~/talk

Protecting the Data Lake

on YouTube 38m
Talkat KubeCon + CloudNativeCon Europe 2019 · on Thursday, 2019-05-23· at 14:50· Hall 8.0 B1· [security, data-engineering]

speaker

name:Ash Narkar
linkedin:ashutoshnarkar

resources

video:https://youtu.be/9m4FymEvOqM
slides:none on file

summary

Shows a working integration that puts Open Policy Agent (OPA) in front of Ceph object storage deployed on Kubernetes with Rook, where the RADOS gateway queries OPA and OPA returns JSON decisions (not just allow/deny) to enforce attribute policies such as location-based bucket access (Bob in USA can read an USA bucket; Alice in UK cannot). Also outlines Kafka and Elasticsearch adapters, the Rego language and an interactive play.openpolicyagent.org tutorial; claims meet strict latency and availability requirements.

AI-written summary · about

chapters (14)

  1. 0:00Start
  2. 1:16Data is King!
  3. 2:50Data Lake Features • Controlled Content
  4. 5:03Data Lake Platform: Kafka
  5. 6:38Data Lake Platform: Ceph
  6. 7:34Data Lake Platform: Elasticsearch
  7. 8:27Security Challenge Overview
  8. 11:09OPA: Community
  9. 12:01OPA: General-purpose policy engine
  10. 13:07OPA: Features • Decorative Policy Language Regol
  11. 14:40How does OPA work?
  12. 15:473 Steps to OPA
  13. 23:14Ceph Data Protection: Setup
  14. 26:26Demo: Ceph Data Protection

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.