Control plane for OpenLBAC — evaluates label-based access policies and drives query enforcement
289
Control plane for OpenLBAC. Policy enforcement engine with a TTL-cached in-memory view of datasource policies. Exposes a connect-go unary RPC (EngineService/Authorize) that lbac-proxy calls per request to rewrite queries according to the caller's group policies.
Imports lbac-driver for shared policy types, driver interfaces, and matcher helpers.
LBAC_DB_DSN=postgres://openlbac:openlbac@localhost/openlbac \
go run ./cmd
| Variable | Default | Description |
|---|---|---|
LBAC_DB_DSN | — | Required. Postgres DSN |
LBAC_ADDR | :9090 | gRPC listen address |
LBAC_AUDIT_URL | — | lbac-audit gRPC address |
LBAC_ENTERPRISE_KEY | — | Enterprise license key |
docker run -p 9090:9090 \
-e LBAC_DB_DSN=postgres://openlbac:openlbac@postgres/openlbac \
openlbac/lbac-core:latest
go build -o bin/lbac-core ./cmd
cd proto && buf generate
Full deployment guides at openlbac.com.
Content type
Image
Digest
sha256:14181a4c3…
Size
16.7 MB
Last updated
5 months ago
docker pull openlbac/lbac-core