Kong Kong Konnect Tutorials, 25 Jun 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Konnect Meets Kubernetes - Kong Builders Livestream

Description

In this episode of Kong Builders, Kong Developer Advocate Viktor Gamov shows how to deploy and manage service connectivity with Kong Konnect and Kubernetes. Try Konnect for free: https://bit.ly/3A9njxz

We’ll deploy an application in Kubernetes, configure a runtime through Konnect and deploy the runtime in Kubernetes.

▬▬▬▬▬▬ TIMECODES ▬▬▬▬▬▬
0:00 - Stream starts/timer
2:00 - Welcome to Kong Builders
6:18 - Destination: Automation https://bit.ly/3A2XPSK
8:39 - Agenda
12:00 - Login to Konnect
13:04 - Configure Kong Gateway in Kubernetes
22:23 - Configuring mock bin service in Konnect
27:04 - Configuring Quotes Service deployed in Kubernetes
32:12 - Configuring plugins
34:22 - Rate limiter
36:50 - Request validator
41:17 - It's a wrap!

▬▬▬▬▬▬ LINKS ▬▬▬▬▬▬
❏ https://konnect.konghq.com/
❏ https://docs.konghq.com/konnect/runtime-manager/gateway-runtime-kubernetes/
❏ Kong Ingress Controler video https://youtu.be/hrYqGXU-a6E

▬▬▬▬▬▬ CONTACT VIKTOR ▬▬▬▬▬▬
❏ 🐦 https://gamov.dev/twitter
❏ 📧 https://gamov.dev/telegram
❏ 🔴 https://gamov.dev/youtube

#Kubernetes #K8s #Kong #Konnect

A

Hello and welcome to this episode of kong builders, my name is victor gamov and I will be your host today. uh Some of you expected to see cody but surprise, surprise. We actually announced that the the kodi needs some of the time off to relax after two weeks uh working hard on this live stream. So I will be your host today and uh that's uh hopefully it's not the bummer for many of you.

A

So the weird thing that I don't see how many people right now watching this live. I hope many people watching this live. um Let's, um let's make some noise in the comments like if you're watching this live, uh write down in the comments where are you coming from? I am coming to you live today from my studio from sunny uh new jersey, usa and I hope uh to to know where you are coming from. So there is a chat in this window.

A

You can type your answers here and also um I don't know like write down if you're drinking something write down what you're drinking today, I'm not drinking anything. So I'm not um I'm not writing down anything and uh we'll wait for a couple more seconds.

A

uh I think it's a good opportunity to go in in and talk to your friends and family about this, and maybe someone will also want to join and learn something new today and we are.

A

Live and I'm going live tweet about this.

A

Sweet cool all right, so I see at least um at least 10 people watching this right. Now, um probably they are either either shy or uh don't want to type anything in this so anyway, so we're going to start.

A

We are wearing a tight schedule to talk about multiple cool things today, so, first and foremost um what this stream will be about, I um I would like to take the slightly different approach, so the kodi was talking a lot about kumamash in the previous things, and I would like to talk a little bit about um just like traditional approach for deploying services managing services, and this is what I'm going to be talking today right now.

A

I will take this small use case um of a managing small application and we'll be uh showing off this into um how you can configure this uh with kubernetes, with uh connect to manage this connectivity, how you can configure different clone plugins through this one, all right, we start getting some of the um some of the people uh in uh in this chat.

A

So I see uh patricia join us from san diego sudar from india, hey how's it going from san francisco, so the people coming from all over the place- that's really great, to have everyone's here um before we jumping into the demo and the presentation I will like spend like a few minutes talking about uh one of the things that um we're doing here and one of the things that uh we do at kong.

A

It's we're also running some of the cool events that help you to learn something new and uh maybe um you know, meet someone new and things like that. So one of the cool events that coming this year is event called destination automation.

