Use Azure API Management with microservices (WCF and Web API) deployed in AKS - Episode 01

Episode1 - Build the infrastructure using Azure Terraform and Generate the Lets Encrypt Certificate

Episode2 - Create and contenerize ASP.Net Core Web API and WCF app then deploy to AKS ( Windows and Linux Node Pool)

Episode3 - Configure API Management External / Internal Endpoints and publish API's that runs from AKS

High Level Architecture Diagram for the 3 Episodes:

Episode 1 - Build the infrastructure using Azure Terraform and Generate the Lets Encrypt Certificate

Create Infra using Azure Terraform
Generate Lets Encrypt Certificate using certbot,and add new "TXT" record to Azure DNS Zone
Convert the certificate .pem to .pfx format
Upload Certificate to Application Load Balancer

1. Provision the environment using Azure Terraform

terraform init
terraform plan
terraform apply

2. Generate Lets Encrypt Certificate using certbot,and add new "TXT" record to Azure DNS Zone

2.1 install certbot

git clone https://github.com/certbot/certbot.git
cd certbot && ./certbot-auto
sudo apt-get install letsencrypt

2.2 Generate a wild Card Certificate

sudo chown root ./certbot-auto
sudo chmod 0755 ./certbot-auto
sudo ./certbot-auto certonly --manual --preferred-challenges=dns --email <YourEmailHere> --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.aks01-web.xxxxxxx.net

2.3 Add new "TXT" record to Azure DNS Zone

Name

_acme-challenge.aks01-web.xxxxxxx.net with the following value:

Value

B4lrT50H2kztfTZGKvdQFOemecgfIYSKibahhnhCpfk

Before continuing, verify the record is deployed.

3. Convert the certificate .pem to .pfx format

3.1 Map to the certificate location

sudo su root
cd /etc/letsencrypt/live/aks01-web.xxxxxxx.net

3.2 Export the certificate

openssl pkcs12 -export -out cert01.pfx -inkey privkey.pem -in fullchain.pem

Enter a Password : [CertificatePassword]

4. Upload the Lets Encrypt Certificate to App Gateway, For testing add new Listener and backend pool connected to a VM with Default IIS configurations. In Production you may need to purchase shiny certificate.

4.2 Next Episode to create and contenerize ASP.Net Core Web API and WCF app then deploy both api to AKS

Go to next or other Episodes: