Recipe

Envoy config writer

Generate a minimal Envoy bootstrap config from a Nimbus license key, wiring the proxy to your private upstream without touching YAML by hand.

Overview

This recipe walks through the Nimbus CLI command that reads your active license, fetches the signed upstream endpoint list, and writes a ready-to-use envoy.yaml. The output includes SDS credentials, cluster definitions, and a listener bound to 127.0.0.1:10000.

Prerequisites

Nimbus CLI v2.4+ installed and authenticated
An active Pro or Enterprise license seat
Envoy binary on $PATH

Command

nimbus envoy init --out ./envoy.yaml

The CLI validates your license, pulls the latest endpoint manifest from the Nimbus CDN, and renders the config. No manual editing required.

Verification

Start Envoy with the generated config and confirm the admin interface reports a healthy cluster:

envoy -c envoy.yaml
curl -s http://localhost:9901/clusters | grep health_flags::healthy

Next steps

Once Envoy is running, point your application at 127.0.0.1:10000. See the credential rotation recipe for automated SDS certificate renewal.