Authz client-server deployment

[gilleslabs]

Hi Team,

Many thanks for this nice plugin !
However, would be nice to have capabilities to run it in a client-server mode (like openpolicyagent does).
Indeed, in a Swarm cluster it makes sense not to have to redeploy the policies on each hosts and have them on a "central" policy server.
I didn't see any documentation regarding such a kind of deployment.
Is it possible or is it a new feature to be developed (and if so is it in your roadmap) ?

Thank you in advance for your feedback

Regards,

Gilles

[liron-l]

Thanks @gilleslabs, this is a reference implementation to a single host plugin, we don't have any plan to extend it with multi-agent support. In case you need multi-host automatic policy enforcement, you can try our enterprise offering.
Also note that specifically for swarm, the agent should only be deployed on node manager and not on the entire cluster. There is ongoing work in docker to enable automatic deployment of authz plugin in swarm, but it will probably take some time.