For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.
Authorization
Configure Layer 4 and Layer 7 authorization policies to control which workloads can communicate in ambient mesh.
Authorization policies control which workloads can communicate with each other. In ambient mesh, the ztunnel enforces Layer 4 policies and waypoint proxies enforce Layer 7 policies, so the attachment point determines both what a policy can match on and which component evaluates it.
Tip
To review the combined effect of your policies rather than one resource at a time, use the Security view of the Solo UI graph. This view colors each path in the mesh by whether a policy allows it, denies it, or leaves it open, rolls the same information up per workload and namespace, and flags policies that ambient cannot enforce as written. For more information, see Authorization policy coverage.
Considerations for Kubernetes network policy
Understand how Kubernetes NetworkPolicy interacts with ambient mesh, including required port …
Authorization policies with ztunnel
Apply Layer 4 authorization policies with ztunnel in ambient mesh to control which workloads can …
Authorization policy with waypoint proxies
Enforce Layer 7 authorization policies and request authentication in ambient mesh using waypoint …
CEL and workload claims authorization for L4 traffic Enterprise Alpha
Use Common Expression Language (CEL) expressions in ztunnel authorization policies to enforce …