Powerful access capabilities provided by API Gateway for containerized Kubernetes application clusters

Create a K8s cluster and install an Ingress

When you create an ACK managed or Serverless cluster, select ALB Ingress for Ingress in the Component Configurations step. For more information, see Create an ACK managed cluster and Create an ACK Serverless cluster.

Create a multi-container service in a cluster

Perform the following operations to create a service that consists of two containers in the K8s cluster. Each container is generated by using an Nginx image. The container port is 80. The service port of the ingress controller is 80.

1. Log on to the ACK console. In the left-side navigation pane, click Clusters.

2. On the Clusters page, find the cluster that you want to manage and click its name. In the left-side pane, choose Workloads > Deployments.

3. On the Deployments page, click Create from YAML. Enter the following Resource Orchestration Service text and click Create.

   apiVersion: apps/v1 
   kind: Deployment
   metadata:
     name: nginx-demo
     labels:
       app: nginx
   spec:
     replicas: 2
     selector:
       matchLabels:
         app: nginx
     template:
       metadata:
         labels:
           app: nginx
       spec:
         containers:
         - name: nginx
           image: anolis-registry.cn-zhangjiakou.cr.aliyuncs.com/openanolis/nginx:1.14.1-8.6
           ports:
           - containerPort: 80
   
   ---
   apiVersion: v1
   kind: Service
   metadata:
     name: nginx-service
   spec:
     ports:
     - port: 80
       protocol: TCP
       targetPort: 80
     selector:
       app: nginx
     sessionAffinity: None
     type: NodePort 

   Note

   Description:

   • Two containers are created based on an Nginx image, and the container service port is 80. A service named nginx-service is created, and the service port is 80, which maps to the 80 port of the container service.

   • An Nginx service is running in each of the containers. The two containers form a stateless application and support a service named nginx-service. You can go to the details page of the stateless application and view its running status. Currently, API Gateway cannot access this service. You need to create an ingress on the ingress controller that routes requests to this service for end-to-end communication.

Create an ingress on the ingress controller that routes requests to a service

Deploy a service for the stateless application and create an ingress for this service on the ingress controller. This way, when API Gateway sends requests to K8s services, the ingress controller forwards the requests to appropriate K8s services based on configured ingress information. Follow these steps to create an ingress:

1. Log on to the ACK console. In the left-side navigation pane, click Clusters.

2. On the Clusters page, find the cluster that you want to manage and click its name. In the left-side pane, choose Network > Ingresses.

3. Click Create Ingress. In the Rules section, configure the domain name and path mapping and click OK.

   

Create an access authorization for the VPC of the internal CLB instance

If you want API Gateway to access the internal CLB instance of the ingress controller, you must configure a VPC access authorization in the API Gateway console.

1. Log on to the ACK console. In the left-side navigation pane, click Clusters.

2. On the Clusters page, find the cluster that you want to manage and click its name. In the left-side pane, choose Network > Ingresses.

3. On the Ingresses page, copy the endpoint.

   

4. Log on to the ALB console.

5. In the left-side navigation pane, click Overview. In the Resources section, paste the copied endpoint and click the retrieved ALB instance.

   

6. On the Instance Details tab, copy the VPC ID and the domain name of the ALB instance.

   

7. Log on to the API Gateway console. In the top navigation bar, select a region. In the left-side navigation pane, choose Manage APIs > VPCs.

8. On the VPC Access Authorizations page, click Create Authorization in the upper-right corner.

9. In the Create VPC Access dialog box, specify the VPC Access Name, VPC Id, Instance ID or IP Address, and Port Number parameters. Then, click Confirm.

   

Create an API

1. Log on to the API Gateway console. In the left-side navigation pane, choose Manage APIs > API Groups.

2. On the API Groups page, find the created group and click Manage APIs in the Actions column.

3. On the APIs page, click Create API in the upper-right corner.

4. In the Basic Information step of the Create API wizard, configure the following parameters and click Next.

   

5. In the Define API Request step, configure the following parameters and click Next.

   

6. In the Define Backend Service step, configure the following parameters and click Next.

   

   Important

   When you create an API, you can add a constant parameter whose name is host, location is header, and value is the domain name of the ingress configured for the service in the ingress controller.

7. In the Define Response step, configure the parameters on the page based on your business requirements and then click Create.

8. In the message that appears, click Publish.

9. In the Publish API dialog box that appears, set Environment to Release, enter remarks in the Remarks section, and then click Publish.

Debug the API

After an API is created and published, you can test whether requests can be sent to the created K8s cluster in the API Gateway console.

1. Log on to the API Gateway console. In the left-side navigation pane, choose Call APIs > Debug.

2. On the Debug API page, select the nginx-test API that you created and then click Send Request. The following information indicates that the configuration is successful.