rajrh
01/24/2023, 3:18 PMJoey
01/24/2023, 3:34 PMrajrh
01/24/2023, 3:39 PMJoey
01/24/2023, 3:39 PMrajrh
01/24/2023, 3:40 PMrajrh
01/24/2023, 3:49 PMJoey
01/24/2023, 3:50 PMkameshraj
01/24/2023, 6:47 PMJake
01/24/2023, 6:53 PMyetitwo
01/24/2023, 9:50 PMecordell
01/24/2023, 10:12 PMyetitwo
01/24/2023, 10:19 PMecordell
01/24/2023, 10:27 PMGRPC_XDS_BOOTSTRAP
(see https://github.com/grpc/grpc-go/blob/master/examples/features/xds/README.md#the-client and https://github.com/grpc/proposal/blob/master/A27-xds-global-load-balancing.md#xdsclient-and-bootstrap-file)
there still needs to be something serving the xds api somewhere. AWS appmesh says it does this for ECS, but I don't have any personal experience with it.yetitwo
01/24/2023, 10:28 PMyetitwo
01/24/2023, 10:28 PMPrchowdh
01/25/2023, 2:48 AMJoey
01/25/2023, 2:50 AMJoey
01/25/2023, 2:50 AMPrchowdh
01/25/2023, 2:50 AMJoey
01/25/2023, 2:51 AMJoey
01/25/2023, 2:51 AMfierro9418
01/25/2023, 3:04 AMX
has permission create
on object transfer
when `transfer.amount < 50`"fierro9418
01/25/2023, 3:06 AMcreate
permissions on some transfer
using authzed, and then it's the application's responsibility to enforce some notion of quantitative limitsfierro9418
01/25/2023, 3:11 AMJoey
01/25/2023, 3:11 AMJoey
01/25/2023, 3:11 AMfierro9418
01/25/2023, 3:11 AMJoey
01/25/2023, 3:12 AMcaveat check_amount(amount int) {
amount < 50
}
definition transfer {
relation creator: user with check_amount
}
Joey
01/25/2023, 3:12 AM