hi Cerbos team , we have few questions about how PDP gets refreshed in all sidecars across all the application layers when using with opensource Cerbos , can we store ABAC profiles in our own DB instead of Github?

We do support database backends (Postgres, MySQL, SQLite), but I don't think you'd need one for your use case. Every Cerbos storage backend can be configured to automatically propagate policy changes to the PDP. For example, if you have multiple PDPs all pointing at the same Git repository, each one can be set to independently poll for changes. When you push an update, every PDP would pick it up automatically.

Few questions 1. Can Cerbos Backend be opensource or it has to have EnterpriseHUB license 2. Can Git repos are internally hosted along with our app and Cerbos is hosted on prem or in cloud and connect with our App, want to understand how polling for changes happens ?

Assuming I understood question 1 correctly: the storage backend is your own backend you configure, whether that be a git repo, a blob store, a database etc. On 2: the only constraint is that the on-prem PDPs are able to reach the git repo, irrespective of where they are. Providing you have connectivity, then the PDPs should be able to poll for changes and pull them down as they occur.