Hi I have some questions regarding Keto 1. Can we ...
# _newcomer
s
Hi I have some questions regarding Keto 1. Can we see usage stats in dashboard? If so, could you please share a sample screenshot? 2. Could you please share rate limit details for the APIs? 3. Is there any versioning support for permission models? I mean is there a way to rollback to a specific version of OPL and activate it? 4. What are the debugging options? 5. What is the log retention period? 6. How aDAU is created? Is it based on check api called agains unique subject ids? 7. What is the consistency behavior? 8. Is there any validation while writing relation tuples? 9. How to export all stored tuples? 10. Is there any tool or support provided to generate relation tuples based on rule for normal and load testing? 11. What kind of metrics are provided to see the different API latencies, usage etc?
m
1. In Ory Network there is not yet a dashboard for Ory Permissions(Keto), however you can see all permission events at https://console.ory.sh/projects/current/activity/events. You can also track workspace usage at https://console.ory.sh/workspaces/current/settings/billing. 2. https://www.ory.sh/docs/guides/rate-limits 3. I dont think so, but there are no versions of OPL that I am aware of. 4. Can you explain what you want to debug? 5. Developer 24h / Production 7 days / Growth 30 days / Enterprise 90 days + live streaming 6. aDAU is measured as any unique user using the identity APIs, they are independent of the Ory Permission service. A permission check is a request to the Ory Permissions service's check API and billed independently of average daily active users. 7. https://www.ory.sh/docs/api/eventual-consistency 8. yes see here: https://www.ory.sh/docs/keto/reference/ory-permission-language#type-checking 9. ory list relationships --project $SLUG or use the API 10. not sure hat you are looking for here 11. you can see the Ory Network status here: https://status.ory.sh/ - and usage in the places mentioned in 1. Let me know if anything remains unclear or if you have further questions.
s
Thank you @magnificent-energy-493 for the response! I have some follow up questions 1. Is the rate limit mentioned in the page applicable for permission related APIs as well? For eg: Growth plan rate limit mentions for prod environment,
*
path has burst of 400 rpm and sustained 9000rpm. So does it apply to the permission related API calls as well? 2. Regarding debugging, I meant in case a a permission check returns false positive/negative, is there any option to why it returned so? Or do you suggest to use the keto CLI? 3. I am primarily looking for permission service. Could you please share the pricing details for this? 4. https://www.ory.sh/docs/api/eventual-consistency - How dfoes it work woth permissions API? Is it per project wise? Also is there any data sheet showing the diff. of latency between strong and eventual consistency? 5. Regarding generated dataset, I meant from the provided rule, is there any provision offered by keto to auto generate a set of relation tuples covering all the combinations for test purpose?
m
@salmon-musician-99025 1. Followup: The API you will hit the most for Ory Permissions is
/relation-tuples/check
which has a separate double rate limit of the general path. 2. Maybe this helps, not sure if I understand the question apologies. If the permission check fails, the API can return a 400 or 403 status code. In the case of a 400 status code, the API returns an
errorGeneric
object that includes more information about the error. 3. You can see pricing on https://ory.sh/pricing, Permission Checks is the metric for Ory Permissions. On Growth you have 3.4 M checks included as free credits. 4. I think the consistency control only applies to the Identity List API. I will have to check re permissions. But yes every project is a separate "tenant" basically, with own rate limits etc. 5. not directly, but you can use the Ory CLI or API in a script to generate test data.
s
How can we sync the existing auth data from application db to keto?