Cerbos
Cerbos components
Cerbos PDPOpen source authorization engine
Documentation Code Issue Tracker Discussion Forum
Cerbos HubPolicy management control plane
Sign up Documentation
Cerbos SynapseContext enrichment layer
About Documentation
PEP SDKsClient libraries for policy enforcement
Documentation
Resources
Features, benefits, use cases Technical blog Webinars and ebooks
Support
Community Slack Email (help@cerbos.dev)
Talk to an engineer Try Cerbos Hub for free

Cerbos

  • Getting started
    • What is Cerbos?
    • Quickstart
    • Tutorial
      • Intro
      • Running locally
      • Resource definition
      • Calling Cerbos
      • Testing policies
      • Adding conditions
      • Derived roles
      • Principal policies
      • Attribute schema
      • Integrating Cerbos
    • Installation
      • Binaries
      • Container
      • Helm chart
  • Cerbos API
    • Using the API
    • Admin API
  • Policies
    • Policy authoring
    • Derived roles
    • Resource policies
    • Principal policies
    • Role policies
    • Scoped policies
    • Scope permissions
    • Conditions
    • Variables and constants
    • Outputs
    • Schemas
    • Validating and testing
    • Best practices
  • Configuration
    • Audit
    • AuxData
    • Engine
    • Observability (metrics and traces)
    • Schema
    • Server
    • Storage
    • Telemetry
  • Deployment patterns
    • Cloud platforms
    • Kubernetes service
    • Kubernetes sidecar
    • Kubernetes daemonset
    • Serverless/FaaS environments
    • Systemd service
  • CLI
    • cerbos
    • cerbosctl
  • Recipes
    • Example apps
      • Photo-share application
      • Demo of securing a REST API with Cerbos
      • Modelling a multi-tenant SaaS with Cerbos
      • Admin API demo with Go and React
    • Authentication integration
      • Auth0
      • FusionAuth
      • JWT
      • Magic
      • Okta
      • AWS Cognito
    • ORM integration
      • Prisma
      • SQLAlchemy
    • Checking permissions in your UI
    • AI integration
      • RAG authorization
  • Release Notes
    • v0.46.0
    • v0.45.1
    • v0.45.0
    • Archives
      • v0.44.0
      • v0.43.0
      • v0.42.0
      • v0.41.0
      • v0.40.0
      • v0.39.0
      • v0.38.1
      • v0.37.0
      • v0.36.0
      • v0.35.1
      • v0.34.0
      • v0.33.0
      • v0.32.0
      • v0.31.0
      • v0.30.0
      • v0.29.0
      • v0.28.0
      • v0.27.0
      • v0.26.0
      • v0.25.0
      • v0.24.0
      • v0.23.1
      • v0.23.0
      • v0.22.0
      • v0.21.0
      • v0.20.0
      • v0.19.1
      • v0.19.0
      • v0.18.0
      • v0.17.0
      • v0.16.0
      • v0.15.1
      • v0.15.0
      • v0.14.0
      • v0.13.0
      • v0.12.0
      • v0.11.0
      • v0.10.0
      • v0.9.1
      • v0.9.0
      • v0.8.0
      • v0.7.0
      • v0.6.0
      • v0.5.0
  • Glossary
    • Glossary of Cerbos terms
  • Engineering
    • Why Cerbos runs as a separate process
Cerbos PDP 0.46.0
  • Cerbos Hub
  • Cerbos PDP
    • 0.56.0-prerelease
    • 0.55.0
    • 0.54.0
    • 0.53.0
    • 0.52.0
    • 0.51.0
    • 0.50.0
    • 0.49.0
    • 0.48.0
    • 0.47.0
    • 0.46.0
    • 0.45.1
    • 0.44.0
    • 0.43.0
    • 0.42.0
    • 0.41.0
    • 0.40.0
    • 0.39.0
    • 0.38.1
    • 0.37.0
    • 0.36.0
    • 0.35.1
    • 0.34.0
    • 0.33.0
    • 0.32.0
  • Cerbos Synapse
    • ~
  • Cerbos
  • Deployment patterns
  • Kubernetes service
0.56.0-prerelease 0.55.0 0.54.0 0.53.0 0.52.0 0.51.0 0.50.0 0.49.0 0.48.0 0.47.0 0.46.0 0.45.1 0.44.0 0.43.0 0.42.0 0.41.0 0.40.0 0.39.0 0.38.1 0.37.0 0.36.0 0.35.1 0.34.0 0.33.0 0.32.0
Edit this Page

Deploy Cerbos as a service

This documentation is for a previous version of Cerbos. Choose 0.55.0 from the version picker at the top right or navigate to https://docs.cerbos.dev for the latest version.

You can use the Cerbos Helm chart to deploy Cerbos as a service inside your Kubernetes cluster. Refer to the Helm chart instructions for more details.

Cloud platforms Kubernetes sidecar
Cerbos   Copyright (C) 2020-2026 Zenauth Ltd.