Merge pull request #87773 from rh-tokeefe/OSSM-8192

OSSM-8192: product documentation for external control plane topology

Author: JoeAldinger

_topic_maps/_topic_map.yml

@@ -78,6 +78,8 @@ Topics:
   File: ossm-multi-cluster-topologies
 - Name: Deploying multiple service meshes on a single cluster
   File: ossm-deploying-multiple-service-meshes-on-single-cluster
+- Name: External control plane topology
+  File: ossm-external-control-plane-topology
 - Name: Installing the Istio command line utility
   File: ossm-istioctl-tool
 - Name: Enabling mutual Transport Layer Security

install/ossm-external-control-plane-topology.adoc

@@ -0,0 +1,12 @@
+:_content-type: ASSEMBLY
+[id="ossm-external-control-plane-topology"]
+= External control plane topology
+include::_attributes/common-attributes.adoc[]
+:context: ossm-external-control-plane-topology
+
+toc::[]
+
+Use the external control plane topology to isolate the control plane from the data plane on separate clusters.
+
+include::modules/ossm-about-external-control-plane-topology.adoc[leveloffset=+1]
+include::modules/ossm-installing-external-control-plane.adoc[leveloffset=+2]

modules/ossm-about-external-control-plane-topology.adoc

@@ -0,0 +1,8 @@
+// This procedure is used in the following assembly:
+// * install/ossm-multi-cluster-topologies.adoc
+
+:_mod-docs-content-type: CONCEPT
+[id="ossm-about-external-control-plane-topology_{context}"]
+= About external control plane topology
+
+The external control plane topology improves security and allows the Service Mesh to be hosted as a service. In this installation configuration one cluster hosts and manages the {istio} control plane, and applications are hosted on other clusters.