Skip to main content

Install the Emissary-ingress Sample Application

Be sure kubectl is configured to point to the cluster you want to use for the Emissary-ingress sample application.

To install Styra on Emissary-ingress, you must copy and paste all the three installation command from SYSTEMS >> Settings >> Install of your Emissary-ingress system into your terminal. This adds a new AuthService pointing to OPA, patches OPA sidecar container along with it's configuration to connect to DAS through Styra Local Plane (SLP).

The Emissary-ingress Quick Start provides the link to install sample application. It consists of the following components which should now be running in your minikube.

  • sample-app: A simple HTTP web server that allows employees of a hypothetical organization to obtain salary details at the path /finance/salary. It also exposes a path /hr/dashboard that is only accessible by employees who are part of HR. Functionally, it is a simple echo server that returns a HTTP 200 response with a plain or text body which contains a success or error message.

  • client-load: A simple shell script that generates some pre-configured HTTP GET requests to simulate the API request being made to the edge-stack and to test the behavior of the deployed policy. It helps generate data to visualize the impact of the configured ingress policies.

  • listener and mapping: The Listener Custom Resource Definitions (CRD) defines where, and how, Emissary-ingress should listen for requests from the network and mapping routes the traffic to the desired service.

  • slp: Styra Local Plane (SLP) is a service that acts as an intermediary between the OPAs and Styra DAS. OPAs are configured to retrieve bundles from SLP rather than directly from DAS. This increases availability as SLP fetches bundles from Styra DAS and persists them to disk, so policies are still available to new or restarted OPAs even if Styra DAS is unavailable.

When you run the Emissary-ingress sample application, the OPA pods will pull down the policy from DAS tenant and start enforcing it. This process takes few minutes to complete.

Figure 1 - Emissary-ingress sample applicationFigure 1 - Emissary-ingress sample application