Where to configure relations for self-hosted keto? #1450
Unanswered
WoodyWoodsta
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I've got a self-hosted Ory stack set up in kubernetes.
I've spent a day or so trying to figure out how to set up a simple subject-group-object access control ruleset. I'm now clear on subject-sets, to be used for implicit access to objects via groups, but what is very unclear to me is how to configure relations.
After stringing together various bits of documentation between ory network and ory self-hosted sections of the site, as well as PRs and issues, it seems like there are 3 ways to setup the relations:
namespaces
For 1, where should this OPL file be and does it completely replace any namespaces specified in the config file?
For 3, a few PRs and issues mention providing a config for each namespace, which I assume would have the relation tuples in that, but in the json schema, the
config
object just has "to be defined" and I don't seem to be able to find any documentation around that.What is the recommended way for setting up the graph?
Otherwise, thank you for a great set of tools. Once you get around the learning curve of how each component works, it's great software!
Beta Was this translation helpful? Give feedback.
All reactions