Sign inSign up

openlbac/lbac-core

By openlbac

Updated 5 months ago

Control plane for OpenLBAC — evaluates label-based access policies and drives query enforcement

Image
Security
0

289

openlbac/lbac-core repository overview

lbac-core

CI Release Go 1.26 Go Report Card Docker License

Control plane for OpenLBAC. Policy enforcement engine with a TTL-cached in-memory view of datasource policies. Exposes a connect-go unary RPC (EngineService/Authorize) that lbac-proxy calls per request to rewrite queries according to the caller's group policies.

Imports lbac-driver for shared policy types, driver interfaces, and matcher helpers.

Quick start

LBAC_DB_DSN=postgres://openlbac:openlbac@localhost/openlbac \
go run ./cmd

Configuration

VariableDefaultDescription
LBAC_DB_DSNRequired. Postgres DSN
LBAC_ADDR:9090gRPC listen address
LBAC_AUDIT_URLlbac-audit gRPC address
LBAC_ENTERPRISE_KEYEnterprise license key

Docker

docker run -p 9090:9090 \
  -e LBAC_DB_DSN=postgres://openlbac:openlbac@postgres/openlbac \
  openlbac/lbac-core:latest

Build

go build -o bin/lbac-core ./cmd
Regenerating proto
cd proto && buf generate

Documentation

Full deployment guides at openlbac.com.

License

Apache 2.0

Tag summary

Content type

Image

Digest

sha256:14181a4c3

Size

16.7 MB

Last updated

5 months ago

docker pull openlbac/lbac-core