[misterbowfinger]

https://istio.io/docs/concepts/network-and-auth/auth.html

No option for OAuth2 or JWT? Maybe I'm not understanding the problem Istio solves vs. Envoy

[wenchenglu]

Good question. The auth work for this release is mainly focusing on service-to-service authentication. We are looking into adding OAuth2 and JWT support for enduser auth in the future release.

Disclaimer: I work on Istio

[wenchenglu]

BTW, if you are interested in Istio auth future work, here is the list: https://github.com/istio/auth#future-work

Disclaimer: I work on Istio

[misterbowfinger]

thanks all!

[misterbowfinger]

Cool. Also - what does Istio use for persistence? I imagine it's gonna persist the data for auth'ing stuff somewhere.

[lookuptable]

If you're referring to where the key/cert is persisted, it's currently facilitated by Kubernetes' secrets and mounted into Envoy container

Disclaimer: I work on Istio