To install Envoy:
- Obtain the Envoy Authorizer zip archive from PlainID Support.
- Unpack the Authorizer archive.
- Configure authz image versions:
- Update the appVersion value in Chart.yaml file: Set tag of the authz-operator image from the images.txt file.
- Update spec.container.image value tag in samples/authz_v1_plainidinjector.yaml file: Set tag of authz-envoy-sidecar
image from file images.txt
- Update specific settings in values.yaml.
- Update specific settings of the PlainidSidecar kind (example in samples/sidecar-echo.yaml).
- Install Helm if not installed (Helm | Helm ).
- Install using the Helm Chart:
helm install sidecar-test authz-envoy - Label target namespace for PlainID Injection.
kubectl label namespace default pid-injection=enabled - Deploy authz-sidecar injector.
kubectl apply -f samples/authz_v1_plainidinjector.yaml - Deploy authz-sidecar configuration (PlainidSidecar kind).
kubectl apply -f samples/sidecar-echo.yaml - Restart a pod with the target microservice, so authz-sidecar will be injected.
kubectl delete pod echo - Configure Service Mesh to Integrate with the Authorizer.