Istio’s Mixer: Policy Enforcement with Custom Adapters
summary
Explains how Istio Mixer maps request attributes to adapter instances and handlers, shows a simple custom adapter that checks whether a string is in a configured list and returns pass/fail, and describes adapter types: standalone (embedded) vs backend-backed. Demonstrates Open Policy Agent embedded in Mixer with Rego policies driving Bookinfo behavior, live reload of policies, an org-chart rule and a time rule (allow reviewers after 4pm) that hide or show reviews, and notes caching at Mixer and Envoy.
AI-written summary · about
chapters (24)
- 0:00Introduction
- 0:54What is Styra
- 2:08What are Policies
- 3:16Security Policies
- 4:23Policy Example
- 5:14Mixer
- 6:05Attributes
- 7:17Requirements
- 8:20Building a custom adapter
- 9:08Setting up the adapter
- 9:56Writing the runtime logic
- 10:12Configuring the policy
- 11:23Presentation overview
- 14:47Create a rule
- 15:12Define authorization instance data
- 15:44Handler configuration
- 16:21Demo
- 25:07OPA
- 25:38How do you log decisions
- 27:28Where do the policies start
- 28:19Does the Envoy filter for Mixer
- 29:02How to integrate Mixer with other policy engines
- 29:40Can a decision be cashed
- 30:11Mixer is a centralized component
related talks
27mIntroduction to Istio Configuration - Joy Zhang, Google
05mLightning Talk: Istio by Example - Josef Adersberger, QAware
01h 01mIstio Service Mesh & pragmatic microservices architecture
01h 01mMeshing Around with Istio
45mIstio to the Rescue
25mIstio for Node Developers
05mLightning Talk: How We Use Istio and OPA for Authorization
33mMircoservices the right way: an introduction to Istio