Data

Tools

Indexes

Applications

Experiments

Open Source Science

https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio

https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio

Science Score: 13.0%

This score indicates how likely this project is to be science-related based on various indicators:

  • ○
    CITATION.cff file
  • ✓
    codemeta.json file
    Found codemeta.json file
  • ○
    .zenodo.json file
  • ○
    DOI references
  • ○
    Academic publication links
  • ○
    Academic email domains
  • ○
    Institutional organization owner
  • ○
    JOSS paper metadata
  • ○
    Scientific vocabulary similarity
    Low similarity (11.3%) to scientific vocabulary
Last synced: 10 months ago · JSON representation

Repository

Basic Info
  • Host: GitHub
  • Owner: awslabs
  • License: apache-2.0
  • Language: Go
  • Default Branch: master
  • Size: 101 KB
Statistics
  • Stars: 4
  • Watchers: 48
  • Forks: 3
  • Open Issues: 2
  • Releases: 0
Archived
Created almost 6 years ago · Last pushed almost 6 years ago
Metadata Files
Readme Contributing License Code of conduct

README.md

AWS ALB Route Directive Adapter For Istio

AWS alb route directive adapter for istio is used in Kubeflow AWS Coginito manifest as part of the Authentication and Authorization offering.

Authentication - After your load balancer authenticates a user successfully, it sends the user claims received from the IdP to the target. The load balancer signs the user claim so that applications can verify the signature and verify that the claims were sent by the load balancer. The load balancer adds the HTTP headers x-amzn-oidc-data which is user claims, in JSON web tokens (JWT) format.

Authorization - Route directives enable Mixer adapters to modify traffic metadata using operation templates on the request and response headers. AWS alb route directive adapter for istio decode x-amzn-oidc-data and retrieve email field and add custom http header kubeflow-userid: alice@amazon.com which will be used by Kubeflow Authorization layer.

This repo is built from Route directive adapter development guide. If you meet any problems, please follow that instructions.

Compability

  • This is originally built with istio 1.1.x. In istio 1.2.x, Adapter was removed and you have to enable it manually. Check change notes
  • This is not limited to Kubeflow usage. You can use it for any similar use case and customize it.

Development Instruction

Istio Local Copy

If you don't have isito, please download nad build a local copy of istio

mkdir -p $GOPATH/src/istio.io/ cd $GOPATH/src/istio.io/ git clone https://github.com/istio/istio cd istio go build ./...

Download code

Clone this repo and put it under $GOPATH/src/istio.io/isito.

Build binary

bash cd $GOPATH/src/istio.io/istio GO111MODULE=off CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o authzadaptor/authzadaptor ./authzadaptor/main/main.go

Build container image

bash docker build -t seedjeffwan/istio-adapter:0.1 authzadaptor

Regenerate codes

If you want to start from scratch, you can follow instruction to generate codes.

```bash cd $GOPATH/src/istio.io/istio

bin/mixercodegen.sh -t authzadaptor/template.proto bin/mixercodegen.sh -a authzadaptor/config/config.proto -x "-s=false -n authzadaptor -t authzadaptor” ```

Security

See CONTRIBUTING for more information.

License

This project is licensed under the Apache-2.0 License.

Owner

  • Name: Amazon Web Services - Labs
  • Login: awslabs
  • Kind: organization
  • Location: Seattle, WA

AWS Labs

GitHub Events

Total
  • Watch event: 1
Last Year
  • Watch event: 1

Issues and Pull Requests

Last synced: about 2 years ago

All Time
  • Total issues: 2
  • Total pull requests: 2
  • Average time to close issues: N/A
  • Average time to close pull requests: less than a minute
  • Total issue authors: 1
  • Total pull request authors: 1
  • Average comments per issue: 0.0
  • Average comments per pull request: 0.0
  • Merged pull requests: 2
  • Bot issues: 0
  • Bot pull requests: 0
Past Year
  • Issues: 0
  • Pull requests: 0
  • Average time to close issues: N/A
  • Average time to close pull requests: N/A
  • Issue authors: 0
  • Pull request authors: 0
  • Average comments per issue: 0
  • Average comments per pull request: 0
  • Merged pull requests: 0
  • Bot issues: 0
  • Bot pull requests: 0
View more stats
Top Authors
Issue Authors
  • Jeffwan (2)
Pull Request Authors
  • Jeffwan (2)
Top Labels
Issue Labels
Pull Request Labels

Packages

  • Total packages: 1
  • Total downloads: unknown
  • Total dependent packages: 0
  • Total dependent repositories: 0
  • Total versions: 0
proxy.golang.org: github.com/awslabs/aws-alb-route-directive-adapter-for-istio

Package authzadaptor is a generated protocol buffer package. It is generated from these files: It has these top-level messages:

  • Versions: 0
  • Dependent Packages: 0
  • Dependent Repositories: 0
Rankings
Dependent packages count: 7.0%
Average: 7.2%
Dependent repos count: 7.5%
Last synced: 11 months ago

Dependencies

Dockerfile docker
  • scratch latest build