You are browsing documentation for an older version.
See the latest documentation here.
Kong Mesh with Kubernetes
To install and run Kong Mesh on Kubernetes:
- Download Kong Mesh
- Run Kong Mesh
- Verify the Installation
Finally, you can follow the Quickstart to take it from here and continue your Kong Mesh journey.
Prerequisites
You have a license for Kong Mesh.
1. Download Kong Mesh
Download a compatible version of Kong Mesh for the machine from which you
will be executing the commands.
You can run the following script to automatically detect the operating system
and download Kong Mesh:
curl -L https://docs.konghq.com/mesh/installer.sh | VERSION=2.0.8 sh -
You can also download the distribution manually. Download a distribution for
the client host from the machine where you plan to run the commands to access
Kubernetes:
Then, extract the archive with:
tar xvzf kong-mesh-2.0.8*.tar.gz
2. Run Kong Mesh
Then, run the control plane with:
kong-mesh-2.0.8/bin/kumactl install control-plane --license-path=/path/to/license.json | kubectl apply -f -
Note: Kong Mesh also has UBI images.
To use these images instead, check out the UBI documentation.
Where /path/to/license.json
is the path to a valid Kong Mesh
license file on the file system.
This example will run Kong Mesh in standalone mode for a flat
deployment, but there are more advanced deployment modes
like multi-zone.
We suggest adding the kumactl
executable to your PATH
so that it’s always
available in every working directory. Alternatively, you can create a link
in /usr/local/bin/
by running:
ln -s kong-mesh-2.0.8/bin/kumactl /usr/local/bin/kumactl
It may take a while for Kubernetes to start the
Kong Mesh resources. You can check the status by executing:
kubectl get pod -n kong-mesh-system
3. Verify the Installation
You can access the control plane using either
the GUI, kubectl
, the HTTP API, or the CLI:
GUI (Read-Only)
kubectl (Read & Write)
HTTP API (Read-Only)
kumactl (Read-Only)
Kong Mesh ships with a read-only GUI that you can use to
retrieve Kong Mesh resources. By default, the GUI listens on
the API port 5681
.
To access Kong Mesh, port-forward the API service with:
kubectl port-forward svc/kong-mesh-control-plane -n kong-mesh-system 5681:5681
Now you can navigate to 127.0.0.1:5681/gui
to see the GUI.
You can use Kong Mesh with kubectl
to perform
read and write operations on Kong Mesh resources. For
example:
kubectl get meshes
NAME AGE
default 1m
Or, you can enable mTLS on the default
Mesh with:
echo "apiVersion: kuma.io/v1alpha1
kind: Mesh
metadata:
name: default
spec:
mtls:
enabledBackend: ca-1
backends:
- name: ca-1
type: builtin" | kubectl apply -f -
Kong Mesh ships with a read-only HTTP API that you use
to retrieve Kong Mesh resources. By default,
the HTTP API listens on port 5681
.
To access Kong Mesh, port-forward the API service with:
kubectl port-forward svc/kong-mesh-control-plane -n kong-mesh-system 5681:5681
Now you can navigate to 127.0.0.1:5681
to see the HTTP API.
You can use the kumactl
CLI to perform read-only operations on
Kong Mesh resources. The kumactl
binary is a client to
the Kong Mesh HTTP API. To use it, first port-forward the API
service with:
kubectl port-forward svc/kong-mesh-control-plane -n kong-mesh-system 5681:5681
Then run kumactl
. For example:
kumactl get meshes
NAME mTLS METRICS LOGGING TRACING
default off off off off
You can configure kumactl
to point to any remote kuma-cp
instance by running:
kumactl config control-planes add --name=XYZ --address=http://{address-to-kong-mesh}:5681
Kong Mesh automatically creates a Mesh
entity with the name default
.
4. Quickstart
To start using Kong Mesh, see the
quickstart guide for Kubernetes deployments.