September 2022 Summaries

The Authzed team has released a significant update to SpiceDB version 1.12, which includes a new API called LookupSubjects. This API allows users to find all subjects reachable for a particular resource and permission, providing a reverse function of the previously released LookupResources API. The API is designed to be recursive and streaming, making it useful for auditing and UI code that needs to determine the full set of users or tokens with a particular permission on a resource. The update aims to address the difficulty in implementing this functionality for users and provide support for the new WatchResources API, which will stream permission changes whenever a relationship is updated in SpiceDB.

The open sourcing of spicedb-operator, a Kubernetes operator for managing SpiceDB clusters on Kubernetes, marks a significant milestone in the development of Authzed's Serverless and Dedicated offerings. The operator has been successfully running in production for four months, providing a seamless experience for customers. It simplifies cluster configuration, migration management, and TLS setup, while also promoting standardized patterns across operators. Additionally, the open-sourced controller-idioms library is available to support other operators, offering a standardized framework for common patterns and resource adoption. The Authzed team invites feedback and suggestions on future improvements through GitHub issues and Discord channels.