Fundament Marketplace
Marketplace

Gateway API (Envoy Gateway)

Gateway API implementation powered by Envoy Gateway

By System · 0.2.0-master.3794

About

Overview

The Gateway API plugin powered by Envoy Gateway installs the Envoy Gateway control plane and manages Gateways, HTTPRoutes, GRPCRoutes, TCPRoutes, TLSRoutes, and Envoy Gateway policies.

Installed versions

  • Envoy Gateway v1.9.3

Key Features

  • Standard Gateway API: Native support for the Kubernetes Gateway API
  • Envoy Gateway-powered: Backed by the Envoy Gateway control plane
  • Guided Gateway creation: Create Gateways from the console with sensible defaults
  • Policy support: SecurityPolicy, BackendTrafficPolicy, and ClientTrafficPolicy

Use Cases

  • Ingress for Kubernetes workloads via the Gateway API
  • Advanced traffic management with Envoy
  • Per-Gateway security and traffic policies

Permissions

Once installed, Gateway API (Envoy Gateway) is granted the following access to your cluster.

This plugin asks for access to every resource in your cluster, which amounts to full administrator rights.

Can view and change 32

  • Backendtrafficpoliciesbackendtrafficpolicies
  • Clienttrafficpoliciesclienttrafficpolicies
  • Cluster role bindingsclusterrolebindings

    Who is granted a cluster role.

  • Cluster rolesclusterroles

    Sets of permissions across the cluster.

  • Config mapsconfigmaps

    Non-secret configuration data.

  • Custom resource definitionscustomresourcedefinitions

    New kinds of resources added to the cluster.

  • Deploymentsdeployments

    Workloads and how they are rolled out.

  • Envoyproxiesenvoyproxies
  • Gateway classesgatewayclasses
  • Gatewaysgateways
  • gRPC routesgrpcroutes
  • HTTP routeshttproutes
  • Jobsjobs

    One-off tasks.

  • Mutating webhooksmutatingwebhookconfigurations

    Hooks that can alter changes made to the cluster.

  • Namespacesnamespaces

    The spaces workloads are grouped in.

  • Role bindingsrolebindings

    Who is granted a role within a namespace.

  • Rolesroles

    Sets of permissions within a namespace.

  • Secretssecrets

    Passwords, keys and certificates stored in the cluster.

  • Securitypoliciessecuritypolicies
  • Service accountsserviceaccounts

    Identities that workloads use to talk to the cluster.

  • Servicesservices

    Network endpoints for workloads.

  • Status of gateway classesgatewayclasses/status

    The state reported back on the resource.

  • Status of gatewaysgateways/status

    The state reported back on the resource.

  • Status of gRPC routesgrpcroutes/status

    The state reported back on the resource.

  • Status of HTTP routeshttproutes/status

    The state reported back on the resource.

  • Status of TCP routestcproutes/status

    The state reported back on the resource.

  • Status of TLS routestlsroutes/status

    The state reported back on the resource.

  • TCP routestcproutes
  • TLS routestlsroutes
  • Validating webhooksvalidatingwebhookconfigurations

    Checks that can reject changes made to the cluster.

  • Validatingadmissionpoliciesvalidatingadmissionpolicies
  • Validatingadmissionpolicybindingsvalidatingadmissionpolicybindings

Can view 4

  • All resources*

    Every kind of resource in the cluster, including ones added later.

  • Cluster issuersclusterissuers
  • Podspods

    Running containers.

  • Replica setsreplicasets

    The pod copies behind a deployment.