search

microsoft / regorus

Regorus - A fast, lightweight Rego (OPA policy language) interpreter written in Rust.
MIT License
100 stars 26 forks source link

Publication to PyPI #168

Open fcollonval opened 4 months ago

fcollonval commented 4 months ago

Hey this project looks awesome. I'm in particular interested in the Python binding and saw you already have a workflow to publish the package to PyPI. What would be missing to initiate such publication? May I help in anyway?

anakrish commented 4 months ago

Hey @fcollonval, Thanks for your interest in the project and offering to help.

What would be missing to initiate such publication?

Publishing packages from the Microsoft org requires onboarding onto the internal Microsoft publishing pipelines. The packages to be published are subject to a variety of security checks before being published. We currently don't have the bandwidth to onboard to the publishing pipelines.

May I help in anyway?

Sharing your use case would be helpful in making a case for allocating resources to onboard to the publishing pipelines.

fcollonval commented 4 months ago

Thanks for reaching out @anakrish

Sharing your use case would be helpful in making a case for allocating resources to onboard to the publishing pipelines.

We are interested to bring authorization validation closer to our services in our kubernetes deployment. As major services are Python based servers, we would like to use regorus to get an efficient library integration to rego policies instead of http requests to a sidecar server.

anakrish commented 4 months ago

Thanks for sharing your use case, @fcollonval. Let me see how best to get resources allocated for publishing.

anakrish commented 4 months ago

Related use case about binding (Java): https://github.com/microsoft/regorus/pull/158#issuecomment-1962327537

zterek commented 2 months ago

We also have a similar use case in a python-based server and would love to be able to just pull a package from PyPI.