product · inferred from evidence
Cerbos
A policy decision point system that can use a git storage driver.
- Cerbos requires restart to load updated schemas admin store reload
Cerbos does not reload schema changes automatically the way it reloads policy changes, on both the disk and blob (AWS S3) storage drivers. Hitting the /admin/store/reload endpoint reloads policies but schemas stay stale, forcing a full PDP
- Cerbos git storage fail knownhosts key mismatch ssh
Cerbos with the git storage driver (protocol ssh, cloning from github.com) fails to start with a `knownhosts: key mismatch` error. The SSH known_hosts inside the container does not match GitHub's current host keys.
- Cerbos sidecar git-pull failed to pull from remote worktree contains unstaged files
The Cerbos sidecar (git-pull) fails refreshing git-based policies with: "Failed to pull from remote", worktree contains unstaged files. Policy updates stop being pulled into the PDP.