Howdy folks, total newbie here.. but how do i crea...
# talk-ketoa
able-oxygen-89684
07/07/2023, 12:58 AMHowdy folks, total newbie here.. but how do i create namespaces in Keto? I cant find any API for this
s
steep-lamp-91158
07/07/2023, 11:46 AM
in the config file, you reference your namespaces.ts
steep-lamp-91158
07/07/2023, 11:47 AM
a
able-oxygen-89684
07/07/2023, 2:03 PMThats the only way? There isnt a programmatic way of doing so?
s
steep-lamp-91158
07/07/2023, 2:04 PM
you can programmatically update files, they are hot-reloaded
a
able-oxygen-89684
07/07/2023, 2:05 PMgot it.. but there is no way to do this any other than modifying the config map? Is that by design?
s
steep-lamp-91158
07/07/2023, 2:06 PM
yes
a
able-oxygen-89684
07/07/2023, 5:15 PMouch.. thats going to be tedious... is there an ADR or explanation why this is the case?
s
steep-lamp-91158
07/07/2023, 5:15 PM
What are you trying to do anyway?
a
able-oxygen-89684
07/07/2023, 5:16 PMallow systems to create their own permission structure using their own admin credentials. It seemed like namespaces where how things should be segmented
able-oxygen-89684
07/07/2023, 5:17 PMalthough, with them being hard-coded, it doesnt seem like thats the correct segmentation point
able-oxygen-89684
07/07/2023, 5:23 PMso what would be the best way to allow a new product to create its own permission schemes and manage their own trees? would it be in some shared "applications" namespace or something?
s
steep-lamp-91158
07/08/2023, 10:23 AM
Yes so namespaces are not isolated! They can cross reference and are not meant to be programmatically generated, but rather carefully written and seldomly changed
steep-lamp-91158
07/08/2023, 10:26 AM
None of our projects are multi tenant capable, but you can use multiple Ory Network projects, one per tenant. A full "child" project and multi tenancy feature with config inheritance is already planned.
steep-lamp-91158
07/08/2023, 10:28 AM
I'd recommend to use one database (schema) and Keto instance(s) per application if you only have a finite amount of applications.
steep-lamp-91158
07/08/2023, 10:28 AM
Also a shared permission model might make sense, especially when users are shared
steep-lamp-91158
07/08/2023, 10:28 AM
TL;DR depends
steep-lamp-91158
07/08/2023, 10:29 AM
We can also offer professional consulting if you are interested
a
able-oxygen-89684
07/08/2023, 11:19 PMwe are doing a side-by-side comparison between Keto and SpiceDB, so we are still a ways away from requesting consulting. Do yall happen to have a comparison we can refer to?
s
steep-lamp-91158
07/10/2023, 6:42 AM
sorry no...
a
able-oxygen-89684
07/10/2023, 6:19 PMhave yall heard of folks doing this kind of comparison before? what are yalls thoughts on it?
2 Views