Integrate Casbin into Istio about envoy-authz HOT 8 CLOSED

OK. @ashish493 @ComradeProgrammer plz note that our final goal would be becoming a 3rd-party authorization solution for Istio like: https://istio.io/latest/blog/2021/better-external-authz/

from envoy-authz.

@ashish493

from envoy-authz.

@hsluoyz ,Could you create a new repositiory for this plugin?
I'm thinking to create a Envoy based casbin plugin which could be plugged into any service mesh which allows envoy proxies.

For the Istio use case, the proxy has to get deployed on the k8s cluster. For this to work, external authorization in envoy should be enabled. The proxy would then filter all the requests through Casbin before sending them to any service.

from envoy-authz.

@ashish493 created here: https://github.com/casbin/envoy-authz

from envoy-authz.

@ComradeProgrammer plz test this envoy-authz middleware based on the official guide: https://istio.io/latest/docs/tasks/security/authorization/authz-custom/

from envoy-authz.

@hsluoyz , I have only added the deployment file and Dockerfile for server. I still need to create the grpc server(for authorizing all queries through casbin) which is under construction.

from envoy-authz.

So do I still need to test this middleware, or shall I wait for the implementation of grpc server?
@hsluoyz

from envoy-authz.

Done at: https://github.com/casbin/envoy-authz

from envoy-authz.