Cloud Native APIs: The API Operator for Kubernetes
1 like510 views
The document discusses the API Operator for Kubernetes, which simplifies the management of cloud-native APIs by automating deployment and scaling processes. It introduces Kubernetes operators, custom resources for APIs, security, rate limiting, and various deployment modes. Additionally, a demo scenario outlines how to deploy a microservice on Kubernetes and expose it as a managed API using the API operator.
![Custom Resources
● Security - holds security related information
apiVersion: wso2.com/v1alpha1
kind: Security
metadata:
name: petstorejwt
spec:
# Security - JWT
type: JWT
issuer: https://wso2apim:32001/oauth2/token
audience: http://org.wso2.apimgt/gateway
# Create secret with certificate and add secret name
certificate: wso2am-secret
OPENAPI Defintion
security:
- petstorejwt: []](https://image.slidesharecdn.com/cloudnativeapistheapioperatorforkubernetes-200108090718/85/Cloud-Native-APIs-The-API-Operator-for-Kubernetes-15-320.jpg)
Cloud Native APIs: The API Operator for Kubernetes
- 1. API MANAGER Cloud Native APIs: The API Operator for Kubernetes Pubudu Gunatilaka Technical Lead Dinusha Dissanayake Senior Software Engineer
- 2. API MANAGER Agenda ● Kubernetes ● Expose services as managed APIs ● Kubernetes Operators ● The API Operator for Kubernetes ● Custom Resources ● Deployment modes for APIs ● The need for the API operator for Kubernetes ● Demo on API Operator
- 3. Kubernetes ● Kubernetes (K8s) is an open source system for automating deployment, scaling, and managing containerized workloads across multiple host machines. ● By Google
- 4. User Story Online Shopping Store Products Microservice Inventory Microservice Review Microservice
- 5. User Story Online Shopping Store Products Microservice Inventory Microservice Review Microservice Products API Inventory API
- 6. To expose as a managed API... ● Apply security ● Apply rate limiting ● Apply mediation ● API marketplace for API discovery ● API documentation
- 7. API MANAGER The API Operator for Kubernetes 7
- 9. Kubernetes Operators ● Operators are software extensions to Kubernetes that uses the custom resources for packaging, deploying and managing applications. ● Hides the deployment complexities ● No need of domain specific knowledge for the application management ● List of K8s operators - https://operatorhub.io/
- 10. The API Operator for Kubernetes ● Makes APIs a first-class citizen in the Kubernetes ecosystem ● Provides fully automated experience for cloud-native API management ● OpenAPI definition (Swagger) as one single source of truth
- 12. The API Operator Overview API CRD API Controller API Operator K8s API Server Docker Registry apictl add api -n products-api --from-file=products_swagger.yaml
- 13. Custom Resources ● API ● Security ● Rate Limiting ● Target Endpoint
- 14. Custom Resources ● API - holds API related information apiVersion: wso2.com/v1alpha1 kind: API metadata: name: "product-api" spec: definition: configmapName: "product-api-swagger" type: swagger replicas: 1 mode: privateJet
- 15. Custom Resources ● Security - holds security related information apiVersion: wso2.com/v1alpha1 kind: Security metadata: name: petstorejwt spec: # Security - JWT type: JWT issuer: https://wso2apim:32001/oauth2/token audience: http://org.wso2.apimgt/gateway # Create secret with certificate and add secret name certificate: wso2am-secret OPENAPI Defintion security: - petstorejwt: []
- 16. Custom Resources ● Rate Limiting - holds rate limiting related information apiVersion: wso2.com/v1alpha1 kind: RateLimiting metadata: name: fourreqpolicy namespace: app1-ns spec: type: application description: Allow 4 requests per minute # optional timeUnit: min unitTime: 1 requestCount: limit: 4 OPENAPI Defintion x-wso2-throttling-tier: fourreqpolicy
- 17. Custom Resources ● Target Endpoint - holds endpoint related information apiVersion: wso2.com/v1alpha1 kind: TargetEndpoint metadata: name: products-service labels: app: app2 spec: protocol: http port: 9090 deploy: name: products-service dockerImage: pubudu/products:1.0.0 count: 1 mode : sidecar OPENAPI Defintion x-wso2-production-endpoints: products-service x-wso2-mode: sidecar
- 18. Deployment modes for APIs ● Private Jet ● Sidecar ● Shared
- 19. Deployment modes for APIs ● Private Jet Pod API Microgateway Container /API1 Pod Microservice Container Pod Microservice Container ❏ Scale separately ❏ Dedicated gateway for the API
- 20. Deployment modes for APIs ● Sidecar ❏ Scale microservice with the gateway ❏ Dedicated gateway for the API Pod API Microgateway Container /API1 Microservice Container
- 21. Deployment modes for APIs ● Shared ❏ Multiple APIs deployed in the gateway ❏ Label based API grouping Pod API Microgateway Container /API1 /API2 /API3 Pod Microservice Container Pod Microservice Container Pod Microservice Container
- 22. The Need for an API Operator for Kubernetes ● Hides the API deployment complexities ● Simplify exposing a managed API for a service ● Handles auto scaling for API Gateway ● Switch between private and sidecar mode deployment patterns easily ● Deploy and manage backend services ● Easy to promote APIs between the environments (Dev, QA, Prod)
- 23. Demo
- 24. Demo Scenario • Deploying microservice on k8s cluster and invoking • Configuring API operator, API portal, token service and monitoring artifacts • Exposing the deployed microservices as a managed API using API Operator • Push the API to API portal • Invoke the API and monitoring 24
- 25. Pre-requisites • Kubectl • Kubernetes cluster (v1.12 or above) with 8GB memory and 2vCPUs • Docker-Hub account • API Operator distribution – https://github.com/wso2/k8s-apim-operator/releases/download/v1.0. 0/api-k8s-crds-1.0.0.zip • API Command Line Tool – https://wso2.com/api-management/tooling/ 25
- 26. Try API Operator for Kubernetes https://github.com/wso2/k8s-apim-operator/tree/v1.0.0 26
- 27. Q & A Join us on Slack - https://wso2-apim.slack.com/ Invitation link for Slack - http://bit.ly/332VYeC