Effortless Secure and Control Traffic Using Kubernetes Gateway API for Ingress, Egress an...
summary
Live demo uses Kubernetes Gateway API + Istio Ambient Mesh, Kgateway, Argo CD, Kiali and Prometheus to manage ingress, egress and service-to-service traffic for a local llama-backed RAG app. HTTPRoute enforces 70% to v1, 30% to v2 rollout, then flips to 100% with a YAML change; serviceentry routes egress to Docker-hosted llama. Waypoint proxies inject mTLS, collect metrics, and enforce an authorization policy that returns 403 on /upload while allowing /query, proving the controls actually work.
AI-written summary · about
chapters (11)
- 0:00Kubernetes Gateway API intro
- 2:29Demo setup overview
- 8:35Deploy ingress gateway
- 11:32HTTP route config
- 16:30Ambient mesh with waypoints
- 19:44Service version routing
- 21:52Egress traffic control
- 27:36Traffic visualization with Kiali
- 30:48Authorization policies
- 33:42Metrics with Prometheus
- 36:33Summary & Q&A
related talks
28mBeyond Kubernetes Ingress (with Gateway API)
27mProviding secure Ingress into a multi-tenanted cluster using GatewayAPI
28mApplication delivery on k8s - the past, present and future
10mLightning Talk: Make Way for the Gateway
32mGateway API: A New Set of Kubernetes APIs for Advanced Traffic Routing
01h 00mGateway API: Basics, Nuance, and the Real World
26mGetting Hands-On with the New Kubernetes Gateway API
33mExiting Ingress With the Gateway API