Openfga Docker Image
基于Ubuntu的高性能、灵活的授权/权限引擎,受Google Zanzibar启发,用于开发者构建细粒度授权系统,支持安全更新和版本滚动,免费使用且不受速率限制。
ubuntu/openfga is a rock for openfga maintained by https://canonical.com/.
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is designed to make it easy for developers to model their application permissions and add and integrate fine-grained authorization into their applications. It allows in-memory data storage for quick development, as well as pluggable database modules.
\https://openfga.dev/\]
Tags and Architectures
NOTE: These tags follow a specific naming convention that respects the concept of channels.
| Tags | Supported until | Version | Base | Architectures | |
|---|---|---|---|---|---|
1-22.04_stable | aliases1-22.04, 1-22.04_beta, 1-22.04_candidate, 1-22.04_edge | 12/2026 | 1 | 22.04 | arm64, amd64 |
Get started
This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.
\https://documentation.ubuntu.com/pebble/\]
Inspect
To view the https://documentation.ubuntu.com/rockcraft/en/latest/reference/rockcraft-yaml/#services and https://documentation.ubuntu.com/rockcraft/latest/reference/rockcraft-yaml/#checks defined in this rock:
shdocker run --rm ubuntu/openfga:1-22.04_stable plan
Run
To run this rock, use any of the usual container runtimes, for example, docker:
shdocker run --name openfga-container \ -p 8080:8080 -p 8081:8081 -p 3000:3000 -p 2112:2112 \ ubuntu/openfga:1-22.04_stable
Access the API either on http via http://localhost:8080 or grpc on localhost:8081, UI playground on http://localhost:3000. Prometheus metrics are available at http://localhost:2112/metrics.
Get logs
To view the logs of the running container, run:
shdocker exec openfga-container pebble logs
Or, for a specific service:
shdocker exec openfga-container pebble logs <service>
Monitor health checks
Rocks may have predefined health checks that you can list by running:
shdocker exec openfga-container pebble checks
The overall health of your container can be inspected via:
shdocker exec openfga-container pebble health
Configuration
Environment variables
| Option | Description | Default |
|---|---|---|
| OPENFGA_DATASTORE_ENGINE | Datastore type, currently supports postgresql, mysql and sqlite (beta). | None |
| OPENFGA_DATASTORE_URI | Database connection string, e.g., postgres://postgres:password@postgres:5432/postgres?sslmode=disable. | None |
| OPENFGA_PLAYGROUND_ENABLED | Allow playground UI, e.g., true. | None |
Ports
| Option | Description | Default |
|---|---|---|
-p <port>:8080 | Expose the container's port 8080 on the host's <port> for HTTP connections. | None |
-p <port>:8081 | Expose the container's port 8081 on the host's <port> for gRPC connections. | None |
-p <port>:3000 | Expose the container's port 3000 on the host's <port> for the playground UI. | None |
-p <port>:2112 | Expose the container's port 2112 on the host's <port> for Prometheus metrics endpoint. | None |
Application parameters
| Option | Description | Default |
|---|---|---|
openfga run | Launch OpenFGA server(s) using a mix of environment variables. | None |
\https://github.com/canonical/openfga-rock/issues\] \https://github.com/canonical/openfga-rock\]
Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with https://canonical.com/legal/intellectual-property-policy.
ubuntu 命名空间的其他可用镜像:
镜像拉取方式
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本,请访问 标签列表页面。
DockerHub 原生拉取命令
用户好评
来自真实用户的反馈,见证轩辕镜像的优质服务