/istio-opa-demo

Demo for Istio with the Open Policy Agent in-process adapter

Primary LanguageHCL

Create an istio-enabled GKE cluster

cd infra
terraform init
terraform apply
gcloud container clusters get-credentials --region <REGION> <CLUSTER>
kubectl label namespace default istio-injection=enabled

Install mesh policy and ingress policy

kubectl apply -n istio-system -f authn/

Install OPA adapter resources

kubectl apply -f opa-mixer/

Install demo resources

kubectl apply -f httpbin/