The document discusses the importance of effective API delivery using 'APIOps' to enhance speed, consistency, and business value in a cloud-native environment. It emphasizes the shift from monolithic application designs to microservices and the need for APIs to be consumer-centric, well-designed, and automated. Additionally, it highlights the benefits of APIOps, including increased developer productivity, improved governance, and lower costs through automation.

1. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 1
Cologne, 2021-11-03
Sven Bernhardt
EFFICIENT API-DELIVERY WITH
APIOPS

2. © OPITZ CONSULTING 2021 / Öffentlich
THAT‘S ME
Efficient API delivery with APIOps 2
Sven Bernhardt
Cloud-Native enthusiast, API & integration geek. Always curious how new
technologies and concepts can help to make things more valuable and efficient.
¢ Chief Architect / Integration Evangelist@OPITZ CONSULTING Deutschland GmbH
¢ Oracle ACE Director
@sbernhardt
https://svenbernhardt.wordpress.com/

3. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 4
APIOPS
WHY?
WHAT?
HOW?

4. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS?
Efficient API delivery with APIOps 5

5. © OPITZ CONSULTING 2021 / Öffentlich
COVID-19 REQUIRES COMPANIES TO CREATE NEW DIGITAL OFFERINGS
Efficient API delivery with APIOps 6
Source: https://konghq.com/resources/digital-innovation-benchmark-2021/ Source: https://pages.apigee.com/rs/351-WXY-166/images/Apigee_StateOfAPIS_eBook_2020.pdf

6. © OPITZ CONSULTING 2021 / Öffentlich
ADOPTION OF MICROSERVICES AND APIS IS GAINING TRACTION
Efficient API delivery with APIOps 7
¢ Move away from
¢ Classic and monolithic application design
¢ Centralized application teams
¢ Manual application delivery
Source: https://konghq.com/resources/digital-innovation-benchmark-2021/

7. © OPITZ CONSULTING 2021 / Öffentlich
COMMUNICATION BETWEEN MICROSERVICES HAPPENS OVER APIS
Efficient API delivery with APIOps 8
¢ APIs are used for providing functionalities to
consumers
¢ Internal
¢ External
¢ Sync and Async APIs
¢ APIs != REST
Source: https://pages.apigee.com/rs/351-WXY-166/images/Apigee_StateOfAPIS_eBook_2020.pdf

8. © OPITZ CONSULTING 2021 / Öffentlich
SPEED SEEMS
TO BE
RELEVANT, BUT
IS THAT
ENOUGH?
Efficient API delivery with APIOps 9

9. © OPITZ CONSULTING 2021 / Öffentlich
DELIVERY CHALLENGES OF HIGHLY DISTRIBUTED ARCHITECTURES
Efficient API delivery with APIOps 10
¢ Speed
¢ Consistence
¢ Security
¢ Flexibility
We also need to think about
resiliency and connectivity in
highly distributed architectures!

10. © OPITZ CONSULTING 2021 / Öffentlich
APIS SHOULD DELIVER BUSINESS VALUE!
Efficient API delivery with APIOps 11
¢ Focus on potential consumers
¢ How will a consumer use my API?
¢ What kind of resources and operations are
needed by the consumers?
¢ …
¢ APIs should be consumer-centric and thus
be consumable
¢ Well-designed, secured and compliant
¢ Documented, discoverable and accessible
¢ Performant, reliable and scalable
Source: https://konghq.com/blog/what-is-apiops/
Compliant
Functional Findable
The intersection of the three
characteristics defines
consumable APIs!

11. © OPITZ CONSULTING 2021 / Öffentlich
DECENTRALISED API MANAGEMENT: FOCUS ON SPEED
Efficient API delivery with APIOps 12
API Platform
Dev
Team 1
Dev
Team 2
Dev
Team n
API Standard 1
API Standard 2
API Standard n
Decreasing
consistence

12. © OPITZ CONSULTING 2021 / Öffentlich
CENTRALISED API MANAGEMENT: FOCUS ON CONSISTENCE
Efficient API delivery with APIOps 13
API Platform
Dev
Team 1
Dev
Team 2
Dev
Team n
API
Platform
Team
Review loop
Review loop
Review loop
API
Guidelines
API
Guidelines
API
Guidelines
Decreasing
speed

13. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS APPROACH: FOCUS ON SPEED AND CONSISTENCE
Efficient API delivery with APIOps 14
API Platform
Dev
Team 1
Dev
Team 2
Dev
Team n
API
Platform
Team
API
Guidelines
API
Guidelines
API
Guidelines
Self-service
automated review
Automated review
Automated deployment

14. © OPITZ CONSULTING 2021 / Öffentlich
API LIFECYCLE (PROVIDER PERSPECTIVE)
Efficient API delivery with APIOps 15
Design
Build
Deploy
Promote,
deprecate, retire
Operate &
Observe
API ideation &
planning
Starting point: Design the API spec and
push to Git
Validate the API Spec
Generate declarative API config, deploy
it to the Gateway and provide API mock
Publish API spec and documentation
to a Developers Portal, manage API
versions
Operate an API depennding on
usage bahviour (e.g. scale
automatically, etc.-)

15. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS EXTENDS GITOPS WITH TOOLS
Efficient API delivery with APIOps 16
APIOps
= GitOps + API Design/Validation/Deployment Tools
GitOps
= Infrastructure as Code (IaC) + Merge Requests (MRs) + CI/CD
Sources:
https://about.gitlab.com/topics/gitops/
https://blogs.vmware.com/cloud/2021/02/24/gitops-cloud-operating-model/
https://konghq.com/webinars/success/how-apiops-increases-speed-%26-quality-throughout-the-api-lifecycle
• Everything as Code
• Git as Single-Source-of-
truth

