Emissary-ingress
API gatewayemissary
Kubernetes-native Envoy API gateway configured with Mapping custom resources.
- Provider
- default
- Kind
- API gateway
- Category
- Edge
- Official docs
- https://emissary-ingress.dev/docs/
- Also known as
- Ambassador
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| auth | enum | none | api-key | jwt | oauth2 | mtls | no | none | inherited |
| concurrencyLimit | boolean | — | no | false | inherited |
| configApi | enum | mapping-crd | ingress | service-annotation | no | mapping-crd | inherited |
| externalAuthService | boolean | — | no | false | inherited |
| idempotencyKeys | boolean | — | no | false | inherited |
| instances | integer | — | no | — | inherited |
| keyTtlHours | integer | — | no | — | inherited |
| managed | boolean | — | no | false | ▸ false |
| protocol | enum | http | grpc | websocket | fix | ouch | no | http | inherited |
| rateLimiting | boolean | — | no | false | ▸ false |
| tls | boolean | — | no | true | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
sync-chain-too-deep
Every consecutive synchronous hop from this entry point spends part of the stated p95 latency budget, and the chain's failures multiply. More than three hops is a budget nobody is tracking.
- — all of these hold:
- — the design requirement `latency.p95Ms` has a value
- — the longest chain of synchronous calls starting at the node is more than 3 hops long
nodes:
- { id: "emissary", component: "emissary" }API Gatewayalibaba-api-gatewayAmazon API Gatewayaws-api-gatewayAWS AppSync GraphQL APIaws-appsyncAzure API Managementazure-api-managementAI Gatewaycloudflare-ai-gatewayCloudflare API Shieldcloudflare-api-shieldMCP Server Portalcloudflare-mcp-portalCloudflare Privacy Gatewaycloudflare-privacy-gatewayGeneric API gatewayapi-gatewayApache APISIXapisixApollo GraphOSapollo-graphosEasegresseasegressEnvoy Gatewayenvoy-gatewayGloo GatewayglooHasurahasuraHelicone AI Gatewayhelicone-gatewayHigresshigressKong GatewaykongKong AI Gatewaykong-ai-gatewayKong Konnectkong-konnectKrakenDkrakendLiteLLM ProxylitellmMartian GatewaymartianNot Diamondnot-diamondPortkey AI GatewayportkeyRequestyrequestySpring Cloud Gatewayspring-cloud-gatewayTyk GatewaytykUnifyunify-aiVercel AI Gatewayvercel-ai-gatewayWSO2 API Managerwso2-api-managerZuulzuulApigeeapigeeAgent Gatewaygoogle-agent-gatewayAPI Gatewaygoogle-api-gatewayApigee hybridgoogle-apigee-hybridCloud Endpointsgoogle-cloud-endpointsFirebase Data Connectgoogle-firebase-data-connectIBM API Connectibm-api-connectOCI API Gatewayoci-api-gateway
# yaml-language-server: $schema=../../schema/component.schema.json # Emissary-ingress: CNCF open source Kubernetes-native API gateway and L7 load balancer built on Envoy, # configured with CRDs (Mapping) or Service annotations. Authentication and rate limiting are delegated # to external AuthService and RateLimitService resources, so neither is active by default. schemaVersion: "1" type: "component" id: "emissary" kind: "api-gateway" provider: "default" docs: "https://emissary-ingress.dev/docs/" aliases: ["Ambassador"] defaults: managed: false rateLimiting: false properties: configApi: type: "enum" values: ["mapping-crd", "ingress", "service-annotation"] default: "mapping-crd" externalAuthService: type: "boolean" default: false