Secure UI + Microservices within Kubernetes using OPA Authorization

on YouTube ↗09m

" summary

Shows how Open Policy Agent (OPA) plus Rego policies act as a centralized PDP for Kubernetes microservices and UIs, using an in-memory PDP cache and policies-as-code so authorization decisions are fast and testable. Describes a hospital deployment that handles device offline vs online sync and multi-tenant role/attribute rules, and demos a UI where add/edit/delete buttons and components are hidden or shown by OPA decisions in real time, proving the approach works.

AI-written summary · about

" related talks

• 42mDesign Patterns for OPA and Cloud Native AuthorizationTim Hinrichs · CloudOpen @ Open Source Summit North America 2022
• 16mDistributed application level RBAC with OPAFederico Maggi · Conf42 Cloud Native 2022
• 25mPolicing Your Kubernetes Clusters with Open Policy Agent (OPA) - Mark Puddick & Amith NambiarMark Puddick, Amith Nambiar · Kubernetes Forum Sydney 2019
• 25mPolicing Your Kubernetes Clusters with Open Policy Agent (OPA)Mark Puddick, Amith Nambiar · Kubernetes Forum Seoul 2019
• 19mDynamic Authorization and Policy Control for Your Kubernetes ClusterAsh Narkar · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 34mFine-grained Authorization in a Containerized WorldAsh Narkar · Open Source Summit + Embedded Linux Conference North America 2019
• 56mDistributed Authorization for Microservices Powered by Kubernetes, Istio and Open Policy AgentGong Mengnan · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 27mSecurity-by-construction: How to weave authorization into modern app stacks using Open Policy AgentTim Hinrichs · OpenInfra Summit 2020