CloudOpen 2022

Part of the beauty of the cloud-native ecosystem is its rich selection of best-of-breed solutions that span the entirety of the software development lifecycle: from datastores, to CICD pipelines, to programming languages, to test frameworks. The challenge, however, is that all of these different projects and components need to be independently configured to meet security, compliance, and operational mandates. In this talk we focus on the problem of authorization (controlling which users and machines can perform which actions on software) and how to solve that authorization problem across many different kinds of software using the CNCF's graduated Open Policy Agent. OPA has been used by 100s of companies all over the planet to solve a plethora of authorization challenges in different domains, e.g. Kubernetes, service-meshes, infrastructure-as-code, SSH guardrails, and application-level authorization. For a new user, the challenge is understanding how to apply OPA to solve their own authz challenges. This talks helps by describing the 4 most popular design patterns for OPA and giving the audience pointers to documentated examples of how leaders in the cloud-native space (e.g. Pinterest, Atlassian, Goldman Sachs), have applied those patterns successfully.

Dates

Author

Conferences

Tags

Design Patterns for OPA and Cloud Native Authorization

tldr - powered by Generative AI