Hands-On with an Envoy API Gateway, Now with GraphQL!
summary
Envoy-backed glue edge installs into Kubernetes, discovers services as upstreams, and generates GraphQL schema and resolvers from OpenAPI and gRPC without adding a separate server — an in-proxy GraphQL claim proved feasible in the workshop. Authentication uses Keycloak OIDC integration, authorization via OPA returns 403s for blocked writes, rate limits apply as 2/min vs 8/min limits by subscription, a ModSecurity WAF blocks Log4Shell payloads, and observability is via Prometheus/Grafana plus access logs; all demos run live and reflect immediate config changes.
AI-written summary · about
chapters (23)
- 0:00Workshop introduction
- 1:47About the presenters
- 8:46Setting up the workshop environment
- 17:35Introduction to Gloo Edge
- 26:33Traffic management basics
- 34:01Virtual services and upstreams
- 42:22Gateway and route delegation
- 51:53Blue-green deployments
- 1:01:17Security with TLS
- 1:06:13OpenID Connect authentication
- 1:20:36Open Policy Agent authorization
- 1:35:12Data transformation
- 1:41:58Rate limiting
- 1:50:31Web Application Firewall
- 2:00:00Observability overview
- 2:02:09GraphQL introduction
- 2:17:40GraphQL benefits
- 2:33:11Installing Gloo Edge for GraphQL
- 2:44:30Basic GraphQL service
- 2:55:10Complex GraphQL schema
- 3:02:54Securing GraphQL APIs
- 3:13:25Schema stitching
- 3:17:19GraphQL UI tour
related talks
22mUnlock Kubernetes & Envoy: Master Your API Ecosystem!
55mMastering GraphQL: Strategies from the Experts
36mAdvanced Authentication patterns at the Edge
25mThe Future of API Management with Everything as Code
01h 27mMr. Toad’s Wild Ride: A Rollicking, Declarative GraphQL Workshop
15mHarnessing GraphQL for Efficient API Queries: Learn How
33mGet to know Envoy - the modern proxy for cloud-native infrastructure - Baptiste Collard
33mEnvoy Gateway Project Update