eg-api-gateway

Enables the setup of a full-featured, secure, and reliable service mesh with a single command.

3|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/missBerg/envoy-skills --skill eg-api-gateway
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: eg-api-gateway
Source: https://github.com/missBerg/envoy-skills/tree/main/gateway/adopters/skills/eg-api-gateway
Command: npx skills add https://github.com/missBerg/envoy-skills --skill eg-api-gateway

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Set up Envoy Gateway to act as a robust API gateway, providing centralized authentication, traffic management, and backend resilience for services exposed to external clients.

Core Features & Use Cases

  • Installation & bootstrapping: Install Envoy Gateway, create a Gateway and TLS listener with cert-manager.
  • Routing & versioning: Define HTTPRoutes with path-based routing, version canaries, and rewrites.
  • Security & rate limits: Apply SecurityPolicy for JWT/API keys/OIDC and rate-limit policies to protect APIs.
  • Backend resilience: Configure retries, circuit breaking, health checks, and load balancing to ensure reliability.
  • Observability: Emit logs and metrics for monitoring API traffic and policy effectiveness.

Quick Start

Install Envoy Gateway and apply initial resources to expose a sample API.

Frequently Asked Questions about eg-api-gateway

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Envoy Gateway as a Kubernetes API gateway?

To configure Envoy Gateway as a Kubernetes API gateway, you apply Gateway and GatewayClass resources to define routing, then add HTTPRoutes and SecurityPolicies for traffic management and authentication.

How do I set up JWT authentication and rate limiting for Kubernetes APIs?

Setting up JWT authentication and rate limiting for Kubernetes APIs involves applying SecurityPolicy resources for API keys or OIDC validation, and configuring BackendTrafficPolicies to throttle incoming external client requests.

How do I ensure backend resilience for services exposed to external clients?

Ensuring backend resilience for exposed services requires configuring BackendTrafficPolicies in Envoy Gateway to enforce retries, circuit breaking, health checks, and load balancing across your Kubernetes deployments.

Can I use cert-manager to manage TLS listeners for an Envoy Gateway?

Yes, you can use cert-manager to manage TLS listeners for Envoy Gateway by creating a Gateway resource configured with TLS certificates, enabling secure HTTPS ingress for your external APIs.

What is the best way to implement path-based routing and version canaries in Envoy Gateway?

Implementing path-based routing and version canaries in Envoy Gateway is achieved by defining HTTPRoutes with path matching rules and request rewrites to gradually shift traffic between backend service versions.