envoyproxy / envoyproxy/gateway

Add GCP + cert-manager TLS setup and production hardening tips to Secure Gateways guide

Open
#5,807 4 comments 0 reactions 1 assignee Claimed by @kamxnet View on GitHub
documentation stale
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

I’m a network security architect currently learning and exploring Envoy Gateway. I noticed the [Secure Gateways]( https://gateway.envoyproxy.io/latest/tasks/security/secure-gateways/ ) page is a great starting point but could be enhanced for broader cloud users, especially GCP. Here are some suggestions:
1. Add GCP-specific notes on:
• Using cert-manager with Let’s Encrypt or Google-managed certs
• Ingress Gateway DNS setup with Cloud DNS
2. Production readiness tips:
• Avoid using self-signed certs (ok for demo, but not for production)
• Mention use of mTLS between gateway and backend (optional)
3. Architecture diagram suggestion:
• A diagram showing client → TLS termination at Envoy Gateway → Kubernetes service/backend

I’d be happy to collaborate on improving this section. Thanks for your awesome work!

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.