Configure Envoy Gateway TLS termination, passthrough, and mTLS with cert-manager integration.
npx skills add https://github.com/missBerg/envoy-skills --skill eg-tls
Please help me install this Agent Skill. Skill: eg-tls Source: https://github.com/missBerg/envoy-skills/tree/main/gateway/adopters/skills/eg-tls Command: npx skills add https://github.com/missBerg/envoy-skills --skill eg-tls
Configure TLS for Envoy Gateway including termination, passthrough, and mutual TLS with cert-manager integration.
Configure a Gateway with TLS termination or passthrough and enable cert-manager to issue and rotate certificates.
High-intent search queries and answers about installing and using this skill.
Configuring TLS termination for Envoy Gateway with cert-manager involves defining a TLS listener and specifying a cert-manager issuer to automate certificate provisioning and secret management. The setup intercepts traffic and decrypts requests at the Gateway.
TLS passthrough forwards encrypted traffic directly to the backend, while TLS termination decrypts traffic at the Envoy Gateway. This Skill configures both modes, applying BackendTLSPolicy to enforce secure backend connections for passthrough scenarios.
Yes, you can enforce mutual TLS (mTLS) for backend connections in Envoy Gateway. The Skill configures mTLS by integrating cert-manager for client certificate issuance and applying BackendTLSPolicy to mandate end-to-end encryption.
Cert-manager integration handles the certificate lifecycle by automatically issuing, rotating, and managing Kubernetes TLS secrets for Envoy Gateway. This automated provisioning ensures valid certificates without manual intervention.
You need BackendTLSPolicy to secure upstream traffic when requiring end-to-end encryption or TLS passthrough in Kubernetes. The Skill enforces BackendTLSPolicy to validate backend certificates and secure connections between the Envoy Gateway and backend services.
kettleofketchupDiagnose and configure Kubernetes cert-manager for TLS certificates.
ionfuryExpose Kubernetes services via Gateway API with TLS and Coraza WAF.
villadalmineIssues and manages TLS certificates for private Kubernetes domains.
wesleyegbertoConfigure mutual TLS in Istio, Linkerd, and SPIFFE service meshes.
