Container Network Authorization with Envoy

Envoy is a networking abstraction for cloud-native applications. OPA hooks into Envoy’s external authorization filter to provide fine-grained, context-aware authorization for network or HTTP requests.

• https://github.com/open-policy-agent/opa-envoy-plugin
• https://github.com/tsandall/minimal-opa-envoy-example

• https://github.com/tsandall/minimal-opa-envoy-example/blob/master/README.md
• https://www.openpolicyagent.org/docs/latest/envoy-introduction/

• OPA at Scale: How Pinterest Manages Policy Distribution - OPA Summit at Kubecon San Diego 2019
  • Will Fu - pinterest
  • Jeremy Krach - pinterest
• Deploying Open Policy Agent at Atlassian - OPA Summit at Kubecon San Diego 2019
  • Chris Stivers - atlassian
  • Nicholas Higgins - atlassian
• How Yelp Moved Security From the App to the Mesh with Envoy and OPA - Kubecon San Diego 2019
  • Daniel Popescu - yelp
  • Ben Plotnick - yelp

• https://blog.openpolicyagent.org/envoy-external-authorization-with-opa-578213ed567c

• Envoy in the OPA Ecosystem
  • envoyproxy.io

• Styra in the OPA Ecosystem
  • styra.com