Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Evaluate and select an authorization service #2702

Open
olevski opened this issue Sep 21, 2022 · 1 comment
Open

Evaluate and select an authorization service #2702

olevski opened this issue Sep 21, 2022 · 1 comment

Comments

@olevski
Copy link
Member

olevski commented Sep 21, 2022

A previous issue/POC showed how we can use several different authorization services in Renku.

The options were:

  • Keycloak
  • Open policy agent
  • SpiceDB

We should do some performance testing and decide which service we should use.

The performance test can include the following:

  • How fast is a single authorization request evaluated?
  • How fast are queries such as the following answered:
    • What types of access does user A have on resource X
    • Which projects (or other type of ID) can user A access with permission X (i.e. read)
@olevski
Copy link
Member Author

olevski commented Sep 21, 2022

Propose to timebox to 2 or 3 days

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

No branches or pull requests

1 participant