By integrating Openshift Service Service Mesh into Red Hat Openshift Data Science (RHODS), we can centralize the entry point for users and simplify the login process. This enhances the user experience and improves security by providing access control through a single sign-on solution and restricting access to specific parts of the platform for different users.

Kubeflow, an integral part of RHODS, already can use Service Mesh (upstream Istio) to improve user login security and restrict access to certain parts of the platform.

Key Features

• Replace the current proxy solution with Service Mesh Ingress Gateway (a single entry point for users)
• Offload authorization to Service Mesh
• Use a single sign-on solution for authentication
• Encrypt all communication between components for better security using mTLS