We pick a datastore based on your requirements.

Is there any way to invoke the debug function on a permission check in the python sdk?

you can send the debug header along

Not a python/grpc expert sorry - how can I do that. I tried adding a metadata clause and that gave me a grpc level error.

https://stackoverflow.com/questions/45071567/how-to-send-custom-header-metadata-with-python-grpc might have some insight

(I'm not an expect on gRPC in Python either :))

We read the same stuff. I followed that. If I pass io.spicedb.requestversion=1 (passing it twice per the post) it does the check but I don’t see anything different in the response. If I pass io.spicedb.requestdebuginfo=1 then I get an error “received RST_STREAM with error code 2”. If I change the prop by adding an X then the error goes away. That makes me think that the server recognizes it but fails in processing when it is spelled correctly.

are you trying this against authzed.com?

or against a locally SpiceDB?

Local. And I realize I’m way off the road here….

how are you running it?

Memory.yml docker-compose example (in datastores)

do you get the same error when trying to use

zed check --explain

?

Im on windows (a corporate machine) and I haven’t figured out how to run zed there. I’m trying this as a workaround to —explain. It’s a long,long way around

and this is on a check request?

you could try running

zed

in a container

Yeah, I’m trying that too. But I fell down this python rabbit hole and it should work. I’ll pivot back to trying to get zed going. If it works and python does not I’ll have another data point.

yeah

we've occasionally seen that RST_STREAM error before

but I've never been able to reproduce it

so if you can figure out how to do so repeatedly, and

zed

does work, that's good info

So now that I took the time I got zed to work in docker. I hate docker to docker networking. But the zed check works now and explain is giving me results. I guess I’ll bump up the debug levels to see if I can get you more info

thanks

@hcguy - Do we have any image for it?

I also use windows machine and I face challenge to connect to spiceDB. I want to be able to connect to spicedb using zed client

Hey 👋

I'm a bit over my head with the TLS stuff 😓

I built a Helm chart based on the example given here: https://github.com/authzed/spicedb-operator/tree/main/examples/cockroachdb-tls-ingress

I discarded the ingress part because: a. I don't have Countour in my Kube cluster b. All calls to SpiceDB will be done through Services

However, when doing local development, I would love to use zed to connect to my SpiceDB cluster