Skip to Main Content
Linkerd: Up and Running
book

Linkerd: Up and Running

by Jason Morgan, Flynn
April 2024
Intermediate to advanced content levelIntermediate to advanced
262 pages
6h 12m
English
O'Reilly Media, Inc.
Content preview from Linkerd: Up and Running

Chapter 9. Linkerd Route-Based Policy

In Chapter 8, we discussed implementing a Linkerd Server-based policy to enhance the security of the emojivoto application. This policy ensures that Linkerd effectively safeguards the application’s workload, preventing unauthorized workloads from making requests. Suppose we want to go further, though? For example, consider a situation where you have a sensitive application. You need to be certain that only specific ServiceAccounts are allowed to make changes, and only certain others have access to read.

That’s where Linkerd’s route-based policy mechanism comes in. In this chapter, we’ll take a closer look at what route-based policy can do and how to use it.

Route-Based Policy Overview

Route-based policy gives Linkerd a way to express policy that depends not only on which workloads are in play, but also on which specific requests are being made. These specific HTTP requests are identified by using Gateway API HTTPRoute resources to specify matches against the HTTP path, method, headers, etc.—almost anything except the body can be used. Requests are still authenticated using mTLS identities.

Gateway API HTTPRoute resources work by associating one or more parents with one or more rules. When using Gateway API for ingress, the parents of an HTTPRoute will be Gateway resources; however, this doesn’t make much sense when using Gateway API to configure a service mesh. When using HTTPRoutes with Linkerd, the parents will be Services instead, and ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

Istio: Up and Running

Istio: Up and Running

Lee Calcote, Zack Butcher
gRPC: Up and Running

gRPC: Up and Running

Kasun Indrasiri, Danesh Kuruppu
Istio in Action

Istio in Action

Rinor Maloku, Christian E. Posta
Rust in Action

Rust in Action

Tim McNamara

Publisher Resources

ISBN: 9781098142308Errata Page