Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

Also, given the Cerbos PDP helm chart, is there a way to specify a postgres connection string referencing a secret rather than just putting the creds directly in plain text?

You could create a `secret` such as this:
```apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: cerbos-pg
data:
  PG_USER: Y2VyYm9zcGd1c2Vy
  PG_PASSWORD: Y2VyYm9zcGdwYXNzdw==```
Then you could use a `values.yaml` such as this:
```cerbos:
  config:
    storage:
      driver: "postgres"
      postgres:
        url: "postgres://${PG_USER}:${PG_PASSWORD}@localhost:5432/cerbos"

envFrom:
  - secretRef:
      name: cerbos-pg```


Ah, perfect. I wasn't aware that the connection string supported variable substitution. Thanks!