A

So it's um it's a it's event where you can learn a lot of things uh specifically about I'm excited about kubernetes, because I will be talking about kubernetes here and a couple, a couple cool talks and, uh for example, developers don't need kubernetes, I'm pretty excited about this talk specifically because I think developers do need kubernetes and I think it's a little bit of um how it's called clickbaity, because people say no like. I need kubernetes.

A

Why why we would say that so viktor farsig will be uh we'll be talking about this one and particularly exciting, since it's an event about automation and all sorts of things that developers can do to improve their workflows. I'm pretty excited about the talk from rob richardson about uh integrating github actions and kubernetes. So github actions allows you to build your like ci cd pipeline within your like github repository uh within your github infrastructure, and how I'm pretty excited to learn how it can be integrated with grenades.

A

So, um while I am talking about the stuff also, let me know how you hear me if you hear me well, if you can see me well or maybe, I need to go a little bit louder, a little bit quieter. So let me know also in the comments I see some of the some of the people already joining more so do not forget to subscribe and go register for destination destination. Automation event.

A

Some people um mentioned that um they don't know what we're doing here in terms of like live streams. So if you want to learn about new videos or new streams, you need to go to subscribe to the channel and enable notification. So there's a notification set like customized and all you need to select all because customized, it's kind of a little bit weird uh youtube algorithm, will pick up something for you like if you want to miss anything, just like select all all right. So let me go uh briefly through agenda of things.

A

What I want to talk to you today.

A

So we're going to start with the uh with connect and uh connect is a platform that allows to manage connectivity between services. I will set up a connection to kubernetes because I love kubernetes. I think essentially everything what I do I like to do this in in kubernetes, just because I already uh invested so much time to learning these things, uh so I don't even trying to do something else. For example, I my friend michael heap, he was deploying this um demo that we were working a couple weeks ago.

A

He deployed this just with the um ftp something to uh to the to the service, and after that he wrote a system d in script, so application will start immediately. uh um No, I'm not doing this, I'm writing application, building image, pushing the image and after the deployment to render. So that's what we're going to be doing so, my um my application will be deployed on kubernetes, my runtime and uh my my corn ground time that I will be um configuring through.

A

Connect will be also deployed in uh kubernetes, uh there's different options, how the people can build um uh and the manage runtime. One of the options that I showed in uh maybe like last week uh on the video uh how we can use clone ingress controller to do the same thing. So we will.

A

We will talking about connect today, but more videos about ingress controller are coming so next thing that I'll show you how you can do like simple things without any apps, so how we can proxy um some of the calls to some external service. We're going to be using this, like more bin service, to do um like a small uh proximi things, and uh the next thing I will show how you can deploy your application and how you configure this application uh with different plugins.

A

I will show you how we can do rate limiting in the request validator like without much of the coding except some of the yaml. If you can see that this is the coding.

A

Let me know if, if this agenda sounds good also, I would like to. um I would like to tell you and remind you that this show this particular show. The live, show also very much inspired by the comments that you make in our youtube videos.

A

If you want to learn specific things or you have some questions, uh uh for example, friend of mine wesson, he asked some of the questions in the in the in the comments from the previous videos, and I start thinking about how I can turn this into some tutorial that some other developers also can use.

A

So do not forget to write the comments and let us know- and if you want to like, send something directly to me, you can always um you can always reach out to me in in twitter, uh and I would like to show my twitter on the screen right now. So that's my twitter. You can always dm me if you have any questions or suggestions or you want to. You know, comment on some of the things.

A

Please, please, please don't hesitate to reach out all right, so I am switching back to my computer, where I already have um my connect, so I already have a account in and connect you can send out for free um and you can play around with some of the features that I will show you for free without credit card, without nothing for 30 days.

A

You know, there's nothing um to prevent you from playing around and learning some some, some some cool things, and uh today I'm gonna be uh we're gonna be doing this, so I have a bunch of runtimes. Do not um you know pay attention about this. I did a lot of testing. As you can see. I did a lot of um uh research for this demo um today we're going to be starting configuring, new runtime and I will be picking up kubernetes runtime.

