account to connect to the service. After you create an integration account, you can reference it in appropriate places within Tanzu Service Mesh to enable the functionality provided by the service. You can create one or more integration accounts for an external service.

This procedure describes how to create an integration account with AWS to add DNS functionality to Tanzu Service Mesh. After you create an AWS integration account, to make your organization's domains managed by AWS available in Tanzu Service Mesh, you must reference the account in an appropriate DNS account.

Prerequisites

Verify that:

  • You have the appropriate credentials and permissions for the external service. Tanzu Service Mesh uses the credentials that you provide to connect to the service. For example, for Tanzu Service Mesh to connect to AWS, you must provide an AWS access key ID and an associated secret access key in an AWS integration account.

  • You are in the Tanzu Service Mesh Console. For information about accessing the Tanzu Service Mesh Console, see Access the Tanzu Service Mesh Console.

Procedure

  1. In the navigation pane on the left, click Tanzu Admin > Integrations.
  2. On the Integrations page, under All Integrations, find the AWS card with a DNS label toward the bottom of the card.
    Note:

    To filter the external services on the page to only those services that provide DNS functionality, click the DNS label to the right of All Integrations.

    If one or more AWS integration accounts exist in Tanzu Service Mesh, the number of accounts is displayed in the lower-left corner of the card.

    The following image shows an AWS integration card. The card indicates that three AWS integration accounts exist in Tanzu Service Mesh.

  3. Select one of the following options.
    • If you are creating the first AWS integration account, at the bottom of the card, click Configure.

    • If one or more AWS integration accounts exist and you are creating another account, at the bottom of the card, click Add Account.

  4. In the New AWS Integration dialog box, provide the following information.
    • Name. The name for the account to help distinguish it from other accounts.

    • (Optional) Description. An optional description or details about the account.

    • Access Key ID. Your AWS access key ID.

    • Secret Access Key. The secret access key associated with your access key ID.

    Note:
    • For information about how to obtain an AWS access key ID and a secret access key, see the AWS documentation.

    • The credentials, such an access key ID and a secret access key, that you provide in the New AWS Integration dialog box are encrypted and securely stored in Tanzu Service Mesh.

  5. Click Save.

Results

The new account is added to the list of AWS integration accounts on the Integrations page. To edit or delete the account, click Edit or Delete in the AWS card. If you have more than one AWS account, in the lower-left corner of the card, click number Accounts, click the name of the account, and then click Edit or Delete.

What to do next

To make your organization's domains managed by AWS available in Tanzu Service Mesh, select the name of the AWS integration account as the domain provider in a DNS account. For more information about DNS accounts, see Manage Domains.