Keptn Quality Gates Installation using manifests (experimental)

Expose the Keptn API via a LoadBalancer by patching the service api-gateway-nginx:

  kubectl patch svc api-gateway-nginx -n keptn -p '{"spec": {"type": "LoadBalancer"}}'

Please allow your cloud-provider a couple of seconds (up to 5 minutes) to assign you an IP address. Watch the process using

  kubectl get svc api-gateway-nginx -n keptn -w

Query the IP:

  export KEPTN_ENDPOINT=http://$(kubectl get svc api-gateway-nginx -n keptn -ojsonpath='{.status.loadBalancer.ingress[0].ip}')

or the hostname (for EKS)

  export KEPTN_ENDPOINT=http://$(kubectl get svc api-gateway-nginx -n keptn -ojsonpath='{.status.loadBalancer.ingress[0].hostname}')

Please note: For this to work, you either need to be on the same Network as your Kubernetes VM (e.g., when using K3s, Minikube, …), or in some cases (e.g., GKE) you have to set up certain firewall rules (which is beyond this documentation).

Expose the Keptn API on the node by patching the service api-gateway-nginx:

  kubectl patch svc api-gateway-nginx -n keptn -p '{"spec": {"type": "NodePort"}}'

Get the Port of api-gateway-nginx:

  API_PORT=$(kubectl get svc api-gateway-nginx -n keptn -o jsonpath='{.spec.ports[?(@.name=="http")].nodePort}')

Get the internal and external ip of current kubernetes node

  EXTERNAL_NODE_IP=$(kubectl get nodes -o jsonpath='{ $.items[0].status.addresses[?(@.type=="ExternalIP")].address }')
  INTERNAL_NODE_IP=$(kubectl get nodes -o jsonpath='{ $.items[0].status.addresses[?(@.type=="InternalIP")].address }')

Define Keptn API Endpoint (either via the internal or external IP; try both if unsure):

  # either
  export KEPTN_ENDPOINT=http://${INTERNAL_NODE_IP}:${API_PORT}/
  # or
  export KEPTN_ENDPOINT=http://${EXTERNAL_NODE_IP}:${API_PORT}/

Please note: The description here is very generic. Please refer to the official docs about ingress controllers for more details.

Here is a quick list of Ingress controllers that should work:

• istio
• nginx-ingress
• traefik
• cloud-provider specific ingress controllers
  

Ensure you have an ingress-controller has an IP address (e.g., 5.6.7.8) or domain that you can reach.

Configure the api-gateway-nginx service to use ClusterIP (NodePort and LoadBalancer might work, but that’s not the goal here):

  kubectl patch svc api-gateway-nginx -n keptn -p '{"spec": {"type": "ClusterIP"}}'

Create an ingress object for api-gateway-nginx, which might look similar to this (replace api-keptn.5-6-7-8.nip.io with your desired hostname and INSERT_INGRESS_CLASS_HERE with the ingress class you are using):

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.class: INSERT_INGRESS_CLASS_HERE
  name: your-api-keptn-ingress
  namespace: keptn
spec:
  rules:
  - host: api-keptn.5-6-7-8.nip.io
    http:
      paths:
      - backend:
          serviceName: api-gateway-nginx
          servicePort: 80
  - host: api.keptn
    http:
      paths:
      - backend:
          serviceName: api-gateway-nginx
          servicePort: 80

Note: The section with host: api.keptn is crucial and needs to be included for the keptn CLI 0.6.2 and before!

To verify that creating an ingress object works, execute

  kubectl describe ingress -n keptn

The output should look like this:

Name:             your-api-keptn-ingress
Namespace:        keptn
Address:          5.6.7.8
Default backend:  default-http-backend:80 (10.16.0.8:8080)
TLS:
  keptn-api-tls terminates *.5-6-7-8.nip.io
Rules:
  Host                           Path  Backends
  ----                           ----  --------
  api-keptn.5-6-7-8.nip.io  
                                    api-gateway-nginx:80 (10.16.0.27:80)
  api.keptn                      
                                    api-gateway-nginx:80 (10.16.0.27:80)

Verify that you can access the API in your Browser, e.g., by going to http://api-keptn.5-6-7-8.nip.io/swagger-ui/ or if you enabled SSL/TLS even https://api-keptn.5-6-7-8.nip.io/swagger-ui/.

Finally, store the hostname you used in the manifest:

  export KEPTN_ENDPOINT=http://api-keptn.5-6-7-8.nip.io/

OpenShift 3.11 ships built-in routing functionality, which allows exposing the API using

  oc create route edge api --service=api-gateway-nginx --port=http --insecure-policy='None' -n keptn
  oc create route edge api.keptn --service=api-gateway-nginx --port=http --insecure-policy='None' -n keptn --hostname=api.keptn

Note: The second route with api.keptn as a hostname is necessary for Keptn 0.6.x CLI to work.

You can then get the hostname by inspecting the route using

  oc get route -n keptn

which should look like this:

  NAME        HOST/PORT                         PATH      SERVICES            PORT      TERMINATION   WILDCARD
  api         api-keptn.1.2.3.4.nip.io                    api-gateway-nginx   http      edge/None     None
  api.keptn   api.keptn                                   api-gateway-nginx   http      edge/None     None

Set the hostname using

  KEPTN_ENDPOINT=https://$(oc get route -n keptn api -ojsonpath='{.status.ingress[0].host}')  

Make a port-forward with:

  kubectl port-forward svc/api-gateway-nginx -n keptn 8080:80

  export KEPTN_ENDPOINT=http://localhost:8080