A

We do have a code snippets. We do have some of the um steps like a tutorial that you can do. We will walk through all those from scratch, but before I can do this, I need to have a comprehensive cluster, so my um preferable location of um of microbrands cluster is google cloud platform and I think I already have a cluster deployed. um My cluster is deployed.

A

A

I think it's not super big three nodes. I prefer to have it uh not uh not not super big, but not super tiny. So I have a three nodes branch cluster up and running. So the next thing that we need to do is to deploy a uh our platform like deploy, um uh deploy my clone platform so for to do that um we actually have a like a full-blown um documentation that explains this and I will post the link to this documentation in description in this video.

A

All the links will be posted if you would be interested or, if you're, watching this afterwards. So you will be able to find this in um in description now.

A

The couple things that you need to do to to have um you need to have a helm installed. I already have a helm installed in my computer, so if I'll just do helm and version.

A

So I'm using helm3 and our hound charts are also tested with this.

A

um We also provide you with the helm repository. So you add this repository to your local installation and after that, uh when you do a rep update your download index of of this repository locally, so you will be able to install these charts. Second thing in order to this connect, we call it a control plane, the things that is controlling different runtimes controlling different systems.

A

So in order to my control plane to connect to my uh system or runtime or how I call it data plane, uh we need to establish this connection, so we want to do this securely through um through open internet. So that's why um some of these certificates will be generated, so you can private keys and the public keys already here. So I already downloaded- I downloaded this.

A

My my computer already have those so next thing is that, in order to my runtime to connect to my data plane, I need to create those things in my kubernetes cluster. So the way how I can do this in my documentation, I'm going and see we need to create two um two secrets inside your kubernetes cluster: one secret about cone cluster certificate and con cluster certificate authority.

A

So and the thing is that, like there's snippets there, you can copy and paste this, but let me go ahead and create those secrets. First,.

A

um So the the one that I will be doing this it's a wrong directory. I'm sorry! So in this case my files here, so I can.

A

Do um with tls so in this case it will create the secret uh no space not found. That's very important. Nam space needs to be uh created.

A

I created an m space. I will call it kong and for some reason I just looked out from the computer next thing. I will create a secret inside my here create secret, a certificate authority. Two secrets are created, and the next thing is that um I just need to grab this values values.yaml.

A

In my case, it looks like this. In your case, it might be different because it might be using different um urls for for this depends on when you're, creating this one, um the I'm using this, uh this image of corn gateway- and this is where I will be installing this and the way how it looks like I just do hell, install helm hell, not help. Maybe I need help. um I will installing this new release called my kong.

A

um This is gonna, be uh my name of the chart, I'm installing this in namespace quang and the values from my file. So let's do this while it is installing. Let me quickly take a quick look on on some of the comments that we might have do not forget to register for a destination automation.

A

Oh my friend, david klein, here dave thanks. So much for joining, um you will have a good day today. I promise all right, so everything is good aaron thanks. So much for joining my friend um from mountain view, california question about the t-shirts where you can get t-shirt.

A

This is a good question. I need to get back to this one uh rory and uh well we'll check how people can get these awesome t-shirts. I guess I received this as my welcome pack um when I joined the cloning, so there's another option to get this t-shirt is joining cong, we're hiring if you're interested in joining kong.

A

Also dm me in twitter and we'll uh we'll see if you will be interested in some of the positions that we have here now we are getting back to my screen and now I am going back to this one. So uh I installed this um helm, charts, there's a bunch of warnings, uh because maybe my cluster is running some of the you know latest and greatest version. As always- um and uh in this case you know there would be some some of the interesting discrepancies.

A

However, um the most important thing is that you can get a access to um to kong and in order to get access to sequon, um we need to get the external ip address. So um when we're creating a service with type of load balancer in google cloud, google cloud will provide us external address. So in order to communicate with our application service, we need this address. So in the handy, we're providing this this command and I'll show you how it looks like if I'll do ingress.

A

So the way how it looks like it gives me this ip address and in order to play around with this later, I will just like save it in my in my insomnia. Where is it my insomnia and thankfully insomnia provides me ways how I can manage my environment? So in this case I can put this inside here and I can use this proxy ip environment available in my application.

A

So that's what I'm going to be using so next thing is that I would like to check if I actually have a connection to this runtime. So after I connected everything here, I'm getting back to run times and what I can see here. Oh this is a walking gorilla working grooves.

A

So that's my uh that's my guy. So, let's see if it's actually my guy so I'll just do canon s oops.

A

So if you are never use, this k9s is awesome tool for doing everything in console and also like uh being kind of sort of gui. So it's it's combination of being hardcore, console guy and also being uh the person who likes to use nice gui. So that's my pod, that's! My port is connected right now to my um to my control plane. So now we can cross this off. From from my list right, I can cross this off extra.

A

I can go ahead here, so we logged in into connect. uh We created this runtime on kubernetes. Now, let's configure mock service. So what we're trying to do so? We do have our data plane. Our applications are running somewhere, there's our gateway somewhere and now we need to manage this getaway from outside world. um As a hardcore guy, I can use the kubernetes.

A

You know ingress controller and configure this through kubernetes resources. You can also watch this in my video that I did, but here I want to show you a slightly different approach um approach that uh will fit in more like a operations plus developers approach. So operations might have a different configuration. They don't want to tinkering with some of the yaml things, so in this case they will be able to do this. So what we, what we're going here and I'm going into the service hub, uh select my services and create a new service service name.

A

Let's do is, let's call it mock service.

A

The version 1.0.

A

A

That hits mogbin.org, so I'm creating this one. So what I wanted to do, I want to create this service that uh will be proxying request to this smoke bin through my data plane through my cooling through my column, api gateway- and you will understand why later so in this case, there's nothing here. There's nothing is configured that just created this one, so I've created a new version. Oh sorry, I already have a version here, I'm going inside here and I need to add a new implementation.

A

So new implementation, I will just pass the url. um You can also have a different protocols configured here by default. I will be using just a simple http service write down in the comments. If you want to learn more about, for example, grpc, and how to configure this with grpc, so my road name, I will call it mock. I will go through the http protocol, so it's going to be http to http for to to have it simple. I don't need to configure host.

A

It will go into my um it go into my uh my kubernetes external ip mentor host and their method. So I'm interested in method get- and I add the path called block.

A

Rest of the stuff, I can configure some other fields, but I'm not gonna this time. So I do have a first implementation.

A

And if I go to the smoke, bin.org there's a bunch of cool things that can be do that we can submit, but one of the things is this classic full full bar buzz. So we're gonna try this one as well! So if I will hit this smok bin through this one, so if I'll just go ahead, do this like this.

A

I get some some response like this one right so now I want to hit the same url through a clunk, so I can click here and what is different now it different is that right now, there's some extra headers that might get away uh put it here so like once again.

A

If I will do something like let's let me show you here: do duplicate.

A

If I'll go and take this one and put it here, get the output of the of the json and this header doesn't have anything to do with x, x, x, powered by mode pin, but this request clearly went through router through my cong controller.

A

Now, if I go to this dashboard now, I will be able to see all this like vital information that goes into the system. So I just hit once and now I see one request went from here so if I would say just do a couple times.

A

And I should be able to see all those requests here so now I'm uh forwarding and it will be updated in a few seconds. I hope so um now the um this is like simple. So what we went to to connect ui with configure service that configuration was propagated into my data plane that deployed in kubernetes. I didn't configure anything in kubernetes, but all of a sudden service that my clone getaway service, that's running inside kubernetes, start understanding. This.

