authzed / spicedb-kubeapi-proxy

Secure access to the Kubernetes API using SpiceDB
https://authzed.com/spicedb
Apache License 2.0
21 stars 1 forks source link

Allow postfiltering of results from kube #39

Open ecordell opened 1 year ago

ecordell commented 1 year ago

Currently, only prefilter is supported, which requires that you store kube object names in SpiceDB somehow.

Postfiltering would do the request to kube and then filter the response. There are cases where this may be more performant, i.e. just checking a few items from kube against a large spicedb dataset.