Getting Started¶

How It Works¶

Envoy Integration¶

Connects with Envoy’s External Authorization filter via gRPC.

Envoy sends authorization requests to the Kyverno sidecar, which evaluates policies and returns allow/deny decisions.

HTTP Authorization¶

Runs as a programmable HTTP server that evaluates requests directly and returns a decision — ideal for ingress controllers or standalone services.

Get Started¶

• Envoy Hello World – Introduction to the Envoy Authz Server
• HTTP Hello World – Introduction to the HTTP Authz Server
• Sidecar Injector – Automate sidecar injection