paralus
access-controller
| paralus | access-controller | |
|---|---|---|
| 4 | 5 | |
| 932 | 71 | |
| 1.5% | - | |
| 8.1 | 1.8 | |
| 15 days ago | over 2 years ago | |
| Go | Go | |
| Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
paralus
access-controller
- We built an open source authorization service based on Google Zanzibar
-
SpiceDB – production-ready, open-source Google Zanzibar implementation
This is very cool! Do you have any comparison with other Zanzibar OSS projects like https://github.com/ory/keto or https://github.com/authorizer-tech/access-controller ?
- Access Controller: A highly scalable implementation of Google's Zanzibar
-
AuthZ: Carta’s highly scalable permissions system
I've been working on a scalable open-source version of Google Zanzibar called the Authorizer platform. The implementation varies from that of Authzed by horizontally scaling the query space across more than one node. It uses consistent hashing with bounded loads to assign a specific node to serve the queries for the objects that it's responsible for. It also supports the namespace rewrite specification of the paper and the continuous namespace config monitoring. Much more progress is coming as well!
Take a look, I'd love feedback and to build it into something generally very valuable for the community!
https://github.com/authorizer-tech/access-controller
- access-controller: A highly scalable open-source implementation of an access-control engine inspired by Google Zanzibar
What are some alternatives?
rbac-police - Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego
spicedb - Open Source, Google Zanzibar-inspired permissions database to enable fine-grained access control for customer applications
kube-bench - Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
Ory Keto - Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.
kubeclarity - KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems
rbac-tool - Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query
terrascan - Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
casbin - An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN
pinniped - Pinniped is the easy, secure way to log in to your Kubernetes clusters.
aws-vault - A vault for securely storing and accessing AWS credentials in development environments
kube-oidc-proxy - Reverse proxy to authenticate to managed Kubernetes API servers via OIDC.
casbin-server - Casbin as a Service (CaaS)