skills.rest
missBerg
missBergCOMMUNITY
Explore all skills by this author →
GitHub

eg-auth

Configure Envoy Gateway authentication and authorization via SecurityPolicy for Gateway and HTTPRoute targets.

3|Updated Mar 8, 2026
Search Tags:#authorization#jwt#oidc#gateway#authenticate#envoy#securitypolicy
One-click install
npx skills add https://github.com/missBerg/envoy-skills --skill eg-auth
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: eg-auth
Source: https://github.com/missBerg/envoy-skills/tree/main/gateway/adopters/skills/eg-auth
Command: npx skills add https://github.com/missBerg/envoy-skills --skill eg-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configure authentication and authorization for Envoy Gateway using the SecurityPolicy CRD to unify access control across Gateways and HTTPRoutes.

Core Features & Use Cases

  • Supports JWT, OIDC, API Key, ExtAuth, and Basic Auth authentication methods with policy-based authorization.
  • Applies to both Gateway-level and Route-level targets, with optional authorization rules and claims-based access control.
  • Use cases include securing API gateways, protecting web apps, and delegating auth to external services.

Quick Start

Create a SecurityPolicy YAML that enforces JWT for a target HTTPRoute in the same namespace.

Frequently Asked Questions about eg-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure JWT authentication for Envoy Gateway?▼

To configure JWT authentication for Envoy Gateway, you create a SecurityPolicy Custom Resource that targets your Gateway or HTTPRoute and defines the JWT validation rules, applying route-level or gateway-level access control.

What is the best way to enforce OIDC authentication on an HTTPRoute?▼

The best way to enforce OIDC authentication on an HTTPRoute is by attaching a SecurityPolicy CRD to the route, providing the OIDC provider details and referencing Kubernetes Secrets for client credentials to secure web applications.

Can I use SecurityPolicy to apply API Key and Basic Auth on Envoy Gateway?▼

Yes, SecurityPolicy can apply API Key and Basic Auth on Envoy Gateway by defining the respective authentication methods within the policy and targeting either Gateway-level or Route-level traffic for flexible access control.

Does Envoy Gateway SecurityPolicy support delegating authorization to external services?▼

Yes, Envoy Gateway SecurityPolicy supports delegating authorization to external services using ExtAuth, allowing you to configure provider settings and route traffic to external ExtAuth services for custom validation logic.

How do I add CORS and authorization rules to an Envoy Gateway SecurityPolicy?▼

You add CORS and authorization rules to an Envoy Gateway SecurityPolicy by including optional CORS configurations and claims-based access control rules within the YAML manifest, applying unified policy enforcement across targeted routes.

Do I need Kubernetes Secrets to configure OIDC in Envoy Gateway?▼

Yes, you need Kubernetes Secrets to configure OIDC in Envoy Gateway because the SecurityPolicy requires referencing these Secrets to securely store and provide client credentials for the OIDC authentication provider.

Related Skills

Explore More Software Engineering Skills→
totallyGregtotallyGreg
2

kgateway

Configure Kubernetes Gateway API resources with kgateway for Envoy-based routing.

Community
Advanced
moonmingmoonming
1

a6-plugin-limit-req

Configure Apache APISIX limit-req plugin for leaky bucket rate limiting.

Community
Intermediate
thc1006thc1006

gateway-api

Configure and deploy Kubernetes Gateway API with Envoy Gateway.

Community
Intermediate
masermediagroup-stackmasermediagroup-stack
1

load-balancing-patterns

Identify optimal L4 and L7 load balancer patterns for multi-region traffic.

Community
Intermediate