Lightning Talk: How We Use Istio and OPA for Authorization
I'd like to introduce how we use istio + OPA to do authorization in HP's FitStation platform. Our project consists of 20+ micro-services which are written in Golang and running on Kubernetes with ist …
| Talk Title | Lightning Talk: How We Use Istio and OPA for Authorization |
| Speakers | Lin Tao (Software Engineer, HP) |
| Conference | KubeCon + CloudNativeCon |
| Conf Tag | |
| Location | Shanghai, China |
| Date | Jun 23-26, 2019 |
| URL | Talk Page |
| Slides | Talk Slides |
| Video | |
I’d like to introduce how we use istio + OPA to do authorization in HP’s FitStation platform. Our project consists of 20+ micro-services which are written in Golang and running on Kubernetes with istio enabled. These services are divided into multiple layers and on each layer we apply different authorization via istio mixer and OPA. I’d like to give a high-level introduction on how we make this work, following topics will be covered: - how we leverage istio adapter to do authorization - how we integrate OPA into our micro-services - how we manage our OPA policies
