Episode 05: Security in Istio

What is the difference between authentication (authn) and authorization (authz)? What is mutual TLS and what does SPIFFE stand for? What is the difference between PeerAuthentication and RequestAuthentication? How can you use JWT tokens, Auth0 and RequestAuthentication to authenticate users? All this is explained in Istio Weekly episode 5 where we talk about security in Istio. You'll learn about the difference between authentication and authorization. We'll show you how to enable mutual TLS with peer authentication, use request authentication with Auth0, and how to control access to your workloads with the authorization policies. Demo and resources from this episode: https://github.com/tetratelabs/istio-... #istio #istioweekly#security #mtls #auth0 #jwt #requestauthentication ▬▬▬▬▬▬ Timecodes ▬▬▬▬▬▬ 00:20 Introduction / weekly highlights and news 04:42 Security in Istio introduction 06:33 What is authentication? 09:56 Mutual TLS 13:56 PeerAuthentication resource 16:06 Authenticating users with RequestAuthentication resource 18:06 What is authorization? 24:29 Q&A 27:23 DEMO (Auth0 and Istio) 36:23 Q&A 42:08 Closing thoughts ▬▬▬▬▬▬ Episode links/notes ▬▬▬▬▬▬ News: → Zero Trust Architecture (SP 800-207): https://csrc.nist.gov/publications/de... → Building Secure Microservices-based Applications Using Service-Mesh Architecture (SP 800-204A): https://csrc.nist.gov/publications/de... → Attribute-based Access Control for Microservices-based Applications Using a Service Mesh (SP 800-204B): https://csrc.nist.gov/news/2021/draft... → Why you should choose NGAC as your access control model: https://tetr8.io/choose-ngac → Offload authn/authz to the mesh: https://tetr8.io/service-mesh-auth → Service mesh as security kernel: https://tetr8.io/mesh-security-kernel Events: → July 8th - Istio Weekly #6: Envoy fundamentals:    • Episode 06: Envoy Fundamentals   ▬▬▬▬▬▬ Connect ▬▬▬▬▬▬ Join Tetrate Community on Slack: https://tetr8.io/tetrate-community Follow us on Twitter:   / tetrateio   Follow us on LinkedIn:   / tetrate   Past episodes: http://tetr8.io/istioweekly ▬▬▬▬▬▬ Participate ▬▬▬▬▬▬ Suggest an episode: https://tetr8.io/tetrate-community Have a question about this episode? Comment below or in Tetrate Community Slack