Presentation was delivered at Sangam21 (AIOUG) API design-first allows the collaborative development of user-centric business APIs. In this context, the API specification is developed first and then the development of the frontend and backend can be started directly, whereby the API is mocked in the first step and feedback from the development is continuously incorporated into the specification. In order to do this efficiently, the delivery of specification changes needs to be as automated as possible, i.e. from spec change (commit) to deployment on the API gateway to publishing on the Dev Portal.

1. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 1
Cologne, 2021-12-15
Sven Bernhardt
EFFICIENT API-DELIVERY WITH
APIOPS

2. © OPITZ CONSULTING 2021 / Öffentlich
THAT‘S ME
Efficient API delivery with APIOps 2
Sven Bernhardt
Cloud-Native enthusiast, API & integration geek. Always curious how new
technologies and concepts can help to make things more valuable and efficient.
¢ Chief Architect / Integration Evangelist@OPITZ CONSULTING Deutschland GmbH
¢ Oracle ACE Director
@sbernhardt
https://svenbernhardt.wordpress.com/

3. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 3
APIOPS
WHY?
WHAT?
HOW?

4. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS?
Efficient API delivery with APIOps 4

5. © OPITZ CONSULTING 2021 / Öffentlich
COVID-19 REQUIRES COMPANIES TO CREATE NEW DIGITAL OFFERINGS
Efficient API delivery with APIOps 5
Source: https://konghq.com/resources/digital-innovation-benchmark-2021/ Source: https://pages.apigee.com/rs/351-WXY-166/images/Apigee_StateOfAPIS_eBook_2020.pdf

6. © OPITZ CONSULTING 2021 / Öffentlich
MOVEMENT TO ARCHITECTURES THAT ARE DESIGNED FOR CHANGE
Efficient API delivery with APIOps 6
¢ Move away from
¢ Classic and monolithic application design
¢ Centralized application teams
¢ Manual application delivery
Source: https://konghq.com/resources/digital-innovation-benchmark-2021/

7. © OPITZ CONSULTING 2021 / Öffentlich
APIS ARE ESSENTIAL TO LOOSELY COUPLED ARCHITECTURES
Efficient API delivery with APIOps 7
¢ APIs are used for providing functionalities to
consumers
¢ Internal
¢ External
¢ Sync and Async APIs
¢ APIs != REST
Source: https://pages.apigee.com/rs/351-WXY-166/images/Apigee_StateOfAPIS_eBook_2020.pdf

8. © OPITZ CONSULTING 2021 / Öffentlich
APIS SHOULD DELIVER BUSINESS VALUE!
Efficient API delivery with APIOps 8
¢ Focus on potential consumers
¢ How will a consumer use my API?
¢ What kind of resources and operations are
needed by the consumers?
¢ …
¢ APIs should be consumer-centric and thus
be consumable
¢ Well-designed, secured and compliant
¢ Documented, discoverable and accessible
¢ Performant, reliable and scalable
Source: https://konghq.com/blog/what-is-apiops/
Compliant
Functional Findable
The intersection of the three
characteristics defines
consumable APIs!

9. © OPITZ CONSULTING 2021 / Öffentlich
ACHIEVE CONSUMABLE APIS THROUGH AN API DESIGN-FIRST
APPROACH
Implementing Cloud-native Apps on OCI 9
¢ Synchronous APIs
¢ REST (OpenAPI)
¢ GraphQL
¢ gRPC
¢ Asynchronous APIs (preferred)
¢ Async API

10. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 10
CHALLENGE: BALANCE BETWEEN SPEED AND CONSISTENCE
https://opitzcloud.canto.global/b/I3FO4

11. © OPITZ CONSULTING 2021 / Öffentlich
DECENTRALISED API MANAGEMENT: FOCUS ON SPEED
Efficient API delivery with APIOps 11
API Platform
Dev
Team 1
Dev
Team 2
Dev
Team n
API Standard 1
API Standard 2
API Standard n
Decreasing
consistence

12. © OPITZ CONSULTING 2021 / Öffentlich
CENTRALISED API MANAGEMENT: FOCUS ON CONSISTENCE
Efficient API delivery with APIOps 12
API Platform
Dev
Team 1
Dev
Team 2
Dev
Team n
API
Platform
Team
Review loop
Review loop
Review loop
API
Guidelines
API
Guidelines
API
Guidelines
Decreasing
speed

13. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 13
AUTOMATION TO BALANCE SPEED AND CONSISTENCE
https://opitzcloud.canto.global/b/OQR0O

14. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS APPROACH: FOCUS ON SPEED AND CONSISTENCE
Efficient API delivery with APIOps 14
API Platform
Dev
Team 1
Dev
Team 2
Dev
Team n
API
Platform
Team
API
Guidelines
API
Guidelines
API
Guidelines
Self-service
automated review
Automated review
Automated deployment

15. © OPITZ CONSULTING 2021 / Öffentlich
API LIFECYCLE (PROVIDER PERSPECTIVE)
Efficient API delivery with APIOps 15
Design
Build
Deploy
Promote,
deprecate, retire
Operate &
Observe
API ideation &
planning
Starting point: Design the API spec and
push to Git
Validate the API Spec
Generate declarative API config, deploy
it to the Gateway and provide API mock
Publish API spec and documentation
to a Developers Portal, manage API
versions
Operate an API depennding on
usage bahviour (e.g. scale
automatically, etc.)

16. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS EXTENDS GITOPS WITH TOOLS
Efficient API delivery with APIOps 16
APIOps
= GitOps + API Design/Validation/Deployment Tools
GitOps
= Infrastructure as Code (IaC) + Merge Requests (MRs) + CI/CD
Sources:
https://about.gitlab.com/topics/gitops/
https://blogs.vmware.com/cloud/2021/02/24/gitops-cloud-operating-model/
https://konghq.com/webinars/success/how-apiops-increases-speed-%26-quality-throughout-the-api-lifecycle
• Everything as Code
• Git as Single-Source-of-
truth

17. © OPITZ CONSULTING 2021 / Öffentlich
Design
Build
Deploy
Promote,
deprecate, retire
Operate &
Observe
CONSISTENTLY MANAGE THE API LIFECYCLE USING GIT
Efficient API delivery with APIOps 17
Outcome: Validated spec
Outcome: Validated implementation
Outcome: API endpoints, declarative
config
Outcome: Managed API
endpoints

18. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS TOOLCHAIN
Efficient API delivery with APIOps 18
Design Deploy
Operate
&
Observe
Build
OCI API
Gateway
OCI
Monitoring
Promote/
Deprecate
/Retire
OCI
DevOps
decK
inso
Developer
Portal
OCI Logging
OCI APM

19. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS DELIVERY PIPELINE
Efficient API delivery with APIOps 19
Design CI/CD Deploy
API Design Source Control Merge Request Merge
Lint, Test, Policy
enforcement
Deploy on
Success
API Gateway
API Portal
Further
components (*)
Automation
(*) might e.g. be a Service mesh
inso deck
OCI API
Gateway
API Gateway
config
API
Implementation

20. © OPITZ CONSULTING 2021 / Öffentlich
BUSINESS BENEFITS OF APIOPS
Efficient API delivery with APIOps 20
¢ Increased speed as everything is automated in the
delivery pipeline, which allows for rapidly
onboarding, operating and scaling
¢ Improved consistency through automated / self-
service governance throughout the delivery pipeline
¢ Lower cost because automation relieves the QA
teams
¢ Adopting APIOps increases
¢ Flexibility
¢ Agility and
¢ Ability to innovate

21. © OPITZ CONSULTING 2021 / Öffentlich
IT BENEFITS OF APIOPS
Developers
¢ Increased Developers
productivity
¢ Fewer push backs and less
frustation
¢ Centralized discovery and
documentation
Operators
¢ Automated configurations
with Git as Single-Source-of-
Truth
¢ Automated QA
¢ Consistent, automated
rollback mechanism
Architects
¢ Faster time-2-market
¢ Improved consistency
¢ Increased security and
resiliency
Efficient API delivery with APIOps 21
¢ Increased confidence while releasing changes
¢ Solid foundation to extend delivery pipeline to further use cases

22. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 22
BEYOND APIOPS…
https://opitzcloud.canto.global/b/OMPHJ

23. © OPITZ CONSULTING 2021 / Öffentlich
SELF-SERVICE NETWORK MANAGEMENT WITH SERVICE MESH
Efficient API delivery with APIOps 23
¢ Describe policies regarding Service-2-Service
communication declaratively
¢ Some Service Mesh (like Kuma) implementations
are capable to cover:
¢ Hybrid / Multi-Cloud scenarios
¢ Container / VM workloads
¢ Benefits:
¢ Increased traffic connectivity & reliability
¢ Enhanced Security by implementing Zero-trust
Security Model (mTLS & Traffic permissions)
¢ Increased Observability

24. © OPITZ CONSULTING 2021 / Öffentlich
DECLARATIVE AUTHORIZATION MANAGEMENT (E.G. WITH OPA)
Efficient API delivery with APIOps 24
¢ OPA allows to define declarative authorization
(AuthZ) policies across the Cloud-native stack
¢ CI/CD pipelines
¢ Cloud platforms
¢ Applications
¢ Can be integrated with nearly everything
¢ Benefits:
¢ Increased consistence through central AuthZ
management
¢ Increased availabilty & performance
¢ Efficient authorization management (Implementation
& security reviews)
Sources:
https://konghq.com/blog/authorize-api-opa-kuma/
https://www.openpolicyagent.org

25. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 25
Q & A
https://opitzcloud.canto.global/b/H0EMG

26. © OPITZ CONSULTING 2021 / Öffentlich
MATERIAL
Efficient API delivery with APIOps 26
¢ Kong Webinar APIOps: https://konghq.com/webinars/success/how-apiops-increases-speed-
%26-quality-throughout-the-api-lifecycle
¢ APIOps – Automated processes for even better APIs:
https://blog.codecentric.de/en/2021/01/apiops-automated-processes-for-even-better-apis/
¢ Insomina: https://insomnia.rest/
¢ Kong Connect: https://konghq.com/kong-konnect/
¢ OCI DevOps: https://www.oracle.com/devops/devops-service/
¢ Authorizing Microservice APIs With OPA and Kuma: https://konghq.com/blog/authorize-api-opa-
kuma/
¢ Service integration made easy with Kuma: https://www.youtube.com/watch?v=f3GeuKzYrsA

27. © OPITZ CONSULTING 2021 / Öffentlich
IN CASE OF ANY QUESTIONS…
Efficient API delivery with APIOps 27
Sven Bernhardt
Chief Architect / Integration Evangelist |
Oracle ACE Director
OPITZ CONSULTING Deutschland GmbH
Kirchstrasse 6, 51647 Gummersbach, Germany
Phone: +49 172 2193529
Mail: sven.bernhardt@opitz-consulting.com
Twitter: @sbernhardt
Blog: https://svenbernhardt.wordpress.com