A

You know the mock url, so we're heating kubernetes we're getting this smoke response and looks good.

A

Let's see multiple calls yeah. You see that that's uh that's my you know. Ddos spikes um next thing is that I want to deploy something useful by useful. I mean um something that I brought so in this case it's maybe not super useful for anyone else. However, you know be my guest, so I wrote the small application that will be throwing some of the random information uh into uh into the uh response of of the rest. I call it like as a quad service. Also. I quickly showed this quote service in my previous video.

A

Please go watch this if you haven't seen it yet um and for this I will just like deploy this application, and I will expect some some response. I will show you in a few seconds so now my applications, I'll just do key apply. I will deploy back to future version and back to future just deployed. So what I will do here, I'll just create the port forwarding it's not running yet, because application is starting in a few seconds already started.

A

Everything is in cloud and it's not super yes, so port forwarding is activated. So if I will go do something simple like http.

A

I'll get the response from the service with some.

A

Random some random uh back to future quotes. Now. uh Let me kill this.

A

And I can control d, okay I'll, stop this one as well now, so my data plane now deployed in kubernetes, my application is deployed. So how I can you know, hit this kubernetes service and there is a very handy way to to do this in kubernetes world, so the service discovery thing. So if I go to.

A

um All services in this particular case I'm interested in this one, so I will go ahead and just do.

A

So I'll do key describe service and not kubernetes, I'm interested in this one. So this service is available. uh For me it exposes port 8080 and uh so how I can get access this from within kubernetes. So essentially I will go through the service, so it's a service name namespace and after that there's some uh some suffix that we need to add and let's go to. uh Let's go to my connect and I'm go into my services.

A

um I call it back to future service name version, name 1.1. I will create this. I will go and go. This particular version create the implementation now.

A

And the way how it looks like this is how this url looks like. So, if you will call, I will put this in my snippet here somewhere.

A

Here so the way how it looks like this is server's name, it's a namespace and after that svc cluster local, that's uh default suffix. That kubernetes will expose this service to anyone inside this cluster. So, since my controller, quang gatway, is running inside this kubernetes cluster, I will be able to access this without anything specific.

A

So I don't need to configure anything here. So click next and route obey to f. uh What's the what's the route, I I'm doing this. Let me see back to future. Okay.

A

um Let's call it back to.

A

So um method also I wanted to get my path- would be.

A

And yeah: that's my implementation. Now I should be able to go and hit this one. As you can see here. It also goes through my quad ingress controller and it was immediate. You know I just clicked the save here and it's already propagated, so this communication between um the connect uh control, plane and data plane that you play my current super fast, um the the. If I will continue hitting this, you know what, let's do this one uh repeat on interval say.

A

Five, okay start, and after that it will start hitting my service. um I should be able to see the graph with all these requests immediately and it's going to be heating and heating and heating and heating and you'll see the number of the requests will be will be growing.

A

So what are we doing in the real life if we want to prevent this type of situation, when someone will be hitting our service and hammering the service with the requests and requests any ideas? My dear listeners in live chat.

A

What do you think what we should do here?

A

I hope we still. I hope I still have you here.

A

A

By the way, the the link that I mentioned in my previous comment- it's also here you can find the interested uh for those of you who are interested in some of the joining the clunk. The positions will be here.

A

um All right- yes, yes, yes, we have. um We have people who actually listening right, michael says rate limiting yeah, that's uh that was. uh That was my cue now. In order to do this, I adding this new plugin here and uh we'll go here and say rate limiting um and everything is right. It's it's a runtime! You know everything is is happening like like happening, because uh my application keep hammering this service. So, let's see what I can do like win situation where we have a denial of service attack. Oh my god.

A

What are we gonna? Do? Okay, now rate limiting we enable this one plugin, we would say: okay limit by service. We would say where's our day months path, um we're going to be using this local, I'm not going to be using redis like external service, and things like that. um How many requests per second will allow. Let's do this one like uh two requests per second, and after that I click create.

