You are browsing documentation for an older version. See the latest documentation here.

Deploy a Data Plane

To attach a Kong Gateway Operator data plane to Konnect the data plane needs to know which endpoint to connect to, and how to authenticate the requests.

To get the endpoint and the authentication details of the data plane:

1. Log in to Konnect.
2. Navigate to Gateway Manager, choose the control plane, and click New DataPlane Node.
3. In the Create a Data Plane Node page select Kubernetes as the Platform.
4. Click Generate Certificate in step 3.
5. Save the contents of Cluster Certificate in a file named tls.crt. Save the contents of Cluster Key in a file named tls.key.

6. Create a namespace named kong in the Kubernetes cluster:

   kubectl create namespace kong
   

7. Create a Kubernetes secret containing the cluster certificate:

    kubectl create secret tls konnect-client-tls -n kong --cert=./tls.crt --key=./tls.key
   

8. In the Configuration parameters step 4, find the value of cluster_server_name. The first segment of that value is the control plane ID for your cluster. For example, if the value of cluster_server_name is 36fc5d01be.us.cp0.konghq.com, then the control plane ID of the cluster is 36fc5d01be.

9. Replace YOUR_CP_ID with your control plane ID in the following manifest and deploy the data plane with kubectl apply:

    echo '
    apiVersion: gateway-operator.konghq.com/v1beta1
    kind: DataPlane
    metadata:
      name: dataplane-example
      namespace: kong
    spec:
      deployment:
        podTemplateSpec:
          spec:
            containers:
            - name: proxy
              image: kong/kong-gateway:3.9.0.0
              env:
                - name: KONG_ROLE
                  value: data_plane
                - name: KONG_DATABASE
                  value: "off"
                - name: KONG_CLUSTER_MTLS
                  value: pki
                - name: KONG_CLUSTER_CONTROL_PLANE
                  value: YOUR_CP_ID.us.cp0.konghq.com:443
                - name: KONG_CLUSTER_SERVER_NAME
                  value: YOUR_CP_ID.us.cp0.konghq.com
                - name: KONG_CLUSTER_TELEMETRY_ENDPOINT
                  value: YOUR_CP_ID.us.tp0.konghq.com:443
                - name: KONG_CLUSTER_TELEMETRY_SERVER_NAME
                  value: YOUR_CP_ID.us.tp0.konghq.com
                - name: KONG_CLUSTER_CERT
                  value: /etc/secrets/kong-cluster-cert/tls.crt
                - name: KONG_CLUSTER_CERT_KEY
                  value: /etc/secrets/kong-cluster-cert/tls.key
                - name: KONG_LUA_SSL_TRUSTED_CERTIFICATE
                  value: system
                - name: KONG_KONNECT_MODE
                  value: "on"
                - name: KONG_VITALS
                  value: "off"
              volumeMounts:
                - name: cluster-certificate
                  mountPath: /var/cluster-certificate
                - name: konnect-client-tls
                  mountPath: /etc/secrets/konnect-client-tls/
                  readOnly: true
            volumes:
              - name: cluster-certificate
              - name: konnect-client-tls
                secret:
                  secretName: konnect-client-tls
                  defaultMode: 420
    ' | kubectl apply -f -
   

   The result should look like this:

    dataplane.gateway-operator.konghq.com/dataplane-example configured