Cloud Native Computing Foundation KubeCon + CloudNativeCon North America 2021, 29 Oct 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Keynote: APIs, the Universe, and Everything - Vijoy Pandey, Cisco

Description

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Keynote: APIs, the Universe, and Everything - Vijoy Pandey, Vice President, Engineering for Emerging Technologies and Incubation, Cisco

A

But hello, everyone I am v and it's so good to see everyone here in person and for those of you who are virtual. We still love you when I'm v joy and like constant side, I am actually a part of an extremely cool group in cisco called emerging tech and incubation.

A

If you want to find out more about it, please visit eti.cisco.com, but I'm here to talk about apis, the universe and everything before I get there. I want to introduce to you marvin and the clicker is broken.

A

So who is marvin? If you have to ask please, go and read the hitchhiker's guide to the galaxy right now he is a robot with a brain, the size of a planet. He is 50 000 times smarter than any human being. But most importantly, he is the paranoid android and he's perennially depressed.

A

Why you ask because he's looking at this developer as she moves from developing monolithic, traditional applications to cloud native modern, distributed apps and as she does, that she's using apis and services that are scattered across the globe and are running over the wide open internet in this kind of a scenario. What is the new security perimeter?

A

It's basically an api or a data object. So we need to secure api to api calls and api to data object, interactions.

A

It's no wonder that apis are poised to become the most used attack vector for breaches moving forward. This makes marvin super paranoid, so he has a few questions. He needs to ask both the developers and sres on the one hand, and the security folks on the other.

A

Do you know what apis are running in your internal environment, which third-party apis are you using? Are they geofenced? Are they compliant?

A

Are the apis that you're using deprecated? Are they insecure? Do they have terrible uptime and don't just think about that? One application think about thousands of applications in your environment and the tens of thousands of apis as a result.

A

Hearing all the answers. This is marvin's thought process. Fortunately, for him, a bunch of us in the community, including cisco, 42 crunch and api metrics, got together and formed an open source project. That project is api. Clarity.

A

I paid all of them just so you know you can find out more about this at apiclarity.io, or you can point your smartphone to the qr code up there that'll take you there. What does it do? First and foremost, frictionless onboarding very important, no code, no code changes are needed to deploy api clarity in your environment and we'll see in a moment how we do that.

A

Secondly, it actually observes all of the api traffic in your environment and reconstructs the open api spec for the applications in your environment.

A

It allows you to view those specifications, modify them or even upload your own specifications once it has that now you can take a look at drift. You can take a look at your apis and the parameters and whether they drift over time. Maybe you wanted to pass an integer as a parameter, but you're passing a double. Instead, it allows you to flag zombies and shadows apis that are either deprecated or shouldn't have been used in the first place and all of this through a fabulous ui which we shall see in a moment.

A

The way we make it seamless and frictionless is by putting a wasm filter in envoy and then mirroring all of the api traffic to the api spec engine within open clarity, sorry, api clarity and all of that is accessed through the ui that you shall see here.

A

As you can see, we are tracking all of the apis in your environment and we are tracking the zombies. This is the hand that's coming out of the ground, the shadows, the two circles like an eclipse and the drifts, which are the exclamation points now having this clarity is just the first step. You can take this in so many different ways.

A

You can run api fast testing. You can generate more code, you can do documentation, there's so much. You can do with api clarity. All of this to say, go and try api clarity out, contribute to it. Nurture it grow it. Most importantly, please don't let marvin down.

A

If you want to know more about this. Please visit us at the cisco booth, where we have api clarity in motion. We have footstack observability and api security demos. You can follow us at cisco emerge on twitter and you can point your cameras again to the qr code to take you to emerging tech and incubation constants.

A