Hi, I want to integrate spicedb with
# spicedb
b
Hi, I want to integrate spicedb with Istio service mesh for Authorization. I believe web assembly could help me . Does anyone have any suggestions or GitHub link for the same.
y
you're gonna have to provide more context
we do use a wasm build of SpiceDB in the playground repo if that's something that would give you some context
but i wouldn't run real SpiceDB without a backing datastore, and i'm not sure running in wasm supports that
what are you trying to do?
b
I am running spicedb with postgre and want to use it as Authorization before entering any service. When a request comes to microservices, it should be directed to spicedb for Authorization, if Authorization is successful, requests should be forwarded to actual service else block it.
I want to integrate wasm plugin with the Istio sidecar . Not sure if going in the right direction
y
the more common way to integrate spicedb is to have the services call out to it after they receive the request
checks can theoretically be done by ingress, but list logic can't
b
For check before reaching to service, any practical examples or recommendations
y
will your service have list logic?
b
No. My service would have yes/no for Authorization
y
you're saying your service will not have endpoints that return lists of objects?
if that's the case, then yeah, you can probably get away with doing something in the service mesh
but i don't know of anyone doing things that way and i don't have any examples or guidance for you (not that i think it's a bad idea; just that i haven't heard of it yet)
b
Not a problem. I was checking if anyone did it before
It would be great help
I am exploring external Authorization and websssembly as of now