Skip to main content

ExtAuth with Ambassador Emissary-ingress

To use Gate as an ExtAuth service with Ambassador Emissary-ingress, you must create an AuthService resource:

---
apiVersion: getambassador.io/v3alpha1
kind: AuthService
metadata:
  name: "gate-auth-svc"
  namespace: emissary # this must match the namespace where Emissary is deployed
spec:
  auth_service: http://gate.default:5000 # this must match the service name, namespace, and port of the Gate deployment
  proto: grpc # Gate only supports the full Envoy gRPC protocol
  protocol_version: v3 # Must be set to `v3`

Note that:

  • AuthService is a custom resource definition (CRD) for Emissary-ingress, and must be installed first (see our guide

  • You must deploy Gate in ExtAuth mode first (see our example or guide)