Singapore MuleSoft Meetup - 23 Nov 2022

All contents © MuleSoft, LLC
Singapore MuleSoft Meetup
Welcome

Introduction
2
Royston Lobo
Strategic Technical Architect,
MuleSoft

Agenda
3
● MuleSoft Meetup Introductions and Announcements
● Training and Certiﬁcation Update - Nelson Phua/Bernard
Tay
● Connect your Systems without code with MuleSoft
Composer! - Joey Chan
● MuleSoft: An Automation Story - Terence Lim
● Flex Gateway deployment architecture in K8S - Yohanes Widi
Sono
● Trivia and Prizes

Who is attending a MuleSoft
Meetup for the ﬁrst time?

What’s in Meetups?
5
● Community-led events
● Topics are up to YOU!
● Use cases
● Demos
● How-tos
● Workshops
● Personal stories
● …
Learn - Network - Share
with other MuleSoft users

Upcoming Community Meetups
Weekly events
• Check out all upcoming events every week here
Over 170 groups world wide
• Join from anywhere!
→ Join the Global Group: meetups.mulesoft.com/online-group-english
→ RSVP for upcoming events: meetups.mulesoft.com/events

7
More ways to join the fun
developer.mulesoft.com
Community events
meetups.mulesoft.com
Twitch live streams
twitch.tv/
mulesoft_community
Hands-on tutorials Linkedin page
linkedin.com/showcase/
mulesoftcommunity

Before we go…
8
● We’re looking for speakers in Singapore
● Contribute! meetups@mulesoft.com
● Let’s take a group picture! 📸

Training and Certiﬁcation

Introducing the NEW MuleSo Certiﬁed
Integration Associate Certiﬁcation!
https://sfdc.co/ouoDd

● Explain the common technical complexities
that are central in integration development.
● Describe the components and beneﬁts of
Anypoint Platform for system integration and
API management.
MuleSo Certiﬁed Integration Associate
- What will I learn?
Objectives
● Identify the roles and responsibilities, and
lifecycle phases of a typical integration
project.
● Recognize and interpret essential integration
concepts and terminology used by MuleSoft
architects and developers
● Recognize common integration problems,
deconstruct them into their fundamental
integration use cases, and identify the
appropriate technologies to solve them.
http://mule.is/integration-associate

Exam Details
● Format: Multiple choice /
proctored online
● Length: 40 questions
● Duration: 90 minutes
● Pass score: 70%
● Validity: 2 years
● Cost: $125, includes 2 attempts
Exam Preparation
● Datasheet
● Trailmix
● Practice Exam
MuleSo Certiﬁed Integration Associate
- About the Exam
Available October 2022
Who is this exam for?
This certiﬁcation is designed for team
members that will work on MuleSoft
integration projects
○ Developers
○ Architects
○ Technical Project Managers
○ Integration Product Owners
○ IT professionals
○ IT operations

MuleSoft Certified Badges on
Trailhead.me
Display your MuleSoft certification badges on
your Trailblazer profile!

Show off your MuleSoft, Salesforce, Tableau, and Slack credentials in one place
MuleSoft Certifications on Trailblazer.me!
Trailblazer.me profiles are a great way to share your accomplishments with the community. In addition to your
Salesforce certifications, soon you will be able to add certifications from Slack, Tableau, and MuleSoft to your
Trailblazer.me profile. Now you can share the full scope of your Salesforce skills.
You will receive an email with instructions on how to activate your Trailhead profile if you don’t yet have one, as well as
connect your MuleSoft account to add your certifications!

Connect systems
without code using
MuleSoft Composer

Joey Chan
Salesforce MVP | MuleSoft Mentor
Founder & Technical Architect at Cloud Jedi Solutions
#1 Rated on the AppExchange
26x Salesforce Certiﬁed (System and Application Architect)
3x MuleSoft Certiﬁed (Incl. Platform Architect)
Manila, Philippines Trailblazer Community Leader
Organizer of Philippines Dreamin and SEA Dreamin

The Salesforce solution
Automation inside Salesforce Automation outside Salesforce

Composer Connectors
Generic HTTP
Connector
for the rest!

Why MuleSoft Composer vs alternatives?
● Security & Governance
● Flexibility (Consumption based pricing)
● Scalable
● Central hub for end-to-end automations
● Complete automation solution along with RPA and Anypoint
Platform

MuleSoft Composer or Anypoint Platform?
● Target Audience (Business Users vs. MuleSoft
Developers/Architects)
● Number of systems (Point to point vs. API-led Connectivity)
● Existing connectors
● Integration Complexity
● Data Volumes (Ex. millions of records)
● Performance requirements (Ex. 1000 req./min)

Top use cases
● Salesforce Org to Org Sync
● Integrations with NetSuite or Quickbooks for business data
● Integration to Slack or Twilio for notiﬁcations

Considerations
● Not possible to trigger from Salesforce Flows directly or Platform
Events
● Cannot reuse Composer Flows yet
● Currently not possible to schedule it to run on a speciﬁc time of
the day
● No lower environments for testing
● No versioning
● Uses Salesforce API calls at each step

Bad news! :(
Salesforce or MuleSoft Partnership required
How to get access?