16. © OPITZ CONSULTING 2021 / Öffentlich
Design
Build
Deploy
Promote,
deprecate, retire
Operate &
Observe
CONSISTENTLY MANAGE THE API LIFECYCLE USING GIT
Efficient API delivery with APIOps 17
Outcome: Validated spec
Outcome: Validated implementation
Outcome: API endpoints, declarative
config
Outcome: Managed API
endpoints

17. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS TOOLCHAIN
Efficient API delivery with APIOps 18
Design Deploy
Operate
&
Observe
Build
OCI API
Gateway
OCI
Monitoring
Promote/
Deprecate
/Retire
OCI
DevOps
decK
inso
Developer
Portal

18. © OPITZ CONSULTING 2021 / Öffentlich
APIOPS DELIVERY PIPELINE
Efficient API delivery with APIOps 19
Design CI/CD Deploy
API Design Source Control Merge Request Merge
Lint, Test, Policy
enforcement
Deploy on
Success
API Gateway
API Portal
Further
components (*)
Automation
(*) might e.g. be a Service mesh
inso deck
OCI API
Gateway
API Gateway
config
API
Implementation

19. © OPITZ CONSULTING 2021 / Öffentlich
BUSINESS BENEFITS OF APIOPS
Efficient API delivery with APIOps 20
¢ Increased speed as everything is automated in the
delivery pipeline, which allows for rapidly
onboarding, operating and scaling
¢ Improved consistency through automated / self-
service governance throughout the delivery pipeline
¢ Lower cost because automation relieves the QA
teams
¢ Adopting APIOps increases
¢ Flexibility
¢ Agility and
¢ Ability to innovate

20. © OPITZ CONSULTING 2021 / Öffentlich
IT BENEFITS OF APIOPS
Developers
¢ Increased Developers
productivity
¢ Fewer push backs and less
frustation
¢ Centralized discovery and
documentation
Operators
¢ Automated configurations
with Git as Single-Source-of-
Truth
¢ Automated QA
¢ Consistent, automated
rollback mechanism
Architects
¢ Faster time-2-market
¢ Improved consistency
¢ Increased security and
resiliency
Efficient API delivery with APIOps 21
¢ Increased confidence while releasing changes
¢ Solid foundation to extend delivery pipeline to further use cases

21. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 22
BEYOND APIOPS…
https://opitzcloud.canto.global/b/OMPHJ

22. © OPITZ CONSULTING 2021 / Öffentlich
SELF-SERVICE NETWORK MANAGEMENT WITH SERVICE MESH
Efficient API delivery with APIOps 23
¢ Describe policies regarding Service-2-Service
communication declaratively
¢ Some Service Mesh (like Kuma) implementations
are capable to cover:
¢ Hybrid / Multi-Cloud scenarios
¢ Container / VM workloads
¢ Benefits:
¢ Increased traffic connectivity & reliability
¢ Enhanced Security by implementing Zero-trust
Security Model (mTLS & Traffic permissions)
¢ Increased Observability

23. © OPITZ CONSULTING 2021 / Öffentlich
DECLARATIVE AUTHORIZATION MANAGEMENT (E.G. WITH OPA)
Efficient API delivery with APIOps 24
¢ OPA allows to define declarative authorization
(AuthZ) policies across the Cloud-native stack
¢ CI/CD pipelines
¢ Cloud platforms
¢ Applications
¢ Can be integrated with nearly everything
¢ Benefits:
¢ Increased consistence through central AuthZ
management
¢ Increased availabilty & performance
¢ Efficient authorization management (Implementation
& security reviews)
Sources:
https://konghq.com/blog/authorize-api-opa-kuma/
https://www.openpolicyagent.org

24. © OPITZ CONSULTING 2021 / Öffentlich
Efficient API delivery with APIOps 25
Q & A
https://opitzcloud.canto.global/b/H0EMG

25. © OPITZ CONSULTING 2021 / Öffentlich
MATERIAL
Efficient API delivery with APIOps 26
¢ Kong Webinar APIOps: https://konghq.com/webinars/success/how-apiops-increases-speed-
%26-quality-throughout-the-api-lifecycle
¢ APIOps – Automated processes for even better APIs:
https://blog.codecentric.de/en/2021/01/apiops-automated-processes-for-even-better-apis/
¢ Insomina: https://insomnia.rest/
¢ Kong Connect: https://konghq.com/kong-konnect/
¢ OCI DevOps: https://www.oracle.com/devops/devops-service/
¢ Authorizing Microservice APIs With OPA and Kuma: https://konghq.com/blog/authorize-api-opa-
kuma/
¢ Service integration made easy with Kuma: https://www.youtube.com/watch?v=f3GeuKzYrsA

26. © OPITZ CONSULTING 2021 / Öffentlich
IN CASE OF ANY QUESTIONS…
Efficient API delivery with APIOps 27
Sven Bernhardt
Chief Architect / Integration Evangelist |
Oracle ACE Director
OPITZ CONSULTING Deutschland GmbH
Kirchstrasse 6, 51647 Gummersbach, Germany
Phone: +49 172 2193529
Mail: sven.bernhardt@opitz-consulting.com
Twitter: @sbernhardt
Blog: https://svenbernhardt.wordpress.com