CodersSecret

Course guide

Centralized Authentication with Envoy Course

Learn centralized authentication and authorization with plain Envoy, JWT/JWKS, SSO, ext_authz, tokens, and Kubernetes product routing.

Maintained by Vishal Anand.

This free course teaches how to design one consistent auth layer for many Kubernetes products. You will start with a Google-style mental model, then learn plain Envoy routing, JWT/JWKS validation, SSO delegation, service tokens, federated credentials, authorization boundaries, and production scaling.

Who Should Take This Course

Take this course if you own internal products, APIs, data tools, developer portals, or Kubernetes services that need a shared authentication and authorization architecture.

Learning path

Continue from concept to implementation

These course modules place this topic in context, connect it to adjacent decisions, and provide the practical next step.

Module 1

Google-Style Login for Many Kubernetes Products

Start with the Gmail, YouTube, and Google mental model: one account, many products, consistent identity.

70 minutes | 4 learning objectives

Module 2

Auth Vocabulary: SSO, SAML, OIDC, JWT, JWKS, and Tokens

Learn the words first so the architecture stops feeling mysterious.

85 minutes | 4 learning objectives

Module 3

Plain Envoy as the Central Front Door

Route product traffic through a single Envoy edge before adding auth filters.

80 minutes | 4 learning objectives

Practical outcomes

What the recommended module teaches

  • Explain centralized authentication using the explicit Google, Gmail, and YouTube example
  • Map the same idea to Kubernetes products behind a shared Envoy edge
  • Separate login, token validation, authorization, and product-specific permissions
  • Decide what should be centralized and what should stay inside each product