Some of the advanced topics of Istio authentication and authorization are beyond the scope of this book. The following is a brief description of a few important ones:
- Istio authorization allows us to work with JSON Web Tokens (JWTs) and open source OpenID connect providers such as Google Auth, Auth0, and ORY Hydra. Refer to https://archive.istio.io/v1.3/docs/concepts/security/ for how to apply authentication policies for JWT and OpenID.
- Istio can integrate with Hashicorp's Vault CA to secure, store, and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets, and other sensitive data.
- Istio multi-cluster installation, control plane replication, and creating shared control planes using single or multi-networks are not explored in this book. Refer to https://archive.istio.io/v1.3/docs/setup/install/multicluster...