Skip to main content

Installing the Kong Enterprise Gateway Sample Application

Before installing the Kong Enterprise Gateway sample application, configure kubectl for the cluster you want to use for the Kong Enterprise Gateway sample application.

The following diagram shows a Kong Enterprise Gateway sample application.

Kong Enterprise Gateway Sample ApplicationKong Enterprise Gateway Sample Application

Follow the Quick Start instructions to install the Kong Enterprise Gateway through the Helm method.

To configure Styra on Kong Enterprise Gateway, copy and paste the installation commands from SYSTEMS > Settings > Install. These commands configure the built-in Kong plugin for OPA authorization and configure OPA to connect to Styra DAS through the Styra Local Plane (SLP).

The Quick Start provides the link to install the sample application. It consists of the following components running in your cluster.

The Quick Start provides the link to install example application. It consists of the following components which should now be running in your cluster. All resources are suffixed by the SYSTEM ID to mark them as unique.

  • sample-app: A simple HTTP web server that allows employees of a hypothetical organization to obtain salary details at the path /finance/salary. It also exposes a path /hr/dashboard path that is only accessible to HR employees. Functionally, it is a simple echo server that returns an HTTP 200 response with a plain-text body that contains a success or error message.

  • sample-ingress: An ingress resource that exposes HTTP routes from outside the cluster to the sample-app service within the cluster. The Kong plug-in for OPA is enabled by annotating the ingress resource with konghq.com/plugins: kong-plugin-opa.

  • slp: The Styra Local Plane (SLP) is a service that acts as an intermediary between the OPAs and Styra DAS. OPAs are configured to retrieve bundles from SLP rather than directly from Styra DAS. This increases availability as SLP fetches bundles from Styra DAS and persists them to disk. Policies are still available to new or restarted OPAs even if Styra DAS is unavailable.

When you run the Kong Enterprise Gateway sample application, the OPA sidecars access the policies from your Styra DAS tenant and enforce the policies. This process may take a few minutes to complete.