Container Network Authorization with Envoy
Official OPA Envoy Integration
Envoy is a networking abstraction for cloud-native applications. OPA hooks into Envoy’s external authorization filter to provide fine-grained, context-aware authorization for network or HTTP requests.
Blogs:
- Envoy External Authorization With OPA (blog.openpolicyagent.org)
Code:
- Open Policy Agent > OPA Envoy Plugin (github.com)
- Tsandall > Minimal OPA Envoy Example (github.com)
Videos:
- OPA at Scale: How Pinterest Manages Policy Distribution - OPA Summit at Kubecon San Diego 2019
- Will Fu - pinterest
- Jeremy Krach - pinterest
- Deploying Open Policy Agent at Atlassian - OPA Summit at Kubecon San Diego 2019
- Chris Stivers - atlassian
- Nicholas Higgins - atlassian
- How Yelp Moved Security From the App to the Mesh with Envoy and OPA - Kubecon San Diego 2019
- Daniel Popescu - yelp
- Ben Plotnick - yelp
Tutorials:
- Tsandall > Minimal OPA Envoy Example > Blob > Master > README.md (github.com)
- Docs > Latest > Envoy Introduction (openpolicyagent.org)
Category: servicemesh
Layer: network
Layer: network