Auth Patterns: What to Use and When

Presented by Aaron Teague at IstioCon 2022.
One of the great things about Istio is that it provides a solid mechanism for service to service auth within a mesh using mTLS and AuthorizationPolicy
But what if the thing accessing your services is not in the mesh. What if it’s a person and not a process? What if it’s a customer instead of an employee in your organization? Suddenly, the options and tools to fulfill them become overwhelming. Let’s break down our patterns and tools to determine which to use and when.

[@connectvg23]

Loved the content . Tx

[@Kotoktokk]

For people watching, JWT = JSON Web Token, not Java web token

[@countbrapcula-espana]

Is that a config error at 9:21 showing ServiceEntry for Mongo that is outside the mesh using `location: MESH_INTERNAL`? Should it not be MESH_EXTERNAL?