A

So what's gonna happen now my application should stop hammering and start getting.

A

Maybe uh it's still doing: let's do this one, let's do any plugin. Let's do uh one request per second.

A

Update config think now we start getting too many requests. So now my service is actually pushing back. My service is pushing back and, uh as you can see here in the console, we should be able to see um errors. So this is where we're sending back this uh too many to main requests without restarting application without restarting the you know, my small, my small.

A

Without restarting my my small application, what else we can do what else we can do so, obviously obvious choices? We can provide a um something like. um I know, some, some security thing. um Let me let me talk about this okay, so we talked about this. We've done this, so we did this request so request validator. So without going into much of the you know, security stuff in this particular in this particular stream. um I think we can add some some small small small feature.

A

That's called request. Validator, that's not would be security per se more like security by obscurity. So I would expect the request body will include something. So in this case, I'm going in in say um validate enable validator, so application json body schema. I do have a snippet for that. I do have a so.

A

Let's call it not the secret word, you know like or magic word. Let's do this one like magic word.

A

And now uh it will expect that the body will contain this element, magic word with type of string and it will be required. So if this request body will not include this still, hammering still hammering still doing this, I'm going in, say yep we're creating this one. And after that I submit this.

A

And what will happen here? All of a sudden, my application started getting bad requests now. So I log down this particular um this particular hacker that tries to hack into my system by providing the special thing that it needs to be doing. So let me stop doing this so in what it says, request body doesn't conform to schema.

A

Now the schema should be something like magic magic word.

A

What's the magic word, I'm teaching my kids to know about magic words, and if I will send this and now my application continue to work, so I can continue uh repeat after interval say now. I know I cannot send the one request per one request per second. I can start this and all good if I want to do more requests, for example, do repeat after interval say one and after that I will go down into half a second.

A

Still plug-in will help to you know, configure this rate request rates, um but still my body will include the correct magic word.

A

And uh the graph is pretty dope, it will be showing some of the some of the cool stuff two mountains um and there's a bunch of club plugins that available uh to to play around without changing application logic without changing the application um service and, as you can see, everything was like in a run time like everything, those plugins were applicable in runtime and all these things happened.

A

What you just saw um future to um to talk more about kubernetes and connect and the different ways how you can configure this, maybe even something with like a like devops style, with the continuous delivery, and I can also apply the same thing to two other services. In this particular case. I wanted to show how it can be done on my application. You see this very nice, the vitals, you see the traffic. You can see what is going on there. I see how many requests were failed.

A

So um that's pretty exciting, that's pretty exciting, um and we successfully did that today.

A

There's some other things uh today, there's some other things, uh other plugins that you can apply, for example, um something with header like rolled by headers, so you can even configure routing of your application based on the on the headers, um some some other things. So let me know in um oh I'm not showing this one. um Let me know in um in the comments. If you will be interested to learn more or work with what particular plugin you will be interested to learn more about. So that's. I was just quickly checked on my agenda.

A

I wanted to show you quickly uh what you can do and uh how you can learn this and how we can configure all this kind of stuff. As you can see, everything was just just online in front of your eyes. You can do this yourself um if you want to try this out. You can find um my uh this. This small application with back to future um quote generator.

A

uh I will post my notes uh from from this show somewhere. So you will find this if you're, watching this in recording, if you're watching this in recording you will find those notes in the description below um if you want to play play around. um As always, I wanted to say that uh you can. You can reach out to me in um in twitter. My twitter will be on screen right in this moment. uh Dm me send me some requests in in my in my twitter.

A

I would like to say thank everyone who joined me this friday afternoon. We will continue this show. Every week. Every friday we will be talking about all things called connectivity cloud kubernetes.

A

My name is victor gamov and, as always, have a nice day.