Deploying Choreo Connect on Kubernetes With WSO2 API Manager as a Control Plane¶
Let's deploy an API on Choreo Connect, which running on Kubernetes, with WSO2 API Manager as the Control Plane.
Before you begin
Step 1 - Setup Choreo Connect in Kubernetes¶
Download and extract the Choreo Connect distribution .zip
The latest Choreo Connect distribution can be downloaded from https://wso2.com/choreo/choreo-connect/. Extract the Choreo Connect distribution .zip file. The extracted folder will be called as
Add the Kubernetes configurations for Choreo Connect and API Manager using the kubectl tool.
Click here if you are using an ARM64 based machine (e.g., Apple M1)
If you are trying out in ARM64 based machine (e.g., Apple M1) update the Docker image names with the following.
Existing (Default) image name Image name for tryout in ARM64 (e.g.: Apple M1)
Note: Note that the above Ubuntu based (
*-ubuntu) images are for tryout purpose only and are not recommended for a production deployment.
kubectl apply -f <CHOREO-CONNECT_HOME>/k8s-artifacts/choreo-connect-with-apim/apim
Apply the Kubernetes configurations for Choreo Connect after starting the API Manager instance.
kubectl apply -f <CHOREO-CONNECT_HOME>/k8s-artifacts/choreo-connect-with-apim/choreo-connect
Add the host entry to the
Add the following entry to
/etc/hostsfile in order to access the Choreo Connect Router, API Manager publisher and Developer Portal.
<ingress_address> gw.wso2.com apim.wso2.com
Step 2 - Update the JWKS Endpoint¶
The JWKS endpoint of the API Manager has the external facing hostname by default, and it is not always routable via Choreo Connect Enforcer. As a result, you can alter the JWKS endpoint in the API Manager to use the API Manager's internal service name in Kubernetes.
- Log into Admin portal -
- Navigate to
Key Managerssection and select the
Resident Key Manager.
- Change the JWKS URL in the
Step 3 - Deploy Sample API from API Manager¶
- Publisher Portal:
- Developer Portal:
Follow the instructions in create and publish an API from API Manager using the above URLs to access each of the portals.Top