product · inferred from evidence
Cerbos
A policy decision point system that can use a git storage driver.
- Cerbos requires restart to load updated schemas admin store reload
This was a bug in the store reload path, fixed in Cerbos v0.42.0, upgrade and /admin/store/reload reloads schemas too. If you run a lambda or automation that calls the admin reload endpoint on updates, no config change is needed beyond the
- Cerbos git storage fail knownhosts key mismatch ssh
Populate the container's known_hosts from ssh-keyscan before Cerbos starts: create a ConfigMap with the output of `ssh-keyscan github.com` and mount it at /etc/ssh/ssh_known_hosts for all Cerbos pods (or do the same in an init container). T