envoyproxy / envoyproxy/gateway

Add GCP + cert-manager TLS setup and production hardening tips to Secure Gateways guide

Aperta
#5,807 4 commenti 0 reazioni 1 assegnatario Rivendicata da @kamxnet Vedi su GitHub
documentation stale
Lingua principale
Go
Stelle
3k
Fork
864
Merge medio
2g 2h
PR unite (30g)
140

Descrizione

I’m a network security architect currently learning and exploring Envoy Gateway. I noticed the [Secure Gateways]( https://gateway.envoyproxy.io/latest/tasks/security/secure-gateways/ ) page is a great starting point but could be enhanced for broader cloud users, especially GCP. Here are some suggestions:
1. Add GCP-specific notes on:
• Using cert-manager with Let’s Encrypt or Google-managed certs
• Ingress Gateway DNS setup with Cloud DNS
2. Production readiness tips:
• Avoid using self-signed certs (ok for demo, but not for production)
• Mention use of mTLS between gateway and backend (optional)
3. Architecture diagram suggestion:
• A diagram showing client → TLS termination at Envoy Gateway → Kubernetes service/backend

I’d be happy to collaborate on improving this section. Thanks for your awesome work!

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.