Example 12: Security (four layers, sidecar, policy-as-code)

[patterncatalyst]

Chapter

_docs/12-security.md — Security

Example Path

examples/12-security/

What to demonstrate

• Four concentric security layers (cloud, cluster, container, code)
• Sidecar pattern with Envoy/Istio for mTLS, JWT, rate limiting
• OPA policy-as-code enforcement
• Trusted identity headers from sidecar

Stack

• Infra: Minikube — Istio + OPA + LGTM
• Language: Python (FastAPI with auth middleware)
• Priority: Medium

Deliverables

• K8s manifests with Istio config
• OPA policies
• Service with security sidecar
• README.md
• verify.sh
• Flip chapter footer to verified