How to get access?
Good news!
Sign-up for a free 2-hour workshop and get access to a
Training Org for free!
https://training.mulesoft.com/workshops/automation-wor
kshops
First Thursday for the next 4 months at 9 AM - 11 AM US
Paciﬁc Time

More Trailhead Badges!
MuleSoft Composer Trailmix
https://trailhead.salesforce.com/users/mulesoft-trailhead/trailmi
xes/mulesoft-composer

Join the Trailblazer Community Groups
https://trailhead.salesforce.com/trailblazer-community/groups/0F94S000000GwI1SAK

Connect with me on LinkedIn!
https://www.linkedin.com/in/joeyqchan/

MuleSoft: An Automation Story
Terence Lim

Salesforce Developer Evangelist
Terence Lim
Eureka Retail
Automation for
Retail Store Managers
https://www.linkedin.com/in/terlimws/

Sarah
is a Retail Sales Store Manager, working for a
major retail apparel chain, Eureka Retail.
She aims to provide the best tailored service
experience to her customers to achieve her
sales targets and be eﬃcient in her work.

Solution Flow BEFORE Automation
Store/Inventory
receives a
returned item
Manual entry of
receipt number to
check validity
Manually update
the item stock
PAIN POINTS:
1. High possibilities of error in manual entry
2. Time consuming
SARAH

Mobile Use Case with Mulesoft Automation
Retail customer
returns item
Sales agent or
inventory manager
receives item
Receipt or QR code
is scanned by the
mobile app
Inventory is
updated with a
reason for return
RPA
SARAH
Productivity Eﬃciency Operational Cost

Solution Flow AFTER Automation
Create Return
Item record and
update Inventory
Validate Item SKU
Number and
Membership ID*
Extract Item SKU
Number and
Membership ID*
1. Store sales agent selects
the reason for return
2. Takes a picture of the
receipt for return
Store sales agent
views return item
histories in mobile
Inform Warehouse
channel/etc for
further actions

Clienteling Mobile App
Built using open source technology on Salesforce
Slack as Digital HQ
Share data/information with relevant individuals
and across teams
Heroku, a Scalable cloud platform
Salesforce Customer 360 - org data
Real-time data integration with C360 org data
to the mobile app
Mulesoft Automation
Mulesoft RPA that does OCR, Automation Flow
Bi-directional data sync and data bridge for C360 data

Flex Gateway
Yohanes Wid Sono

Flex Gateway
deployment
architecture in K8S
ysono@mulesoft.com

Google Slides does not have an
image placeholder option.
Please place an image over this
box manually or work in
43
Yohanes gets involved in some of the most complex and exciting
projects, when our customers would like to build innovative digital
experiences. He helps them understand their needs, designs their
solutions and architecture and then leads implementation work. He
is JAPAC SME for some of the most complex MuleSoft products that
leverage the latest cloud and container technology. He is great at
patiently explaining complicated things, making them seem easy and
making customers confident in implementing using our technology.
Yohanes W Sono
Technical Architect
Experience
15++ years in tech industry
Application integration
Digital solutions
Software engineering
Enterprise Architecture & Strategy
Complex infrastructure solutions
(Cloud native app/MSA, Cloud
Infra, Kubernetes, Container)
Devops and Test automation

Agenda
Use Case 1: Gateway for existing APIs and Services inside or outside K8S
Use Case 2: As ingress controller for any services that deployed in K8S
Use Case 3: As a side-car for any services that deployed in K8S

Topic not covered
Basic understanding of Flex gateway
Basic understanding of Kubernetes
- Master/worker nodes
- Pods
- Services

MuleSoft API Gateway - Full Coverage
Anypoint Platform Manage Secure Monitor
Discover
Service A
Any Environment
Service B
Service C
Gateway
Gateway
Gateway
Service A
Sidecar
proxy
Service B
Sidecar
proxy
Mule Adapter
Istio
Flex Gateway Anypoint for Service Mesh
Mule applications
Mule
Apps
Mule
Apps
CloudHu
b
Runtime
Fabric
MuleSoft Gateway

Introducing Flex Gateway
Modern Ultrafast API Gateway
Containerized, ultrafast
lightweight API Gateway
● High performance, small
footprint, easily deployed
in any environment
Enterprise grade API
management support
● Extend full lifecycle API
management to any
service -- no matter the
size, language or cloud
Secure and manage API
with an enhanced policy
portfolio
● Apply OOTB or custom
policies directly on
Anypoint Platform
Anypoint Platform Manage Secure Monitor
Discover
Any Environment
New: Manage API running anywhere with a lightweight gateway
Gateway

