Kong DevopsSpeakeasy at Kong Summit 2022, 29 Sep 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: #DevOpsSpeakeasy at #kongsummit22 with Michael Ludden (@michael_ludden)

Description

Restream helps you multistream & reach your audience, wherever they are.

A

Is here with me.

B

True welcome hello. Thank you.

A

We've been working on that composite.

B

A

uh I was glad to learn that you are here, as a speaker speak about congrulated.

B

A

Probably permissions related stuff yeah.

B

A little bit a little bit, I'm I'm, actually here in relief of our Chief Architect I, want to give him a shout out because he basically built the talk did all the the heavy lifting with the Kong integration initially. But yes, it is I who is here all.

A

Right, so what what did you speak about so.

B

We talked a little bit about what permit IO is the IAM space identity and access management, um authentication authorization, which is where we play. um Of course, we talked about how to integrate with Kong I did a live demo on that it's not very difficult, um thankfully, um and uh yeah that was about it.

B

Oh we also touched on uh actually today happens to be this wasn't initially the plan that it happens to be the release of our new uh attribute-based Access Control support, ABAC support, which is a really big deal for us and I think uh in general, because it allows for seamless scaling from our back role-based Access Control if you're familiar to ABAC attribute based access control. So.

A

um What's the relationship between uh API Gateway, con yeah and what experiment does.

B

Well, essentially, um it's a a way that you can. uh You can use the uh open source, Opa plugin, open policy administrator plugin to integrate and to tell permit uh what policy to enforce. Essentially, so, that's essentially the relationship.

A

Okay- and this leaves in the cloud and talks with the API Gateway.

B

Yep yep, that's right.

A

To make sure that if.

B

So the permit uh the policy Administration aspect lives in the cloud and permits Cloud, there's also a local agent, the PDP, it's a sidecar that sits ideally next to an application locally and enforces the policy that gets set via Cloud. So if the cloud goes away or the network is down, uh you can still make updates check and uncheck. We have a policy front end that you can basically check boxes to set. Who can do what and what uh what um what users can do?

B

What and you can still do that, even with the networks down, because there is a local PDP running as a sidecar. Next to the app.

A

And the integration is with API Gateway to enforce. Who can do what, behind this particular API.

B

Yeah, so basically you can choose whatever authentication provider. You want there's even a basic authentication uh solution via Kong Gateway. uh If you use auth zero or you use OCTA or you use something else, AWS Cognito, you can use those and then you can use Kong as the administrator leveraging the Oppa plugin and then that talks to permit Etc.

A

Right so once we know who this user.

B

A

Will ask permit what what this user can do? Well,.

B

A

And when we are talking about apis, it's basically are they allowed to access this API yeah and which operations they are allowed to do. Okay, yes,.

B

Exactly exactly yeah yeah and we did a little demo showing how you can easily do this. um So you can, you know we did a. We did an admin user that has the right to get on index uh and then we did a little HC uh Postman request and it showed Oh. Okay, it's authorized and then you uncheck uh get and then suddenly uh you get it. You get a I think it was a 403 error. So yeah thanks.

A

Almost perfect, as long as the only the Improvement you can make is using insomnia instead of Postman.

B

I'm I'm Switzerland I'm, Switzerland I'm.

A

Not getting involved, okay, fair enough, fair enough, fair enough, yeah yeah! Actually in.

B

A

It's it's very exciting.

B

A

It's like I.

B

Take your recommendations, group.

A

Seriously, this code instead of notepad.

B

Oh okay, easy all right: I love, BSE, yeah,.

A

B

A

B

We'll do excellent.

A

Michael. Thank you very much.

B

Thanks for having me.

A

Your folks checked the permission I o con integration because you do need to oh to control. What can people do or cannot do in your abs.

B

If you weren't able to make the talk, I know they weren't the this one wasn't happened to not be recorded, uh show camera who I mentioned at the top of this wrote a blog post. So if you go to permit, I o and go to our blog, you can actually read through essentially what we talked about on the talk, excellent.

A

B

A

Of the blog post.

B

A

Will reply to this tweet.

B

A

Also in con YouTube, you can add comment there as well, so we will know where to find this awesome stuff with that Michael. Thank you very much.

B

Thank you awesome. Thank you.