solo.io Gloo Portal - an Istio developer portal, 21 May 2020

Previous Meeting

⏯

youtube image

►

From YouTube: Istio Developer Portal -- Part 2

Description

With the Istio Developer Portal, teams can publish their APIs running in Istio into a customizable portal that enables authentication/authorization, usage plans/policy, self-service documentation, sign up and more. In this video, we take a look at how this works, what components get added to Istio to enable this, and what the main API resources are.

Read the technical blog post here https://www.solo.io/blog/technical-deep-dive-istio-developer-portal/

Learn More
Website https://www.solo.io/products/istio-developer-portal/
Request a Trial https://lp.solo.io/lp-request-a-trial-general

More Istio Videos
https://www.youtube.com/playlist?list=PLBOtlFtGznBiiGqBEMSk3aOkt97aoWaaG
https://www.youtube.com/playlist?list=PLBOtlFtGznBjMpsZYqqD5CO2pqTshrazB

Questions? Join the community
Https://slack.solo.io

Follow us on Twitter
https://twitter.com/soloio_inc

A

This video is part two of a two-part series showing the istio developer portal, which is a product we just announced at solo.I o. This is christian posta and I'm going to give you a tour through it. I encourage you to check out the first part of the demo where we specified some apis uh docs specifications and created an api product. We saw how that is, used to drive the configuration of istio, creating various um virtual service configurations and and so on.

A

We ended up creating a usage plan as well, which then locked down the api, and so what we're going to do in this demo is create a portal to be able to expose the api, so users can go and and sign up for the api themselves.

A

So if we click back here into apis, we see we have our pet store api product, which is an aggregation of various api, specs and various services that might fulfill those those specs. If we click on api docs, we see we have two different specifications defined here as open api spec docs. Those could also have been grpc schemas and in future videos. We'll take a look at the grpc support, so let's click on portals and let's create a new portal.

A

Let's call this pet store portal and we're going to run this locally.

A

Otherwise, you would, you would specify a domain dns, but right now we're running things port forwarded. If we come here. Let's add some color to our portal, and so this is going to be the branding and the look and feel of the portal that we expose.

A

Let's provide a logo.

A

And we can even load a favicon.

A

We can select the api products that we want to include in this portal.

A

I've pre-created a some users, that's me and we will click create portal and we will see that the portal has now been created. If we click on here, we can see various branding attributes that we can configure. If we want to change the colors, we can add pages.

A

If we come back to our apis, we see that our pet store is now published in the pet store portal. So let's take a look at this. This portal.

A

I've exposed it on localhost and here's the the generic that we we added some of the images and so forth, but this is the generic layout. If I click on view apis, we cannot see the apis. We've specified a usage plan earlier and to be able to make use of that. We need to log in let's log, in with a user.

A

So hopefully I remember my username and password and I did okay.

A

Changed it okay, so now we're logged in. You can see my my name up here and if we click on view, the apis we can see, we have access to pet store api, which is a which is the product that we exposed in the first video it's made up of three endpoints under the coverage is actually made up of different a couple different services and only certain endpoints that we expose.

A

If we click on pet store, we can see the different apis that we can we can call into now. If you remember, we came over here, we said curl this and we got a 401 on authorest.

A

What we would like to do, then, is to come over here and sign up for some api keys to be able to call this now I'll click on keys. I already have one I created one, but we could. We could create a you know, another one if we needed more identifiers to be able to track usage, and so, if we copy this key, we should be able to come over here and in this. In this curl statement here we should be able to api key.

A

Paste in the key and then call it, oh, I switched up the there, we go there we go, and now we see we have an http 200 and the call actually went through and so what's happening here. Is we signed up for an api key? We were able to access the api and under the covers, what istio or what the seo developer portal is doing is if we come here.

A

Portal we can see that dev portal actually deploys an external auth service and a rate limiting service and those are wired into the istio ingress gateway. So through the portal way will expose the documentation, and you know the ability to get keys access keys now under the covers.

A

The seo, ingress gateway is actually the the edge gateway and traffic is flowing through that it's being routed based on the virtual service that we defined here, um but then the iso ingress gate was actually being configured to to talk with an external auth service and a rate limiting service.

A

So we can see if we take a look at the envoy filters here, we can see the the different envoy.

A

Filters, animal we can see here that the the rate limiting and x off services have been have been configured so wrapping up the iso developer portal allows you to kind of get an understanding of what apis are available in your service mesh and allow you to share that with others in your organization.

A

Allow them to discover it through the the various portals that you can create and sign up for them in a self service manner. Now this is very similar to functionality that you might find in api gateway and in a way it is an api gateway. We've we've layered in this functionality on top of this use, ingress gateway.

A

Now, if you'd like a full-fledged a little bit more powerful api gateway, also built on envoy and also ties in nicely with istio, but can do more powerful things like transformations can do more more sophisticated security. Things like um web application, firewalling and data loss prevention.

A

um Things like being able to write your own custom external off plugins to be able to do things like hmac or whatever other security protocols. You might have then, take a look at something like glue, but if you're interested in just using vanilla istio, then the istio developer portal elevates your game to be able to deal with and understand apis and implement an api strategy on top of this, this istio service mesh.

A

So again, thanks for stopping by check out the seo developer portal check out solo dot io, we do a lot of tooling around envoy and service meshes. A lot of it is open source and stop by our youtube channel to see this video and and all the other videos that we have thanks.