Authorization

Once someone has been authenticated, what they can or cannot do depends upon authorization. Mixer plays an important role in authorization enablement in Istio. Let's learn about authorization through some examples:

1. First, let's switch to subset v2 of the reviews virtual service so that it shows black stars in the ratings (remember: review-1: no star, review-2: black stars, review-3: red stars(:

$ kubectl -n istio-lab patch vs reviews --type json -p '[{"op":"replace","path":"/https/www.packtpub.com/spec/http/0/route/0/destination/subset","value": "v2"}]'
virtualservice.networking.istio.io/ratings patched

$ kubectl -n istio-lab get vs reviews -o yaml | grep -B1 subset:
        host: reviews
        subset: v2

2. Refresh https://bookinfo.istio.io/productpage. You should see black stars in the ratings.

Authorization...