TitelTable of contents1. Airlock Secure Access Hub1.1. Semantic versioning scheme for Airlock Secure Access Hub components2. About this document2.1. Leveled prerequisites2.2. Warning tiers in this document2.3. Additional panel types2.4. Advanced Lucene searches within this online help3. About Airlock Microgateway3.1. Airlock Microgateway editions and support3.2. About releases4. How to establish security controls4.1. Empower your counterpart4.1.1. Blueprints4.1.2. Templates4.1.3. Enforce policies4.1.4. Assess the active configuration4.1.5. Monitor and analyze4.1.6. Education and guidelines4.1.7. Establish GitOps principles4.1.8. Staging5. Getting started – installation and follow-ups5.1. Online labs6. System architecture6.1. Kubernetes cluster without a service mesh6.2. Kubernetes cluster with an Istio service mesh7. Setup requirements and installation information 7.1. Requirements and Limitations7.2. Container image repositories and registries7.2.1. Verify the image signature7.2.2. Using a custom image registry7.3. Installation7.3.1. Kubernetes7.3.2. OpenShift7.3.3. Istio8. Configuration8.1. Microgateway Operator8.2. Microgateway Network Manager8.3. Microgateway Engine8.3.1. CR SidecarGateway9. Integration tasks9.1. Annotations for Microgateway Engine injection9.2. Deny rule exceptions for JSON content9.3. Integration mode for CR HeaderRewrites10. Operation10.1. Licensing and license-dependent behavior10.2. Logging configuration10.3. Microgateway as a data source for Prometheus metrics11. Tooling11.1. Completion, validation and tooltips in Visual Studio Code12. Troubleshooting and support12.1. Tips for troubleshooting12.2. Pod is not ready12.3. Check the matched Pods12.4. Listing the SidecarGateway status12.5. Envoy Admininistration interface12.6. Inspect the Envoy configuration12.7. Several SidecarGateway CRs point to the same Pod13. Reference documentation13.1. Airlock Microgateway API and OperatorConfig reference13.2. Available metrics in Prometheus format13.3. Default access log field reference13.4. Reference tables of built-in header lists13.5. License information