how to integrate aks hosted web api with azure api management

Mohammad Ajmal Yazdani 391

Hello,

I would like to deploy both AKS and Azure API Management both service within the VNET and wanted to integrate the service hosted in AKS with the API management. Any code example article, how to do it? I don't want any king of ingress as well

KarishmaTiwari-MSFT 20,207 Reputation points Microsoft Employee

2022-10-11T01:58:45.38+00:00

I couldn't find any official documentation on the same but I found this article that you might find helpful :

https://blog.baeke.info/2019/06/10/azure-api-management-and-azure-kubernetes-service/
Yazdani, Mohammad Ajmal 6 Reputation points

2022-10-11T04:05:00.097+00:00

Thanks @ karishmatiwari-msft, I also went through same article which is OLD. Looking for a way to achieve this without Ingress controller.
Tanul 1,281 Reputation points

2022-10-25T13:50:41.863+00:00

The doc which @KarishmaTiwari-MSFT has shared, I think this comment might be helpful for you. Don't use ingress controller then you have to expose your service as load balancer. 1 IP address per service.

https://blog.baeke.info/2019/06/10/azure-api-management-and-azure-kubernetes-service/#:~:text=Instead%20of%20using,to%20the%20APIs.
Yazdani, Mohammad Ajmal 6 Reputation points

2022-10-25T14:58:48.277+00:00

Thanks @Tanul . I realize later that I need to expose each service as a load balancer which requires 1 IP address. Since I am using internal load balancer, I can't waste 1 private IP for each service as POD also requires 1 private IP as I am using azure CNI, so for me ingress is the ONLY option.

Microsoft has to thought in the direction where I can directly point to service with cluster IP through APIM :)

cheers!
Tanul 1,281 Reputation points

2022-10-25T15:10:12.617+00:00

@Yazdani, Mohammad Ajmal , Most welcome :)

I think there is nothing related to Microsoft here or no one can do anything. This is how networking world is designed.

Think kubernetes as a laptop and client has to reach to the services hosted inside it. Then, it is only possible via an IP address.. Otherwise, networking is not possible. Hence, we use routers and load balancers in front of them to safeguard ourselves from multiple IP addresses and cost as well.. This is how it works.
Yazdani, Mohammad Ajmal 6 Reputation points

2022-10-25T15:20:43.363+00:00

Yes, so true. I am making one assumption. :)

I see there is a direct integration between APIM and Azure Container Apps :) Thinking similar for AKS :) hahaha

1 answer

Sam Cogan 10,747 Reputation points MVP

2022-10-26T08:35:08.447+00:00

API Management does not integrate with AKS directly, so in this scenario you would need to have either an ingress controller, or to expose your service on a node port on a load balancer or similar. You can do this on a private IP so it is not exposed directly to the internet.
For API Management to then access this service you would to use the Premium SKU and join it to the vNet, this would then allow APIM to access the private service in AKS and expose it to the outside world.

An alternative would be to use Azure Application Gateway, if you don't need all the features of APIM. App Gateway can act as a Kubernetes Ingress Controller, see here and is also joined to the vNet.
Please sign in to rate this answer.

1 person found this answer helpful.
Yazdani, Mohammad Ajmal 6 Reputation points

2022-10-26T08:43:31.223+00:00

Thanks @Sam Cogan . Can you tell me the difference between both App gateway Ingress vs APIM please?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

how to integrate aks hosted web api with azure api management

1 answer

Your answer