Running Flex Gateway
Connected mode
via the WebUI
Local mode
Using declarative
conﬁg ﬁles in CI/CD
API
Gateway
Instance on
Physical /
VM
Azure
VM
Amazon EC2
GCP Compute
Engine
Container
sidecar /
Ingress
Controller
Deployment patterns
Anypoint
Flex Gateway

Flex Gateway Installation on
K8S

High Level Installation Flow (Flex Gateway in K8S)
Build platform roadmap
and implementation plan
Deploy Anypoint platform
including common
services
Establish reference
architecture Helm Chart Install and Configure
Registration
● Register Flex
Gateway in
Connected Mode
● Register Flex
Gateway in Local
Mode
● Output: Flex
gateway
registration file (ex:
registration.yaml)
● Add helm chart
repo to your local
● Check helm chart
usage via readme
● Check possible
value
● For sidecar: get Flex
Gateway CRD from
the helm chart repo
● Install Flex Gateway
via Helm Chart
● For SideCar: Import
registration file as
K8S secret
● Configure the Flex
Gateway depending
on use case

Helm Chart
//add Flex Gateway helm repository
helm repo add flex-gateway https://flex-packages.anypoint.mulesoft.com/helm
helm repo update
//Check helm chart readme
helm show readme flex-gateway/flex-gateway > flex-gw-chart-readme.md
//Check helm chart possible value
helm show values flex-gateway/flex-gateway |less

UC 1: Gateway for existing
APIs & Services

High Level Deployment Architecture
Connected Mode
Local Mode

API Conﬁguration and Installation
Connected Mode

Installation example
Local Mode
> kubectl create ns <YOUR-NAMESPACE>
> helm -n <YOUR-NAMESPACE> upgrade -i --wait
<YOUR-FLEX-GATEWAY-NAME> flex-gateway/flex-gateway
--set replicaCount=1
--set resources.requests.cpu=100m
--set resources.limits.cpu=250m
--set gateway.scope=Namespace
--set-file registration.content=registration/registration.yaml

API Configuration Example
Local Mode
---
apiVersion: gateway.mulesoft.com/v1alpha1
kind: Service
metadata:
name: <ANY-SERVICE-NAME>
namespace: <YOUR-NAMESPACE>
spec:
address: <ANY-IMPLEMENTATION-BASE-URI>
---
kind: PolicyBinding
metadata:
name: <ANY-NAME>
spec:
targetRef:
name: <YOUR-FLEX-GATEWAY-NAME>-<http/https>
policyRef:
name: route
config:
destinationPath: <IMPLEMENTATION_ENDPOINT>
destinationRef:
name: <ANY-SERVICE-NAME>
rules:
- path: /demo1(/.*)
---
kind: PolicyBinding
metadata:
name: <ANY-NAME>
spec:
targetRef:
policyRef:
name: header-injection-flex
config:
outboundHeaders:
- key: "x-fw-injection"
value: "inject by fw"
rules:
- path: /demo1(/.*)

Demo Time

UC 2: As K8S Ingress
Controller

Ingress Controller Overview

High Level Deployment Architecture
Local Mode

Installation example
Local Mode
> kubectl create ns <YOUR-NAMESPACE>
> helm -n <YOUR-NAMESPACE> upgrade -i --wait
<YOUR-FLEX-GATEWAY-NAME> flex-gateway/flex-gateway
--set replicaCount=2
--set resources.requests.cpu=100m
--set resources.limits.cpu=250m
--set gateway.scope=Namespace
--set-file registration.content=registration/registration.yaml

Ingress Configuration Example
Local Mode
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: <ANY-NAME>
spec:
ingressClassName: <YOUR-FLEX-GATEWAY-NAME>-<http/https>.<YOUR-NAMESPACE>
rules:
- http:
paths:
- path: /services(/payments.*)
pathType: ImplementationSpecific
backend:
service:
name: payments-service
port:
number: 3000
- path: /services/orders(/payments.*)
pathType: ImplementationSpecific
backend:
service:
name: orders-service
port:
number: 3001

Policy Configuration Example
Local Mode
---
kind: PolicyBinding
metadata:
name: <ANY-NAME>
spec:
targetRef:
policyRef:
name: rate-limiting-flex
config:
keySelector: "#[attributes.method]"
exposeHeaders: true
rateLimits:
- maximumRequests: 5
timePeriodInMilliseconds: 5000
rules:
- path: /services(/payments.*)
---

