Runtime service configuration overview

You are currently viewing version 1.2 of the Apigee hybrid documentation.This version is end of life. You should upgrade to a newer version. For more information, seeSupported versions.

The Apigee hybrid runtime plane is made up of a variety of services. Each service is deployedon nodes within your Kubernetes cluster, and each one can be configured using theoverrides.yaml file.

Runtime architectural diagram

The following image shows how each of the runtime services interacts with other services in hybrid:

alt_text

The following table summarizes the runtime services:

ServiceDescriptionConfiguration ObjectImplemented AsScope
CassandraActs as a runtime datastore that provides Apigee local persistent storage for KMS, OAuth, KVMs, and caching for the runtime plane. You can have separate Cassandra rings for KMS, OAuth, KVMs, and caching.cassandraStatefulSetOrganization (one or more orgs)
Default Istio Ingress/LoadBalancerManages inbound requests from client apps. The default installation uses an Istio Ingress, but you are responsible for managing your own custom Ingress configuration for production traffic.ingressIngressCluster (one or more organizations in the same cluster)
LoggerExtracts log files and sends the data to the monitoring application associated with your GCP account (currently Stackdriver).loggerDaemonSetCluster (one or more organizations in the same cluster)
Management API for Runtime data (MART)Exposes an endpoint to administer data entities on the runtime plane, such as KMS (API keys and OAuth tokens), quotas, KVMs, and API products. MART services are scoped to a single organization.martDeploymentOrganization
MART Istio IngressManages inbound requests from the management plane for calls to theApigee APIs.ingressIngressCluster (one or more organizations in the same cluster)
Message ProcessorConsumes rolling updates from the management plane to provide API request processing and policy execution on the runtime plane. Each Message Processor is scoped to a single environment.runtimeDeploymentEnvironment
MetricsCollects operations metrics that you can use to monitor the health of hybrid services, to set up alerts, and so on.metricsDeploymentCluster (one or more organizations in the same cluster)
SynchronizerFetches configuration data about an API environment from the management plane to the runtime plane. A Synchronizer can poll one or more environments in the same or different organizations.synchronizerDeploymentEnvironment
Universal Data Collection Agent (UDCA)Extracts analytics and deployment status data and sends it to the UAP service in the management plane so that you can access it with the management UI.udcaDeploymentEnvironment
Cert ManagerA certificate manager for Kubernetes implementations used by Apigee.cert-managerDeploymentKubernetes cluster
Apigee OperatorsApigee Operators (AO) creates and updates low level Kubernetes and Istio resources that are required to deploy and maintain the ApigeeDeployment (AD) configuration. For example, the controller carries out the release of message processors and validates the AD configuration before making it persistent in Kubernetes cluster.aoDeploymentKubernetes cluster
Istio Control Plane ComponentsIstio is a service mesh that layers onto your existing Apigee instance helping it integrate with the logging platform, telemetry and policy system.istioIngressSystem

Most services make socket connections with other internal or external services that you should beaware of. For more information, seeHybrid ports.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.