gitlab/authzd.git - Authorization daemon

Age	Commit message (Collapse)	Author
2025-07-17	feat: migrate from Cedar to SpiceDB authorization system	mo khan
	This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema.
2025-07-15	chore: set spicedb log level to info	mo khan

2025-07-14	chore: tune log level and disable release check	mo khan

2025-07-14	chore: disable spice telemetry endpoint	mo khan

2025-07-14	chore: configure spicedb to emit JSON logs	mo khan

2025-07-14	chore: add shell script to shim request to spicedb	mo khan

2025-07-14	chore: run authzd on 50052 instead of 50051 to prevent port collision	mo khan

2025-07-14	chore: specify spicedb flags	mo khan

2025-07-14	chore: run spicedb via Procfile	mo khan

2025-07-11	chore: provide default value for bind addr and fix Procfile	mo khan

2025-07-07	chore: Change log level for grpc	mo khan

2025-07-03	chore: revert log level change	mo khan

2025-07-03	chore: move log level to envoy.yaml	mo khan

2025-07-03	chore: use a different --base-id	mo khan

2025-07-03	chore: tune envoy log level	mo khan

2025-07-03	chore: include envoy in docker image	mo khan