Tooling improvements, query plan updates and Helm annotations - Cerbos v0.23 Release

The latest release of Cerbos, v0.23 (and v0.23.1) includes updates to the cerbosctl, improved query plans and updates to the Helm charts and more.

We have been working closely with users of Cerbos such as Blockchain.com, Utility Warehouse, 9fin, Salesroom, and Doorfeed on this release and can’t wait to hear more on what you would like to see in future releases - join our Slack community to join the conversation.

Cerbos v0.23 Release

The Cerbos CLI (cerbosctl) now supports using zip files for loading policies and schemas through the Admin API. This streamlines the process of exporting policies and schemas from the Cerbos Playground into your own Cerbos instance.

It is now possible to set scopes for PlanResources requests made through the Go SDK. We have also re-written some code that accidentally relied on Go 1.19 features so that the SDK remains usable for users who have not yet upgraded to Go 1.19.

The generated query plan for certain indexing expressions is now much simpler. A query plan bug that manifested when known values were used to index into unknown containers has also been fixed.

The error message produced when users try to use the audit log while it’s not enabled is now more informative.

The Helm chart now supports user-defined annotations to be added to the Deployment and Service resources. This is useful for integrating with annotation-driven Kubernetes tools and utilities such as the Jaeger operator.

You can find the full release notes here (or v0.23.1) and if you have any questions join our Slack community.