Cerbos Hub - July Product Updates

As well as celebrating the launch of Cerbos Hub going GA last week, we have also been busy working away adding many requested features from our users.

Selective policies compilation for Embedded PDP

Unique to Cerbos Hub is the ability to generate self-contained policy bundles that can be embedded into any system that supports WebAssembly modules. This is a powerful solution for cases where authorization decisions have to be made locally on device or at the edge without access to a full-fledged Cerbos policy decision point. A common use case for embedded policies is to enable web applications to make decisions about which UI elements to render without making calls to a backend service.

With the introduction of selective policy compilation, you can now define which policies get included in the embedded version of the PDP to ensure also the relevant ones for your use cases are shipped out to clients.

This is simply done in the policy files themselves via adding an annotation to the metadata:

apiVersion: api.cerbos.dev/v1
metadata:
  annotations:
    hub.cerbos.cloud/embedded-pdp: "true"
resourcePolicy:
...

Inside Cerbos Hub, each build now shows you which policies are included based on these annotations:

You can read more about this on our documentation site.

Detailed build errors

When making policy changes the tooling available with Cerbos enables you to be confident in your changes, light up your IDE with autocomplete and Intellisense, and write full tests around your authorization policies, but sometimes issues can still sneak through.

Now in Cerbos Hub when an error is raised during the build process, we show you detailed descriptions as well as the relevant policy snippet right in the UI for quick debugging and resolution.

Playground templates

The Cerbos Hub Playground is a realtime collaborative IDE to work on your policies. When you create new policy files we now enable you to pick from a template of policy types to get you started faster, removing the need to write out the boilerplate of each policy type:

Manage your user profile

Finally, you can now manage your user profile inside Cerbos Hub - you can access this via the user menu in the top right corner of the page.

Try Cerbos Hub