Emissary-Ingress Gateway System Tutorials

The Emissary-Ingress Gateway System is a Kubernetes-native API Gateway built on the Envoy Proxy.

Emissary-Ingress evaluates incoming client API requests and routes them to the appropriate backend APIs through Mappings and Listeners. While routing requests and providing responses, OPA can be configured as an external authorization service.

This tutorial shows how OPA can be integrated with Emissary-Ingress for API authorization and enforce security policies over client API requests received by Emissary-ingress.

note

OPA is added as an external authorization service through AuthService Custom Resource Definitions (CRD).