Skip to content

Quick Start Guide: WSO2 API Manager on Kubernetes

This guide gets WSO2 API Manager running on Kubernetes in minutes using default settings — an embedded H2 database, default keystores, and a single node. It is intended for evaluation only.

For production deployments, see the deployment patterns.

Prerequisites

Ensure the following are installed:

Tool Install Guide
kubectl Install
helm (v3) Install
A running Kubernetes cluster Minikube or Rancher Desktop

Verify all tools are installed:

kubectl version --client
helm version

Check that your versions fall within the supported ranges:

Tool Supported Version
Helm 3.10.0 or later
Kubernetes 1.26.3 or later

Verify your cluster is up and all nodes are ready:

kubectl cluster-info
kubectl get nodes

All nodes should show a Ready status before proceeding.

Note

For local evaluation, Pattern 0 requires a minimum of 4 CPUs and 7.5 GB memory. If using Minikube, start it with: 

minikube start --cpus=4 --memory=7500 --kubernetes-version=v1.30.3

Step 1 — Add the WSO2 Helm Repository

helm repo add wso2 https://helm.wso2.com && helm repo update

Step 2 — Install the NGINX Ingress Controller

helm upgrade --install ingress-nginx ingress-nginx \
  --repo https://kubernetes.github.io/ingress-nginx \
  --namespace ingress-nginx --create-namespace

helm upgrade --install ingress-nginx ingress-nginx \
  --repo https://kubernetes.github.io/ingress-nginx \
  --namespace ingress-nginx --create-namespace \
  --set controller.service.externalTrafficPolicy=Local

Note

externalTrafficPolicy=Local is required on managed Kubernetes services. Without it, the cloud load balancer health probes fail and traffic never reaches the ingress controller.

Wait until the NGINX pod is running:

kubectl get pods -n ingress-nginx

Step 3 — Deploy WSO2 API Manager

helm install apim wso2/wso2am-all-in-one \
  --version 4.6.0-1 \
  --namespace wso2 --create-namespace \
  -f https://raw.githubusercontent.com/wso2/helm-apim/4.6.x/docs/am-pattern-0-all-in-one/default_values.yaml

Wait for the pod to be ready:

kubectl get pods -n wso2 -w

The pod should show 1/1 Running before proceeding.

Step 4 — Configure DNS

Run in a separate terminal and keep it running:

minikube tunnel

Then add to your /etc/hosts:

127.0.0.1 am.wso2.com gw.wso2.com websocket.wso2.com websub.wso2.com

Get the external IP:

kubectl get ing -n wso2

Add to your /etc/hosts, replacing <EXTERNAL-IP>:

<EXTERNAL-IP> am.wso2.com gw.wso2.com websocket.wso2.com websub.wso2.com

Get the external IP assigned to the ingress:

kubectl get ing -n wso2

For quick testing, add the ADDRESS value to your /etc/hosts:

<EXTERNAL-IP> am.wso2.com gw.wso2.com websocket.wso2.com websub.wso2.com

For a production setup, create a DNS record in your DNS provider (e.g. Route 53, Azure DNS, Cloud DNS) mapping the hostnames to the external IP instead of using /etc/hosts.

Step 5 — Access the Portals

Portal URL
Publisher https://am.wso2.com/publisher
Developer Portal https://am.wso2.com/devportal
Carbon Console https://am.wso2.com/carbon

Default credentials: admin / admin

Chrome may block access

Chrome enforces HSTS preloading for *.wso2.com domains, which removes the option to bypass the self-signed certificate warning entirely. Use Firefox or Safari instead, and click through the certificate warning when prompted.

Next Steps

This deployment uses an embedded H2 database and self-signed certificates — not suitable for production. Choose a deployment pattern based on your requirements: