orweis

Hi there! I appreciate the concern - But note that Permit elements allow you to delegate access control to any one of your team members, end users, or customers - as it uses a simple no-code UI to do that, It could allow your security team easier access to overview the entire process, and thanks to Permit.io building on policy as code you always have full control of the generated flow via Git.

Of course - You can grab time with us here: https://calendly.com/permitio

Thank you for the congrats and the good question. First of all building on your own, is a valid option- each application is a snowflake you should find what's best for you. That said, just like with cryptography, and authentication, it can be risky to roll your own. If you decide to roll on your own with OPA - I'd also recommend sticking to best practices [Gitops is just one] (checkout this talk I gave on OWASP- https://youtu.be/1_Iz0tRQCH4) , and also finding a solution for managing the authorization layer (e.g. https://opal.ac)

To this point specifically- "Do you offer a way of auditing and tracking who made changes to permissions" - Yes, check out Permit's audit-log interface

In general on top of the interfaces you get with OSS like OPA and OPAL, there are a lot more interfaces to build (e.g. audit logs, user mgmt, policy editing, approval flows, etc.) and none of them are unique to any application.

I'd say this is somewhere between Aserto.com and https://www.permit.io

More fullstack than Aserto, but less than Permit.

More pure API play, but less than Aserto.

Compared to both Permit and Aserto, Warrant seems to lack open-source standards (e.g. Open Policy)

This launch and discussion is pretty exciting!

I have to say I really connect with your feedback, I had exactly the same thoughts when building Permit.io: the K8S sidecar (called PDP) and frontend management experiences on top (RBAC, audit logs, invite s, ...) Are really at the core of it.

Like Akajla said, a local Policy Decision Point (PDP) can solve outages really well.

An open-source event-driven engine like OPA+OPAL which can keep the PDP up to date is an easy way to approach this in scale (that's what we use as part of Permit.io)

There's a reason why there are two lists of different company sizes.

K8S and general cloud migration grows the overall cloud market, and Google-Cloud benefits from it a lot.

For all companies these projects help with building communities and recruiting, which is a top priority for such companies.

But the most important point is that an alternative to open-core is needed, and open-foundation has all the mechanics to fill in the gap.

Yep. The trouble is the butterfly effect here can be overwhelming. Open-source has always been a one-way door, and now the price of getting it wrong have increased. But it's not too hard to get it right, that's why I'm suggesting the open-foundation framework here

Thank you :) Excited to bring easy permissions for everyone.

Cool. Does this work well also for feature set building? Do you have a recommended workflow ?

Hello, everyone! We're happy to share we just shipped this huge new open-source project - OPAL. OPAL adds real time updates to OPA (open-policy-agent) using a live websocket Pub/Sub channel- making building access control for your products much easier. Would love your stars and feedback And of course - you're more than welcome to try it.

https://github.com/authorizon/opal https://opal.ac

Also happy to take questions here :)

With all the love for K8s - this post is spot on in many points.

Especially around accessing containers and observability. But ... That's where modern solutions of virtual-logging come in: e.g https://Rookout.com

When your software connects back to you and you can instrument it on the fly (Add logs line, non-breaking-breakpoints, etc.) most of these pain points are resolved

Do you mean something like this? (Rookout.com) https://youtu.be/bAxNWg6QYL8?t=62

Python, NodeJs, and JVM (Java, Scala, etc.) :)

Really good question. I guess it's just really hard to do.

I would love to hear more about your view; What's your take on "CyberWarfare". Also if you could state your credentials/background that would be awesome. :)

Sleek simple solution, just like bittorrent.

Wonder if it can be used to peer-to-peer other stuff, other than file downloads. CDN boosting ? Ajax broadcast content ( e.g. NewsFeeds, live marketing notifications )?