GATEWAY API - Ingress is DEAD! Long live Ingress!
Source: YouTube · That DevOps Guy · published Apr 10, 2025 · 23:19
The Gateway API is a modular, standards-based alternative to Kubernetes Ingress, designed to improve governance, security, and flexibility by separating traffic routing into distinct, governable components. It does not replace Ingress but offers a more scalable and secure solution for large organizations with complex infrastructure needs.
Key Takeaways:
• The Gateway API addresses Ingress limitations like vendor lock-in and lack of cross-namespace TLS certificate support 0:48.
• It introduces a modular design with GatewayClass (infrastructure), Gateway (traffic rules), and Route (application-specific routing) objects 10:01.
• Routes allow fine-grained traffic control, such as canary deployments via weight settings, without relying on annotations 14:17.
• Gateways can reference TLS secrets in different namespaces, enabling better security and governance 12:56.
• Ingress remains viable for small teams due to simplicity and ease of use, while Gateway API suits larger orgs needing granular control 21:44.
Ingress is not obsolete; Gateway API complements it as a more secure, modular API gateway framework rather than a direct replacement.
Sources:
- 0:48 Discusses challenges with Ingress annotations and vendor lock-in.
- 10:01 Explains GatewayClass, Gateway, and Route components.
- 14:17 Details route features like weighted load balancing for canary deployments.
- 12:56 Describes cross-namespace TLS certificate access.
- 21:44(https://www.youtube.com/watch?v=5D4
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
So we've been using Kubernetes. We have pods and we control those pods using deployments or Damon sets or stateful sets. We have configs and secrets. We load balance our pods using services. We wrap all this infrastructure up into Helm charts. And we expose our pods to the internet and to outside of our clusters using what's called an ingress. Now you may or may not know, but there is a new kid on the block. People like to think of it as ingress v2. Now what is that? Back in 2023, there was an announcement for Kubernetes about a new product or component called the gateway API. And today is just an informative video where we'll be talking about what the gateway API is, why it exists, the challenges it solves. I'll show you a quick working demo so you get the overview of how it's used. And s…