Skip to main content
SAP Pentest Playbook
Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

Kyma URL pattern/schema

Description

Applications running in SAP BTP Kyma are exposed through Kubernetes- and Istio-based networking components. Unlike the Cloud Foundry environment, Kyma does not provide a single static default application domain. Instead, application URLs are dynamically generated per Kyma runtime and are derived from a unique cluster identifier and domain configuration.

Externally reachable services typically follow patterns such as:

https://<service-name>-<namespace>.<cluster-id>.kyma.ondemand.com

Applications are exposed via Istio Gateways, VirtualServices, or Kyma-specific API Gateway resources. Custom domains can also be configured, allowing customers to expose services under enterprise-owned DNS names with customer-managed TLS certificates.

Options

  • Default domain pattern:
    • https://<service-name>-<namespace>.<cluster-id>.kyma.ondemand.com

References