Apigee Envoy Quickstart Toolkit

The Apigee Envoy Quickstart Toolkit sets up the Envoy proxies with Apigee adapters.

Quickstart

Apigee protected ASM Envoy Proxies within Kubernetes Engine.

Apigee protected Envoy Proxies in docker containers.

Installation - X/Hybrid platform

1. Create a Google Cloud Project and connect it to an existing Billing account.

2. (For the Kubernetes environment demo) Setup a GKE cluster. Have the cluster enabled with Anthos Service Mesh. Checkout this gke poc toolkit to standup a GKE cluster via automation with ASM enabled.

3. This toolkit is validated in a Linux environment. Needed libraries : wget, jq.

4. If your GKE cluster is version 1.25+ follow this link for enabling required changes for kubectl authentication

5. The GCP Apigee project should be enabled for service-account key generation.

6. Set your GCP Project ID, Apigee platform environment variables.

   export PROJECT_ID=<your-project-id>
   export CLUSTER_NAME=<gke-cluster-name>
   export CLUSTER_LOCATION=<gke-cluster-region>
   export APIGEE_PROJECT_ID=<apigee-project-id>
   export APIGEE_X_ORG=<apigee-org>
   export APIGEE_X_ENV=<apigee-env>
   export APIGEE_X_HOSTNAME=<env-group-virtualhost-prefixed with http/https>
   export APIGEE_REMOTE_SRVC_CLI_VERSION=<version for Apigee Remote Service cli for Envoy>
   export APIGEE_REMOTE_SRVC_ENVOY_VERSION=<version for Apigee Remote Service for Envoy>

   Latest cli version can be found here
   Latest apigee-envoy version can be found here

7. Set up local authentication to your project.

   gcloud config set project $PROJECT_ID
   gcloud auth application-default login --no-launch-browser
   
   export TOKEN=$(gcloud auth print-access-token);echo $TOKEN

8. Download the Apigee Envoy PoC Toolkit binary.

   mkdir apigee-envoy-toolkit && cd "$_"
   export ENVOY_HOME=$(pwd)
   wget -O apigee-envoy-quickstart-main.zip https://github.com/ganadurai/apigee-envoy-quickstart/archive/refs/heads/main.zip
   unzip apigee-envoy-quickstart-main.zip

9. Run to install the quickstart toolkit.

   cd ${ENVOY_HOME}/apigee-envoy-quickstart-main
   ./aekitctl.sh --type <type> --action install

   type (valid values):
   istio-apigee-envoy
   standalone-apigee-envoy

10. On successful run, it displays the commands (kubeclt run, curl) to validate the traffic intiated to the Envoy endpoints being protected by Apigee Adapter service.

Cleanup

1. Run to cleanup the PoC setup from the GKE and Apigee platform

   cd ${ENVOY_HOME}/apigee-envoy-quickstart-main
   ./aekitctl.sh --type <type> --action delete

   type (valid values):
   istio-apigee-envoy
   standalone-apigee-envoy

Installation - OPDK / Edge platform

Apigee protected Envoy Proxies in docker containers for OPDK platform.

1. Set environment variables for OPDK.

   export MGMT_HOST=<Mgmt host of the opdk platform, including the http/https and port number>
   export APIGEE_USER=<Mgmt host credential, username>
   export APIGEE_PASS=<Mgmt host credential, password>
   export APIGEE_ORG=<apigee-org>
   export APIGEE_ENV=<apigee-env>
   export APIGEE_X_HOSTNAME=<env-group-virtualhost-prefixed with http/https>
   export APIGEE_REMOTE_SRVC_CLI_VERSION=<version for Apigee Remote Service cli for Envoy>
   export APIGEE_REMOTE_SRVC_ENVOY_VERSION=<version for Apigee Remote Service for Envoy>

2. Set environment variables for EDGE.

   export MGMT_HOST=<Mgmt host of the opdk platform, including the http/https and port number>
   export APIGEE_USER=<Mgmt host credential, username>
   export APIGEE_PASS=<Mgmt host credential, password>
   export APIGEE_ORG=<apigee-org>
   export APIGEE_ENV=<apigee-env>
   export APIGEE_REMOTE_SRVC_CLI_VERSION=<version for Apigee Remote Service cli for Envoy>
   export APIGEE_REMOTE_SRVC_ENVOY_VERSION=<version for Apigee Remote Service for Envoy>

3. Download the Apigee Envoy PoC Toolkit binary.

   mkdir apigee-envoy-toolkit && cd "$_"
   export ENVOY_HOME=$(pwd)
   wget -O apigee-envoy-quickstart-main.zip https://github.com/ganadurai/apigee-envoy-quickstart/archive/refs/heads/main.zip
   unzip apigee-envoy-quickstart-main.zip

4. Run to install the quickstart toolkit for opdk.

   cd ${ENVOY_HOME}/apigee-envoy-quickstart-main
   ./aekitctl.sh --type standalone-apigee-envoy --action install --platform opdk

5. Run to install the quickstart toolkit for edge.

   cd ${ENVOY_HOME}/apigee-envoy-quickstart-main
   ./aekitctl.sh --type standalone-apigee-envoy --action install --platform edge

6. On successful run, it displays the commands (kubeclt run, curl) to validate the traffic intiated to the Envoy endpoints being protected by Apigee Adapter service.

Cleanup

1. Run to cleanup the PoC setup from OPDK Apigee platform

   cd ${ENVOY_HOME}/apigee-envoy-quickstart-main
   ./aekitctl.sh --type standalone-apigee-envoy --action delete --platform opdk

2. Run to cleanup the PoC setup from Edge Apigee platform

   cd ${ENVOY_HOME}/apigee-envoy-quickstart-main
   ./aekitctl.sh --type standalone-apigee-envoy --action delete --platform edge