authzed / spicedb-kubeapi-proxy

Secure access to the Kubernetes API using SpiceDB
https://authzed.com/spicedb
Apache License 2.0
21 stars 1 forks source link

Full consistency #72

Closed alecmerdler closed 11 months ago

alecmerdler commented 11 months ago

Description

Fixes "read-after-write" race condition caused by Rakis creating a Kubernetes Secret and then immediately updating it. In the future, the consistency should be configurable and allow the use of ZedTokens with AtLeastAsFresh consistency.

This is a stopgap solution to #43