Supercharge your Kubernetes Ingress with Kong Ingress Controller
A presentation at NDC Copenhagen in in Copenhagen, Denmark by Viktor Gamov
Supercharge your Kubernetes Ingress with Kong Ingress Controller NDC, COPENHAGEN, DENMARK, 2022 @gamussa | #NDCCopenhagen | @thekonginc
Viktor GAMOV Principal Developer Advocate @gamussa | #ndccopenhagen | @thekonginc
Agenda ● Cloud-Native / Kubernetes Native Application Management ● Intro to Kubernetes Ingress ○ Exposing REST services ○ Exposing gRPC ● Advanced Features @gamussa | #NDCCopenhagen | @thekonginc
KUBERNETES NATIVE APPS @gamussa | #NDCCopenhagen | @thekonginc
● A long time ago, in a galaxy far far away… @gamussa | #NDCCopenhagen | @thekonginc
type: LoadBalancer LB Orders Orders Orders @gamussa | #NDCCopenhagen | @thekonginc
LB Bills Orders Analytics Orders Bills Inventory Inventory @gamussa | #NDCCopenhagen | @thekonginc Analytics Orders
LB LB Bills Orders LB Analytics Orders Bills Inventory Inventory @gamussa | #NDCCopenhagen | @thekonginc Analytics Orders
Proxy Bills Orders Analytics Orders Bills Inventory Inventory @gamussa | #NDCCopenhagen | @thekonginc Analytics Orders
KUBERNETES INGRESS @gamussa | #NDCCopenhagen | @thekonginc
Vendor Neutral Spec apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: finance-apis spec: rules: - host: example.com http: paths: - path: /bills backend: service: name: bills THE CLOUD CONNECTIVITY COMPANY @gamussa | #NDCCopenhagen | @thekonginc
kubectl apply -f ingress.yaml API-server Proxy bills orders @gamussa | #NDCCopenhagen | @thekonginc
Who will implement all this? Load-balance Circuit-break Authentication Metrics Rate-limiting Logging Caching Transformations Serverless Custom logic @gamussa | #NDCCopenhagen | @thekonginc
@gamussa | #NDCCopenhagen | @thekonginc
Load-balance Authentication Metrics Circuit-break Logging Caching Serverless Rate-limiting Transformations Custom logic
What is happening when we apply Ingress resource? kubectl apply -f ingress.yaml API-server API Gateway orders @gamussa | #NDCCopenhagen | @thekonginc bills
What is API Gateway? API GATEWAY Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic @gamussa | #NDCCopenhagen | @thekonginc
What’s Kong? Kong Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic @gamussa | #NDCCopenhagen | @thekonginc
con iguration.konghq.com/v1 Custom Resource De inition KongPlugins Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic Additional functions that can be executed as requests are proxied to each Service @gamussa | #NDCCopenhagen | @thekonginc f f THE CLOUD CONNECTIVITY COMPANY 21
De ine Policies apiVersion: configuration.konghq.com/v1 kind: KongPlugin metadata: name: api-auth plugin: key-auth # name of plugin in Kong config: # plugin specific settings key_names: apikey hide_credentials: true f THE CLOUD CONNECTIVITY COMPANY @gamussa | #NDCCopenhagen | @thekonginc
Apply Them apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: finance-apis annotations: konghq.com/plugins: api-auth spec: rules: - host: example.com http: paths: - path: /bills #or add multiple plugins
- path: /orders THE CLOUD CONNECTIVITY COMPANY @gamussa | #NDCCopenhagen | @thekonginc
Add more policy apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: finance-apis annotations: konghq.com/plugins: api-auth, admins-acl-group, rate-limit-5rpm spec: rules: - host: example.com http: paths: - path: /bills - path: /orders THE CLOUD CONNECTIVITY COMPANY @gamussa | #NDCCopenhagen | @thekonginc
Kong Client THE CLOUD CONNECTIVITY COMPANY Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic @gamussa | #NDCCopenhagen | @thekonginc gRPC JSON Over HTTP Database 25
LET’S SEE SOME CODE Talk is cheap ™! @gamussa | #NDCCopenhagen | @thekonginc
https://www.youtube.com/konginc THE CLOUD CONNECTIVITY COMPANY @gamussa | #NDCCopenhagen | @thekonginc
Join Kong Nation! Links - https://konghq.com/kong-summit - https://youtube.com/konginc - https://konghq.com/community/ @gamussa | #NDCCopenhagen | @thekonginc
Have you ever found yourself in a situation when all your services are running in Kubernetes, and now you need to expose them to the outside world securely and reliably?
I will introduce the Kubernetes Ingress and how you can use it in your applications. Next, we will talk about the Kong Ingress Controller, an open-source implementation of the Kubernetes Controller that can be installed and managed precisely as any other Kubernetes resource. You will learn how to easily expose Kubernetes services to the outside world with Kong Ingress Controller. During this talk, you will also learn about the vast plugin ecosystem of Kong Gateway to declaratively enable security, API rate limiting, etc. As a bonus, I will show native gRPC support!
