Lightning Talk: How We Use Istio and OPA for Authorization
summary
FitStation runs 20+ microservices in Golang on Kubernetes with Istio enabled and splits services into three layers. Layer 1 enforces coarse RBAC via an Istio mixer adapter that calls a centralized authorization service. Layer 2 uses a client library to query Open Policy Agent with a JSON payload (user, API, request) so policies enforce that a user can only access orders for their company. Layer 3 relies on network policies for internal-only services.
AI-written summary · about
chapters (4)
related talks
05mLightning Talk: How We Use Istio and OPA for Authorization
56mDistributed Authorization for Microservices Powered by Kubernetes, Istio and Open Policy Agent
13mLightning Talk: Enhancing Security with Istio: Realtime JWT Access Revocation
07mLightning Talk: Running Arbitrary Code Safely with Istio
23mAuthentication and Authorization in Micro Services
16mDistributed application level RBAC with OPA
09mSecure UI + Microservices within Kubernetes using OPA Authorization
26mFine-Grained User Authorization for Kubernetes with OPA and LDAP