Blog
  • AI Gateway
  • AI Security
  • AIOps
  • API Security
  • API Gateway
|
    • API Management
    • API Development
    • API Design
    • Automation
    • Service Mesh
    • Insomnia
    • View All Blogs
  1. Home
  2. Blog
  3. Engineering
  4. Kong API Gateway on Kubernetes with Pulumi
Engineering
March 15, 2022
4 min read

Kong API Gateway on Kubernetes with Pulumi

Kat Morgan
Topics
KubernetesAPI GatewayKong Gateway
Share on Social

More on this topic

Videos

Centralized Decentralization: Migration from Azure to Kong

Videos

Kong Builders Nov 16- Introducing Kong Gateway Operator

See Kong in action

Accelerate deployments, reduce vulnerabilities, and gain real-time visibility. 

Get a Demo

The Kong Laboratory – Kong API Gateway

The quest for resilience and agility has driven us into the modern age of microservices. Bringing services to market on a microservice architecture demands the utilization of sprawling technology offerings and tooling. While daunting at first glance, we can break down the process into 3 major categories:

  • Infrastructure Orchestration
  • Application Deployment
  • Service Publishing

In this hands-on series, we will use:

  • Kubernetes-in-Docker (Kind) as our infrastructure platform.
  • Pulumi to orchestrate our supporting infrastructure and deploy our applications.
  • And finally, Kong API Gateway for publishing the services that we have deployed.

Key Concepts

Kong API Gateway is an API Gateway and Ingress Controller. At its core, Kong is a reverse proxy that allows an organization to offer APIs as a product to internal and external clients via a centralized ingress point. An API Gateway truly begins to shine when leveraged to consolidate capabilities such as authentication, RBAC, session handling, rate limiting, request & response transformation, redirection, load balancing, traffic monitoring, and logging. These advanced routing features offload enforcement, maintenance, and visibility from the application teams, improving their agility and consolidating this functional ownership into a central location for improved global consistency and visibility.

Pulumi is an Infrastructure as Code (IaC) or Infrastructure as Software (IaS) cloud engineering platform. Pulumi supports IaC/IaS patterns using popular programming languages including Python, JavaScript, TypeScript, Golang, and .NET/C#. At it's heart, the Pulumi ecosystem is a cloud engineering platform and SDK offering that brings together developer, operations, and security teams through a unified software engineering process to accelerate innovation with more confidence via a full suite of OpenGitOps compliant tools.

Host Setup

This article is designed for you to follow along with your MacOS or Linux laptop. Before starting, please check that you have installed all dependencies.

Okay, now that you have your dependencies, let's grab the code and get your system ready to build the lab platform.

  1. Write Hosts File Entries to resolve your lab domain names locally
  1. Create docker volumes for persistent local container image caching
  1. Clone TheKongLaboratory git repo

Pulumi Infrastructure as Code

Great! Reviewing our checklist, we now have:

  • ✓ Installed all dependencies.
  • ✓ Configured /etc/hosts to resolve our domain names to our local IP.
  • ✓ Created local cache volumes for kind node images.
  • ✓ Cloned the demo repo codebase.

Your system is ready to run the lab and we have the code! Next, before we can deploy the Kong API Gateway we need to initialize the Pulumi codebase and configure a Stack.

  1. Configure Pulumi local state provider
  1. Initialize & Select Pulumi Stack
  1. Set Pulumi Stack Configuration Variables

Deploy Kong API Gateway

Reviewing our checklist again, we now have:

  • ✓ Installed all dependencies.
  • ✓ Configured /etc/hosts to resolve our domain names to our local IP.
  • ✓ Created local cache volumes for kind node images.
  • ✓ Cloned the demo repo codebase.
  • ✓ Initialized & Configured your Pulumi Stack

Now, it is time to start your Kind cluster and deploy Kong to it!

  1. Deploy Kong Gateway Stack
  1. Go ahead and open up the Kong Manager UI !!
    >> https://manager.kong.kind.home.arpa/

Deploy a Sample App

Let's go ahead and test our new Kong API Gateway by deploying Podinfo as a sample application to experiment with.

  1. Deploy a simple Podinfo Sample application.
  1. Now go check out your Podinfo app at:
    >> https://podinfo.apps.kind.home.arpa/

Conclusion

Congratulations! In roughly 1000 lines of TypeScript code, we have deployed a working Kong API Gateway and all supporting services with Pulumi! For transparency, I want to briefly list the scope of what you just deployed.

  • Kubernetes:
    • ✓ Kubernetes-in-Docker
  • Namespaces:
    • ✓ The namespace for Kong
    • ✓ The namespace for Cert Manager
  • Certificates:
    • ✓ Chain of Trust for a Cert Manager Self Signed Issuer
    • ✓ Default certificate for Kong API Gateway services & proxy
    • ✓ Kong controlplane <> dataplane mTLS certificate
  • Secrets:
    • ✓ Postgres database credentials
    • ✓ Kong Manager GUI session configuration
    • ✓ Kong API Gateway admin credentials
    • ✓ Kong Enterprise License
  • Helm Charts:
    • ✓ Cert Manager
    • ✓ Bitnami Postgresql
    • ✓ Kong Controlplane
    • ✓ Kong Ingress Controller
    • ✓ Kong Dataplane

Now that you have Kong installed and ready to use, this will be the foundation for future posts in the DevMyOps series and is also a great way to get started with Kong for evaluation and local development purposes.

