Microservice authorization can be enforced through a network proxy like Envoy/Istio/Linkerd/… or can be enforced by modifying the microservice code to use a common library. In both cases OPA makes the authorization decision that the network proxy or the library enforce.
Videos
-
How Netflix is Solving Authorization Across Their Cloud - Kubecon Austin 2017
- Manish Mehta - netflix
- Torin Sandall - styra
Labels
| Category | servicemesh |
|---|---|
| Layer | library |
Do you have an OPA-based project or integration to share? Follow
these instructions
to get it listed or go to the #ecosystem channel in the
OPA Slack
if you have any questions.