Start With Kubernetes

Overview

open-appsec for Kubernetes protects applications and APIs running in Kubernetes environments. It integrates with the most popular NGINX Ingress Controller, serving as a secure HTTP/S load balancer for one or more Services inside Kubernetes clusters. It also integrates with Kong Gateway (API Gateway), securing distributed, exposed APIs at the API Gateway level. Additional integrations (with e.g. Envoy, Ambassador) will be added soon as well.

NGINX Ingress Controller

The NGINX Ingress Controller and open-appsec for Kubernetes agent are deployed together with a single Helm chart. This diagram shows an example of a Kubernetes service exposed outside the Kubernetes cluster with an Ingress controller protected with open-appsec. The NGINX Ingress Controller container contains the open-appsec Attachment which communicates with the open-appsec Agent.

Kong Gateway

Kong and the open-appsec agent are deployed together with a single Helm chart in Kubernetes environments. This diagram shows K8s Web APIs/Apps exposed by an Kong API Gateway that is protected by open-appsec. Inside the Kong Gateway Pod there are following containers: Kong Gateway container, open-appsec Agent container and optional Kong Controller (Ingress Controller). Here open-appsec is integrated with the Kong Gateway container which contains the open-appsec Attachment for communication with the open-appsec Agent.

APISIX gateway

For Kubernetes based-deployments of APISIX integrated with open-appsec there’s a helm chart available, which is based on the official APISIX helm chart and further enhanced to also include the open-appsec attachment in the APISIX gateway container and the deployment of the open-appsec agent as a sidecar container in the same pod.

Here’s a simple architecture schematic for deployment on Kubernetes.

Deployment Options

Choose between two deployment options:

Install Using Interactive CLI Tool (Ingress NGINX)

Install Using Helm

You can always connect your deployment later to a SaaS management, which provides cloud logging & reporting, central management and monitoring of multiple K8s clusters and an easy-to-use WebUI for all administrative tasks.