Back To Schedule
Thursday, October 29 • 9:00am - 9:40am
Make Keystone The Center Of Universe - How eBay Uses it in Multi-security Zones

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

We will share the experience how we use global keystone here at eBay, those are addressed by real questions:

The instances running in production environment have different security level than the ones running in development environment. Projects locates in high secured zones requires 2FA(Two Factor Authentication) to authenticate while others use password credential. We also introduced a more secured authentication method for service access - API Key, which restricts not only what project it would be grant access to but also where the key can be used. The dynamic project based policy makes that happen and easy to use/configure. We will take a deep look at it as well.

We also isolate the controlling services from the production services into the secured control plane. We enhanced the Keystone to a fully armed IAM(Identity & Access Management) and integrate all the control plane services with it.

We will also share the experience on how to reduce the PKIZ token size as for global keystone, the token size would increase per region basis.

  • eBay multi-environment security model

  • Fill the gap between keystone and a generic IAM

  • The answer to more secured service access - API Key

  • Dynamic Project Based Policy for API Key authentication & management

  • eBay global keystone journey

  • Make the token smaller!

avatar for Subbu Allamaraju

Subbu Allamaraju

Vice President, Expedia Inc.
Subbu is the Chief Engineer of cloud at eBay Inc. His team builds and operates a multi-tenant geographically distributed OpenStack based private cloud. This cloud now serves 100% of PayPal web and mid tier workloads, significant parts of eBay front end and services, and thousands... Read More →
avatar for Xiaogang Xin

Xiaogang Xin

Cloud Engineering Manager 云工程师经理, eBay
Xiaogang Xin is the manager of eBay Cloud team. He has worked in infrastructure cloud area for many years, with deep understanding of Kubernetes and its enterprise-level transformation. He is currently responsible for large scale Kubernetes cluster DevOps at eBay which host complex... Read More →

Thursday October 29, 2015 9:00am - 9:40am JST

Attendees (0)