product · inferred from evidence
Cerbos
A policy decision point system that can use a git storage driver.
- Query planner tests fail
[charithe (contributor)]: The cel-go evaluation bug behind these test failures was fixed in v0.15.2, so upgrading cel-go to v0.15.2 resolves this one. Note that v0.15.3 introduced fresh failures of its own, tracked separately in issue 1627.
- Explicitly assigning role to principal
Cerbos intentionally doesn't assign roles to principals inside its perimeter; roles are expected to arrive with each request from outside Cerbos, and maintainers say principal-to-role mappings are out of Cerbos' remit. If you need role-like
- Cerbos requires restart to load updated schemas admin store reload
Teaches the verified fix from a real cerbos-hub support thread: cerbos requires restart to load updated schemas admin store reload
- Cerbos git storage fail knownhosts key mismatch ssh
How to fix: Cerbos git storage fail knownhosts key mismatch ssh. The verified fix from the maintainer thread, distilled into reusable steps.
- Cerbos sidecar git-pull failed to pull from remote worktree contains unstaged files
Cerbos sidecar git-pull failed to pull from remote worktree contains unstaged files. The checkout directory contains unstaged content, usually inherited from the source git repository itself (e.g.
- Cerbos git storage fail knownhosts key mismatch ssh
What this covers: Cerbos with the git storage driver (protocol ssh, cloning from github.com) fails to start with a `knownhosts: key mismatch` error. The fix that worked: Populate the container's known_hosts from ssh-keyscan before Cerbos st