I've been building for some time a local production like environment running in Minikube, deployed in a single `terraform apply` command. The plan is to deploy in one command a couple of home made services, frontend, backend, some websockets in between, and have everything accessible over HTTPS via Ingress resources. That, and all the open source observability tools you can imagine (Grafana/Prometheus/Loki/Tempo), configured and running at once.

See https://github.com/chazapp/o11y.

These last few days I have decided to try getting Kubernetes Gateway API to work, using the implementation of Istio. I have written an `auth` microservices which provides JWTs and published a public JWKS endpoint, and intend to have the API gateway validate tokens and claims to allow access to other services. The plan being to write API services without any knowledge of the authentication systems that happen upstream. If a request reaches them, it's that it had been validated before !