Guillaume Picard
03/08/2023, 2:31 AMHas Cerbos been load tested with a great number of Scoped Policies, but only say two levels deep, sayIf not, we’ll try to run load testing, but also it would be good to have your opinion on managing performance, is it running more pods in K8S, adding more shared memory etc. Thank you?organization.member
Charith (Cerbos)
03/08/2023, 7:25 AMrequests
for CPU but not limits
because the latter causes throttling. Memory usage depends on the "live" policy set and the number of concurrent requests so you'll need to tune those based on what you observe from your typical usage.
Because Cerbos is stateless, you can scale it horizontally. It's always good to have at least 2 replicas running for redundancy and scale it up and down on demand based on metrics.Guillaume Picard
03/08/2023, 7:46 AM