From here you can continue with configuring Kong Manager and Kong plugins, or you can start using the Kong Ingress Controller to publish services on your kind cluster via Kong.

Appendix

Dependencies

DependencyInstallation Docs

kubectl

Linux / Mac

Docker

Linux / Mac

Kind

Linux / Mac

Helm

Linux / Mac

Pulumi

Linux / Mac

npm

Linux / Mac

git client

Linux / Mac

curl client

Linux / Mac

Cleanup

When you are finished with your local deployment you can clean up all lab artifacts in this order:

  1. Destroy Kong Pulumi Stack
  2. Delete Kind Cluster
  3. Remove Docker Volumes
  4. Remove TheKongLaboratory Git Repo
  5. Manually cleanup /etc/hosts entries
  1. Unlock your local secret store.
  1. Destroy Kong Pulumi Stack
  1. Delete Kind Cluster
  1. Remove Docker Volumes
  1. Remove TheKongLaboratory Git Repo
  1. Open the /etc/hosts file and remove the following entries:
Topics
KubernetesAPI GatewayKong Gateway
Share on Social
Kat Morgan

Recommended posts

How to Manage Your Kubernetes Services with an API Gateway

Kong Logo
EngineeringApril 9, 2024

Kubernetes is an open-source container orchestration system for automating deployment, scaling, and management of containerized applications. It groups containers into logical units for easy management and discovery.  API gateways sit between client

Peter Barnard

Sending Traffic Across Namespaces with Gateway API

Kong Logo
EngineeringMarch 8, 2024

In this blog post, we’ll demonstrate how easy it is to use Gateway API HTTPRoutes to route traffic to workloads deployed in different namespaces in a single Kubernetes cluster — a process that’s easier than ever. Previously, we only had Ingress API

Grzegorz Burzyński

Gateway API vs Ingress: The Future of Kubernetes Networking

Kong Logo
EngineeringJanuary 31, 2024

As Kubernetes has become the de facto orchestration platform for deploying cloud native applications , networking and traffic management have emerged as pivotal challenges when managing access to services and infrastructure. The core Kubernetes Ing

Peter Barnard

Kong Konnect EKS Marketplace Add-on for Kong Gateway Data Planes

Kong Logo
EngineeringDecember 7, 2023

Today, we’re excited to release the Kong Konnect EKS Marketplace add-on as a means to deploy your Kong Gateway dataplanes in AWS. The add-ons are a step forward in providing fully managed Kubernetes clusters. It is here to simplify the post-procurem

Danny Freese

Kubernetes Gateway API: An Engineering Perspective

Kong Logo
EngineeringNovember 8, 2023

The Kubernetes Gateway API represents a massive collaborative effort and key advancement in Kubernetes networking. Developed by multiple vendors and community members, the Gateway API provides a robust and extensible new standard for managing ingres

Mattia Lavacca

Gateway API: From Early Years to GA

Kong Logo
EngineeringNovember 7, 2023

In the Kubernetes world, the Ingress API has been the longstanding staple for getting access to your Services from outside your cluster network. Ingress has served us well over the years and can be found present in several dozen different implementa

Shane Utt

Governing GraphQL APIs with Kong Gateway

Kong Logo
EngineeringOctober 20, 2023

Modern software design relies heavily on distributed systems architecture, requiring all APIs to be robust and secure. GraphQL is no exception and is commonly served over HTTP, subjecting it to the same management concerns as any REST-based API. In

Rick Spurgeon

Ready to see Kong in action?

Get a personalized walkthrough of Kong's platform tailored to your architecture, use cases, and scale requirements.

Get a Demo
Powering the API world

Increase developer productivity, security, and performance at scale with the unified platform for API management, AI gateways, service mesh, and ingress controller.

Sign up for Kong newsletter

    • Platform
    • Kong Konnect
    • Kong Gateway
    • Kong AI Gateway
    • Kong Insomnia
    • Developer Portal
    • Gateway Manager
    • Cloud Gateway
    • Get a Demo
    • Explore More
    • Open Banking API Solutions
    • API Governance Solutions
    • Istio API Gateway Integration
    • Kubernetes API Management
    • API Gateway: Build vs Buy
    • Kong vs Postman
    • Kong vs MuleSoft
    • Kong vs Apigee
    • Documentation
    • Kong Konnect Docs
    • Kong Gateway Docs
    • Kong Mesh Docs
    • Kong AI Gateway
    • Kong Insomnia Docs
    • Kong Plugin Hub
    • Open Source
    • Kong Gateway
    • Kuma
    • Insomnia
    • Kong Community
    • Company
    • About Kong
    • Customers
    • Careers
    • Press
    • Events
    • Contact
    • Pricing
  • Terms
  • Privacy
  • Trust and Compliance
  • © Kong Inc. 2025