skills.rest
missBerg
missBergCOMMUNITY
Explore all skills by this author →
GitHub

eg-security-guide

Identify and mitigate security risks in Envoy Gateway deployments with threat models, RBAC, and TLS hardening.

3|Updated Mar 8, 2026
Search Tags:#security#authentication#rbac#tls#threat-model#gateway#envoy
One-click install
npx skills add https://github.com/missBerg/envoy-skills --skill eg-security-guide
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: eg-security-guide
Source: https://github.com/missBerg/envoy-skills/tree/main/gateway/adopters/skills/eg-security-guide
Command: npx skills add https://github.com/missBerg/envoy-skills --skill eg-security-guide

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Addresses security gaps in Envoy Gateway deployments by providing structured threat modeling, RBAC policies, TLS configurations, and authentication hardening guidance.

Core Features & Use Cases

  • Threat modeling and risk mitigations for Envoy Gateway deployments across infrastructure scopes.
  • Prescribed 4-tier RBAC model, TLS/mTLS best practices, and authentication hardening using OIDC/JWT and API keys.
  • Step-by-step security guidance for administrators, operators, and developers to reduce privilege escalation and misconfigurations.

Quick Start

Ask me to generate a security hardening plan for an Envoy Gateway deployment, including RBAC, TLS, and authentication policies.

Frequently Asked Questions about eg-security-guide

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure an Envoy Gateway deployment with RBAC and TLS?▼

To secure an Envoy Gateway deployment, apply a 4-tier RBAC model, enforce TLS/mTLS, and use SecurityPolicy resources for authentication. This mitigates risks across cluster-wide, namespace, and application boundaries.

What is threat modeling for Envoy Gateway infrastructure?▼

Threat modeling for Envoy Gateway identifies security risks across infrastructure, operator, and developer scopes. It outlines structured mitigations to reduce privilege escalation and configuration misconfigurations.

How do I configure OIDC and JWT authentication in Envoy Gateway?▼

Configure OIDC and JWT authentication in Envoy Gateway by prioritizing them within your SecurityPolicy. This hardens access validation and reduces unauthorized API exposure.

Can I use cert-manager for Envoy Gateway certificate management?▼

Yes, you can use cert-manager for Envoy Gateway certificate management. It automates TLS certificate provisioning and lifecycle handling, which is a prescribed practice for TLS hardening.

Does Envoy Gateway SecurityPolicy support API key authentication?▼

Yes, Envoy Gateway SecurityPolicy supports API key authentication alongside JWT and OIDC. This provides flexible identity verification for developers and operators securing application boundaries.

What are the limitations of Envoy Gateway security configurations?▼

Limitations of Envoy Gateway security configurations include potential privilege escalation if RBAC tiers are misapplied across namespace boundaries. Proper SecurityPolicy enforcement is required to prevent misconfigurations.

Related Skills

Explore More Software Engineering Skills→
rohitg00rohitg00
944

k8s-certs

Automate Kubernetes certificate management with cert-manager for issuers and certificates.

Community
Advanced
skwuwuskwuwu

gvm_audit

Verify GVM audit log integrity and export compliance reports.

Community
Intermediate
ekremmkasapekremmkasap

mtls-configuration

Configure mTLS policies for Kubernetes service meshes with Istio, Linkerd, SPIRE, and cert-manager.

Community
Advanced
ancolemanancoleman
503

implementing-service-mesh

Deploy Istio, Linkerd, or Cilium service meshes with mTLS and traffic routing.

Community
Advanced