KubeCon + CloudNativeCon Europe 2025

Envoy Gateway, a growing project within the Envoy ecosystem, has steadily gained traction since its release, with v1.3 now available and adoption expanding across various production environments. It efficiently manages Envoy-based application gateways, fully complying with the Kubernetes Gateway API while extending its capabilities through custom resource definitions (CRDs) to address areas beyond the Gateway API's current scope. Envoy Gateway's Security Policy simplifies access to Envoy's robust security features, eliminating the need for users to navigate complex Envoy configurations. These features include CORS, JWT authentication, Basic Auth, OpenID Connect (OIDC), External Authentication (Ext Auth), and more. This session includes a demo showcasing OIDC authentication and authorization based on JWT claims, offering practical insights for enhancing application security—whether you're an experienced Envoy user or new to open source.