Enforcing API Management with Istio Service Mesh




Create GKE Cluster

Apply the istio gateway for accessing the Hipster app

Deploy the Hipster Shop application

Apply apigee adapter and handler configurations

Apply Apigee Istio Mixer rule

API Key verification of API mesh service

Enforcing API Management with Istio Service Mesh

1 hour 30 minutes 7 Credits


Google Cloud Self-Paced Labs


Istio is an open source framework for connecting, securing, and managing microservices. Istio provides an easy way to create a network of deployed services with load balancing, service-to-service authentication, monitoring, and more, without requiring any changes in service code.

In the Istio architecture, an adapter is a custom component that plugs into an Istio component called Mixer. Mixer introduces configurable policies and control mechanisms that apply rules to traffic flowing through the Istio service mesh. The Apigee Mixer adapter allows Mixer to deliver standard Apigee Edge API key, quota, and analytics functionality to services running in the mesh.

The Apigee Istio Mixer

The Apigee Istio Mixer adapter lets you use Apigee to manage APIs for services exposed outside the Istio service mesh or between services running entirely within the mesh. With the adapter, you can employ Apigee API management features to services running in an Istio service mesh, such as:

  • API discovery and documentation
  • Self-service API adoption
  • Usage analytics
  • Monetization

In addition, there are certain capabilities that you do not want to build for every service that you create and deploy to a service mesh. The adapter provides some of these capabilities, including security, caching, and quota enforcement. See Apigee Adapter for Istio Concepts for more information.

This lab shows you how to install and configure Istio on Kubernetes Engine, deploy an Istio-enabled multi-service application, and install the Apigee Istio Mixer adapter. The Apigee Istio Mixer plugin provides additional security and governance with API key/token validation, quota enforcement, and analytics.

What you'll do

  • Create a GKE cluster

  • Configure management and administrative functionality for the Apigee Istio adapter and your Apigee Edge tenant instance

  • Use Stackdriver to monitor and analyze service

  • Explore Apigee Analytics using application data

Join Qwiklabs to read the rest of this lab...and more!

  • Get temporary access to the Google Cloud Console.
  • Over 200 labs from beginner to advanced levels.
  • Bite-sized so you can learn at your own pace.
Join to Start This Lab