Cloud Pak for Integration

 View Only
  • 1.  APIC on cp4i - How to change external facing endpoints of API gateway and Dev portal

    IBM Champion
    Posted Mon February 22, 2021 10:50 AM
    Hi All,

    In CP4I v2020.3.1,  the option to provide FQDN endpoints for all 4 sub systems and  custom certificate TLS secrets are removed.

    The endpoints for Gateway and Portal assigned during deployment are as follows:

    APIC Dev Portal:
    https://<Your_apic_instance_name>-ptl-portal-web-integration.apps.<your_ocp_cluster_name>.<your_domain>
    APIC Gateway:
    https://<Your_apic_instance_name>-gw-gateway-integration.apps.<your_ocp_cluster_name>.<your_domain>

    Endpoints in above format are acceptable for Management endpoints. But not for external consumer facing endpoints of Dev Portal and Gateway.

    How do we change these two endpoints? Gateway and portal Operator files are generated after APIC capability deployment. I can modify the endpoints in operator files. But, i don't think that is going to update all the references in registered APIC sub systems.

    Also, how do we setup custom certs or renew for these two subsystems matching the endpoints?
    CP4I KC provides steps to renew OCP cluster and Platform Navigator. But, API Connect uses cert manager and does not use same certs as Navigator.

    Any suggestions/thoughts?

    Thanks


    ------------------------------
    Purush Das
    ------------------------------


  • 2.  RE: APIC on cp4i - How to change external facing endpoints of API gateway and Dev portal

    Posted Thu February 25, 2021 08:53 AM
    Hi Purush,

    Please see the documentation related to your query...

    https://www.ibm.com/support/knowledgecenter/SSMNED_v10/com.ibm.apic.install.doc/capic_deploy_overview.html

    https://www.ibm.com/support/knowledgecenter/SSMNED_v10/com.ibm.apic.install.doc/cert_kube_custom_overview.html

    Hope that helps - thanks

    ------------------------------
    Marcus Kaye
    ------------------------------



  • 3.  RE: APIC on cp4i - How to change external facing endpoints of API gateway and Dev portal

    IBM Champion
    Posted Thu February 25, 2021 03:29 PM

    Thanks Marcus. Those two links are applicable when you deploy on K8s. In case of CP4I (v2020.2.1 onwards), you don't have much control to provide custom endpoints and custom Certs in the API Connect capability deployment UI. It uses OpenShift routes endpoints. My requirement is to change following endpoint

    https://<Your_apic_instance_name>-gw-gateway-integration.apps.<your_ocp_cluster_name>.example.com
    to
    https://api.example.com

    https://<Your_apic_instance_name>-ptl-portal-web-integration.apps.<your_ocp_cluster_name>.example.com

    to
    https://developer.example.com

    Thanks,
    Purush



    ------------------------------
    Purush Das
    ------------------------------



  • 4.  RE: APIC on cp4i - How to change external facing endpoints of API gateway and Dev portal

    Posted Fri February 26, 2021 02:08 AM
    Hi,
    As long as you only change the hostname, it should be fine.
    You can use a LB or create new route in OCP to make the route to the developer or gateway.

    The link provided are valable for k8s & OCP.

    If you want to change the link shown on the developer portal you should either set the API endpoints of the gateway in the cloud manager to the external hostname or use vanity endpoint (https://www.ibm.com/support/knowledgecenter/en/SSMNED_v10/com.ibm.apic.apionprem.doc/create_env.html).

    In OCP deployment you have full control of the endpoints that you would like to create by setting them in the CRDs.

    Hope it helps.

    ------------------------------
    Pierre Richelle
    IBM Hybrid Cloud Integration Specialists
    IBM
    +32474681892
    ------------------------------



  • 5.  RE: APIC on cp4i - How to change external facing endpoints of API gateway and Dev portal

    Posted Fri December 09, 2022 02:30 PM
    Hi Pierre,

    Could you provide a sample APIConnectCluster CR to configure API manager endpoint, portal hostname and its custom certificate?

    Thanks and regards
    Jun Shen

    ------------------------------
    Jun Shen
    ------------------------------