Kong Kong's Kubernetes Ingress Controller, 30 Jul 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Kubernetes Ingress gRPC Example with a Dune Quote Service

Description

In this video, @ViktorGamov, a principal developer advocate with Kong, explains how to deploy and configure a gRPC service in Kubernetes and how to configure external access to this service using Kong Ingress Controller. Try Kong Ingress Controller: https://bit.ly/3guN9D6

Follow along in the blog post: https://bit.ly/3lc36SD

▬▬▬▬▬▬ TIMECODES ▬▬▬▬▬▬

0:00 - Cold Opening
0:40 - Intro
01:11 - gRPC Powered Quote Service
01:30 - Protobuf Definition of Service
03:22 - Enable gRPC Protocol in Kubernetes Service and Ingress
04:15 - Quick Note on cert-manager and Enabling TLS in Kubernetes Ingress
05:42 - Quick Note in DNS
07:15 - Call gRPC Service Using Insomnia
08:35 - It's a Wrap!

▬▬▬▬▬▬ LINKS ▬▬▬▬▬▬

❏ https://github.com/gAmUssA/quotes-service
❏ https://grpc.io
❏ https://support.insomnia.rest/article/188-grpc
❏ https://docs.konghq.com/kubernetes-ingress-controller/1.3.x/guides/cert-manager/
❏ https://docs.konghq.com/kubernetes-ingress-controller/1.3.x/references/annotations/
❏ https://cert-manager.io/docs/installation/kubernetes/
❏ https://docs.konghq.com/kubernetes-ingress-controller/
❏ https://kubernetes.io/docs/concepts/services-networking/ingress/
❏ https://insomnia.rest
❏ https://bit.ly/k4k8s

▬▬▬▬▬▬ CONTACTS ▬▬▬▬▬▬

❏ 🐦 https://gamov.dev/twitter
❏ 📧 https://gamov.dev/telegram
❏ 🔴 https://gamov.dev/youtube

▬▬▬▬▬▬ RELATED BLOG POSTS ▬▬▬▬▬▬
❏ Using Kong Kubernetes Ingress Controller as an API Gateway: https://bit.ly/3um2JGa
❏ Configuring a Kubernetes Application on Kong Konnect: https://bit.ly/3yiVxx2
❏ Implementing Traffic Policies in Kubernetes: https://bit.ly/3dBwJIL
❏ Moving an Application from VM to Kubernetes: https://bit.ly/3cJhNYD

#gRPC #Kubernetes #K8s #gRPCS #KubernetesIngress #KongGateway #OSS #OpenSource #API #APIgateway

A

It is not a surprise that api come in the different shapes and forms. Grpc is a remote procedure, call framework initially developed by google around 2015, and it has seen grown adoption in recent years, based on http 2 protocol for transport and using protobuf as interface definition. Language jrpc has several capabilities that traditional rest apis struggle with such as bi-directional streaming and efficient binary and coding. I'm victor gammon with kong and in this video I'll, explain how to deploy jrpc service to kubernetes and provide external access to the service using quank ingress controller.

A

Let's get to it.

A

Calling support tcp stream since version 1.0 and can proxy any protocol built on top of the tcp or tls, but we felt that native support for jrpc would allow robbing user base to leverage clonk to manage their rest. Graphql and grpc services uniformly sounds nice and to hype you up a little bit about upcoming, live action movie june based on frank herbert's book june. Arguably one of the most outstanding science fiction books ever written, write down in the comments.

A

If you agree with me, I created service or version of my service that delivers some of the dune quotes via jrpc service. Let's take a look at the protobuf definition of this service. As you can see here, my protobuf definition contains only one service called service and it has a two methods. One method is deliver, just a simple quote on any request: it doesn't require any input parameters.

A

So that's why we're gonna be using protobuf empty type and as a return, it will have a quote message that will include message field and another method that I have here is the gear quote stream method. That also doesn't require any parameters to provide. So in this case I also use an empty type, but in this case I'm returning stream of this results, I'm using java to generate server-side implementation of the service.

A

However, you can take this protofile and implement this service in any language that you're using protobuf comes with variety of tools in a different language, including some code, generators that support your language. Next, let's take a look on my deployment. It is nothing very specific here about quank or about jrpc here, as you can see, it's same image that I'm using but a new version, our active code service that will be using version 3..