UC 3: As sidecar in existing
Services

Sidecar Pattern overview

Prerequisites
> Install Flex Gateway CRD, you can get it from helm chart repo
> Import registration.yaml to k8s secret
• kubectl -n <YOUR-NAMESPACE> create secret generic <ANY-SECRET-NAME>
--from-ﬁle=registration.yaml=registration/registration.yaml

Sidecar conﬁguration overview
Connected Mode
https://gist.github.com/yohanesws/07b70a20ccae03d6741dbbf2e5452d10

Deployment Configuration example
---
apiVersion: apps/v1
kind: Deployment…
…
- name: gw
env:
- name: FLEX_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: FLEX_NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
image: mulesoft/flex-gateway:latest
…
volumeMounts:
- mountPath: /etc/mulesoft/flex-gateway/conf.d/registration
name: registration
readOnly: true
volumes:
- name: config
configMap:
name: test-sidecar-config
- name: registration
secret:
defaultMode: 420
secretName: flexgw-registration
restartPolicy: Always
Connected Mode

Sidecar conﬁguration overview
Local Mode
https://gist.github.com/yohanesws/af55df5e2c9cb9bebd10371d214a0689

Service Account and Role configuration
Local Mode
--
apiVersion: v1
kind: ServiceAccount
metadata:
name: fw-sa-sidecar
namespace: flexgwsidecarlocal
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: flex-gateway-role
rules:
- apiGroups: [""]
resources: ["services"]
verbs: ["get", "list", "watch"]
- apiGroups: ["networking.k8s.io"]
resources: ["ingresses"]
- apiGroups: ["gateway.mulesoft.com"]
resources: ["configurations", "services", "extensions", "apiinstances", "policybindings"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: flex-gateway-role:fw-sa-sidecar
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: flex-gateway-role
subjects:
- kind: ServiceAccount
name: fw-sa-sidecar

Deployment Configuration example
Local Mode
---
apiVersion: apps/v1
kind: Deployment…
serviceAccountName: fw-sa-sidecar
…
- name: gw
env:
- name: FLEX_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: FLEX_NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
- name: FLEX_DATASOURCE_K8S_ENABLED
value: "true"
- name: FLEX_K8S_WATCH_NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
image: mulesoft/flex-gateway:latest
…
volumeMounts:
- name: config
mountPath: /etc/mulesoft/flex-gateway/conf.d/custom
readOnly: true
- mountPath: /etc/mulesoft/flex-gateway/conf.d/registration
name: registration
readOnly: true
volumes:
- name: config
configMap:
- name: registration
secret:
defaultMode: 420
secretName: flexgw-registration
restartPolicy: Always

API Instance and Policy configuration example
Local Mode
---
apiVersion: v1
kind: ConfigMap
metadata:
data:
test-sidecar-8080.test.apiinstance.yaml: |+
---
kind: ApiInstance
metadata:
name: test-sidecar-8080
labels:
flex.mulesoft.com/service/name: test-sidecar
flex.mulesoft.com/service/port/number: "8080"
flex.mulesoft.com/service/port/name: http
flex.mulesoft.com/service/label/app: test-sidecar
spec:
address: http://0.0.0.0:8080
services:
upstream:
address: http://localhost:80
---
kind: PolicyBinding
metadata:
name: authenticated
spec:
targetRef:
kind: Selector
selector:
kind: ApiInstance
labels:
flex.mulesoft.com/service/name: test-sidecar
flex.mulesoft.com/service/port/name: http
policyRef:
name: http-basic-authentication-flex
config:
username: max
password: mule

Limitation
Flex Gateway in Sidecar != Full ServiceMesh Solution, meaning:
1- Lack of current support for outbound policies.
2- No current auto injection of the sidecar support.
3- No out of the box support for mTLS for east/west communications.
4- No out of the box capabilities for certiﬁcate rotation.
If you required all feature above then better use Anypoint ServiceMesh with Istio

Thank you!

Reference
https://knowledgehub.mulesoft.com/s/article/Flex-Gateway-Deployment-Reference-Archite
cture
https://docs.mulesoft.com/gateway/1.3/ﬂex-gateway-getting-started
https://mulethunder.blog/2022/06/28/ﬂex-gateway-deployment-patterns/
https://learn.microsoft.com/en-us/azure/architecture/patterns/sidecar

Trivia Time
79

https://tinyurl.com/SGMMNOV
Scan the QR code below!
3 Training
Courses up for
grabs!

Thank you

Singapore MuleSoft Meetup - 23 Nov 2022

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Ähnlich wie Singapore MuleSoft Meetup - 23 Nov 2022

Ähnlich wie Singapore MuleSoft Meetup - 23 Nov 2022 (20)

Mehr von Royston Lobo

Mehr von Royston Lobo (13)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Singapore MuleSoft Meetup - 23 Nov 2022