Business applications of today stress a lot on authorization and policy handling. However, authorization and policy are complex to achieve in cloud-native environments. Security & compliance problems need to be addressed early on in the development & deployment cycles. Software & feature releases happen in minutes. To support this, the outdated methods of writing policies via PDFs and emails are not going to work. This is where Open Policy Agent came into force so that security & compliance can be enabled by machines and the software can adhere to all necessary requirements. It’s suitable for cloud-native environments and is widely used for Kubernetes admission control spanning major cloud providers. OPA is also used for on-prem deployments clubbed with HTTP API authorization, remote access policy, and data filtering. In this webinar, our expert will walk you through HTTP Authorization using OPA along with service mesh and how it aids inter-service communication. Book your spot now and don’t miss. Subscribe to the channel if you would like to learn more such insights: http://bit.ly/2TksG9H

1. HTTP authorization
using OPA
Presented By: Lokesh Aggarwal
Software Consultant
Knoldus Inc.
LEARN NOW

2. About Knoldus
Knoldus is a technology consulting firm with focus on modernizing the digital systems
at the pace your business demands.
DevOps
Functional. Reactive. Cloud Native

3. 01 01What is Service mesh
02 02Don’t microservices already do this?
03 03What is OPA??
04 04Internal working of OPA
05 05Different components of Rego
Our Agenda
06 Demo

4. A service mesh is a dedicated infrastructure layer for making service-to-service
communication safe, fast, and reliable. If you’re building a cloud native application, you
need a service mesh. Open source projects provides which provides service mesh.
- Istio
- Linkerd
What is Service Mesh?

5. Don’t microservices already do this?

6. How does Service mesh work?
- As your request for this page went out, it was first received by your
company’s web proxy…
- After passing the proxy’s security measure, it was sent to the server that
hosts this page…
- Next, this page was returned to the proxy and again checked against its
security measures…
- And then it was finally sent from the proxy to you.

7. A sidecar proxy sits alongside a microservice and routes requests to other proxies.
Together, these sidecars form a mesh network.

8. - Within a complex microservices architecture, it can become nearly impossible to
locate where problems have occurred without a service mesh.
- Circuit breaker
- authorization
How can a mesh optimize communication?

9. What is OPA??
The Open Policy Agent (OPA,
pronounced “oh-pa”) is an open
source, general-purpose policy
engine that unifies policy
enforcement across the stack.
OPA provides a high-level
declarative language that let’s
you specify policy as code and
simple APIs to offload policy
decision-making from your
software. You can use OPA to
enforce policies in microservices,
Kubernetes, CI/CD pipelines, API
gateways, and more.

10. c
Difference b/w
authorization and
authentication
Authorization means being
allowed access to the
system.Authorization occurs
after your identity is
successfully authenticated by
the system, which therefore
gives you full access to
resources such as
information, files, databases,
funds, etc.
LEARN OW
Authentication means
confirming your own
identityor or is the process of
verifying oneself

11. Reply with true or false
Service
Mesh
Internal working of OPA
Request
Envoy OPA
Micro-service

12. Different components of Rego
Functions
- Rego support user-defined functions
- Function with parameter
- Function without parameter

13. Rules
- Functions can replace by rule but a rule can’t replace by functions.
- A Rule can be exposed as a policy definition but function can’t.
- Functions are a subset of Rules.
- We can’t define two functions with the same name in the same module but rules can
be defined.

14. Operators
- Rego supports multiple operators like ==, <, >=, := etc.
- Assignment operator (:=)
- Comparison operator (==)
- Unification operator (=)

15. Searching and Default Keyword

16. Thank You!
@lokesh.aggarwal@knoldus.com
@lokesh-aggarwal-042691138
@lokesh090297