A

One of the services that my application will be running is the jrpc server that will be running on the port 9001, and this port will be available to service to expose this inside my kubernetes cluster. Some of the parameters that I also want to provide here is that my grpc service has security enabled and I do provide some certificates in the server private key in this example, I'm using self-signed certificate, but in your production use case, you need to use certificate that would be signed by a certification authority that you trust.

A

I created the secrets, and after that I mount those secrets as files in my deployment. Next thing is that I have defined service. That shows that I will be using port 9001 as my target port pay attention to line number six. Where I have this annotation calling hq dot com, slash protocols, it will respond to grpcs protocol because my service has a security enabled and I need to notify my clone gateway, that my service understands grpcs protocol and, last but not least, I need to create ingress.

A

You see some of the familiar things like ingress class that corresponds to kong ingress controller. Now I also have here annotations says: huang hq dot com, slash protocols. It is ingress configuration that allows to home gateway to understand what kind of incoming clients were expecting. So, in this case, we're creating this ingress for grpcs, because we're expecting jrpc clients to connect to the service we're using jrpc or grpc as protocols. My cluster is configured to use cert manager, I will be using certificates that will be issued by a let's encrypt.

A

Let me show you how you can configure quantum grass controller in our documentation. There is a getting starting guide, find the link in description that allows you to configure your quan congress controller and your qualm gateway to use automatically issued certificates for tls. There is instruction how you can install this. I already done this. I installed the ingress controller. We've seen this multiple times in these videos. Next thing is that you need to follow documentation of sort manager. Essentially, is one command that you need to execute to create the sort manager.

A

After done this, you will be able to request this certificate from certification authority and, after that, the application will be able to use port 443 tls board, to communicate with external clients, and that's why I have here this annotation kubernetes, dot, io tls acme, to use automatic certificate management extension enabled for my cluster and I'm using let's encrypt server production version to receive the certificate. So next thing is that, in my configuration of my ingress, I need to specify that I'm using tls for my ingress and I issue certificate for this domain name.

A

This domain name is corresponds to external ip address that my clone ingress has. So let me remind you how it looks like.

A

This is my external ip address that was provided by google cloud platform and I registered this ip address with my domain name.

A

So my domain name, clone game of dev, will correspond to this ip address, and next thing is that it's just the same configuration rules for the particular path. So my default path will correspond. My doom code service once again, inbound traffic will listen, jrpc or jrpcs protocols and between my clonk gateway and my service. They will be using also grpcs protocol because my service is deployed using grpcs.

A

Let's deploy this.

A

So I'm starting deployment here, let's do describe deployment service, as you can see here. A couple things are missing, so I do have a two secrets that I need to provide- and I can do this with this small script that you can also find here. It generates self-signed certificate and after that applies this certificate and key. As my.

A

As my secret now, I need to do allowed restart deployment, so it will restart my deployment and bring my service up and, as I see my service is up and running right now, so I can use insomnia to hit the service. So first thing that I need to do is to pick up my protofile and I already have this configured, but you can add this protofile here and I will see that two methods will be available, get quote and get quote stream. So first thing that I will be hitting.

A

I get quote also please notice here that I'm using grpcs protocol. This is my kubernetes cluster and I'm using port 443 for tls and now I'm getting some quotes for you.

A

And, as you can see, one of the characters, dr yui was known as a trader, some of the information about his involvement with uh other characters. It works. So now, let's, let's try if streaming works, so I'm switching to get quote server stream, and I click start and now my response actually contains 10 responses.

A

All these things that come in from the server go in here and my implementation actually has implementation of some sort of interceptor that will log all the calls when someone is calling this call, so my quote get what was called multiple times and my get. What stream also was called multiple times, and that was it for today. In this video I showed you how to deploy jrpc service to kubernetes and expose it to outside of the cluster using cloning grass controllers.

A

Don't forget to subscribe to this youtube channel, hit this like button and the comment below what are your use cases you're, trying to implement in kubernetes and how the clone gateway and how hong kong ingress control can help you, and with this my name is victor gamoph and, as always, have a nice.

A

A