Hello! Do any of you have any guidance or recommendations about running an oathkeeper instance per backend application vs. one instance of oathkeeper for many backend applications? So far, the one consideration that comes to mind is the possibility of needing different mutator configuration per app, which, if I understand the documentation correctly, would require a per-app deployment.

Hey Nathanael; I think for most use cases one instance is enough. But some things might require per-app deploy. You basically need the same mutator for different apps? Can you give an example maybe?

Hi Vincent, thank you for the reply. That makes sense.

You basically need the same mutator for different apps?

Exactly. E.g, different auth header formats expected by different apps. Based on this, we'll work toward a centralized approach, and only run a separate oathkeeper instance if we can't use Go templates to manage the differences until we can update the relying applications. Thank you again!