Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Good day, all!  Is there a way to make Oathkeeper routing rules, etc. updatable via API instead of depending on file configuration?

hi travis, unfortunately not as that would require a database which we want to avoid!

but, what you can do, is point oathkeeper’s rules to an HTTPS endpoint

and there, you can implement your own logic to have always up-to-date ruls :slightly_smiling_face:

<@U010F2N7G2X>, is it possible to introduce an abstraction that can handle rule settings, so developers like myself can use SQLite, Postgres, or whatever we want to handle the rules?

It seems, <@U010F2N7G2X> and others that I have been looking at my “problem” the wrong way, and for Kubernetes, Oathkeeper Maester is the answer:

<https://github.com/ory/oathkeeper-maester|https://github.com/ory/oathkeeper-maester>