Powering Automatic Authorization with live traffic demo - #54

Draft

ddelnano wants to merge 17 commits into

pixie-io:mainfrom

ddelnano:ddelnano/kubecon-2024-authz

Commits on Oct 8, 2024

Add otel collector config used for Kubecon 2024 authz demo testing
ddelnano
committed
5c310f5

Commits on Oct 10, 2024

Add spire demo deployment with load generation
ddelnano
committed
b6d2940
Add patches to replace opa rego file with bundle
ddelnano
committed
bd1e224
Add spark job that uses newer export format (xfcc)
ddelnano
committed
124e5db

Commits on Oct 11, 2024

Changes to get spark job to successfully output rego files that pass rego unit tests
ddelnano
committed
18eca34

Commits on Oct 14, 2024

Commits on Oct 15, 2024

Add placeholders for otel collector config that needs to be overriden
ddelnano
committed
a62fa36
WIP README
ddelnano
committed
6ed8185
Default allow policy
ddelnano
committed
de4e6e9
Change to default allow
ddelnano
committed
2c592cd
Change opa policy to default deny
ddelnano
committed
a8f1f8f
Add auto generated policy files from live traffic to opa bundle
ddelnano
committed
fefa73c
Use default allow rule
ddelnano
committed
33c5763
Deny all traffic
ddelnano
committed
1437990

Commits on Nov 15, 2024

Update policy bundle to allow all traffic
ddelnano
committed
3859c78
Apply live traffic opa policies (frontend and frontend-2)
ddelnano
committed
d151834