Install the Gloo Edge Gateway Example Application
Configure kubectl
to point to the cluster and namespace you want to use for the Gloo Edge Gateway example application.
To install Styra DAS on Gloo Edge, copy and paste the installation commands from Systems > Settings > Install from the Gloo Edge Gateway System into your terminal. This will download and deploy the Styra Local Plane (SLP), OPA config, and Gloo Edge configuration.
The Quick Start provides the link to install example application. It consists of the following components which should now be running in your cluster. All resources are suffixed by the SYSTEM ID
to mark them as unique.
-
sample-app
: A simple HTTP web server that allows employees of a hypothetical organization to obtain salary details at the path/finance/salary
. It also exposes a path/hr/dashboard
that is only accessible by employees who are part of HR. Functionally, it is a simple echo server that returns a HTTP 200 response with a plain or text body which contains a success or error message. -
client-load
: A simple shell script that generates some pre-configuredHTTP GET
requests to simulate the API request being made to the edge-stack and to test the behavior of the deployed policy. It generates data to visualize the impact of the configured ingress policies. -
slp
: The Styra Local Plane (SLP) is a service that acts as an intermediary between the OPAs and Styra DAS. OPAs are configured to retrieve bundles from SLP rather than directly from Styra DAS. This increases availability as SLP fetches bundles from Styra DAS and persists them to disk. Policies are still available to new or restarted OPAs even if Styra DAS is unavailable. -
Each application has an
initContainer openpolicyagent/proxy_init:v4
that sets up redirections for the inbound and outbound packets. Additionally, two sidecar containers for Gloo Edge and OPA are also present in each application.
When you run the Gloo Edge example application, the OPA sidecars accesses the policy from your Styra DAS tenant and start enforcing it. This process takes a few minutes to complete.