Skip to content

feat: wire MCM to Ory IAM stack#804

Open
kirgene wants to merge 2 commits into
mainfrom
feat/iam-zanzibar
Open

feat: wire MCM to Ory IAM stack#804
kirgene wants to merge 2 commits into
mainfrom
feat/iam-zanzibar

Conversation

@kirgene

@kirgene kirgene commented May 20, 2026

Copy link
Copy Markdown
Contributor
  • Oathkeeper rules route MCM requests with Keto-backed authorization
  • Keto loads OPL namespaces from /etc/keto-namespaces, populated by per-service OCI ImageVolumes
  • MCM API env wired with Hydra/Kratos/Keto admin URLs
  • global.iam.* shared values in umbrella chart

Companion MCM API PR (ships the OPL file in the Docker image): mojaloop/connection-manager-api#193

Closes #4398, #4404, #4399.

- Oathkeeper rules route MCM requests with Keto-backed authorization
- Keto loads OPL namespaces from /etc/keto-namespaces, populated by
  per-service OCI ImageVolumes
- MCM API env wired with Hydra/Kratos/Keto admin URLs
- global.iam.* shared values in umbrella chart

Closes #4398, #4404, #4399.
@kirgene kirgene force-pushed the feat/iam-zanzibar branch from 663645c to f9a795c Compare May 27, 2026 14:44
@sonarqubecloud

sonarqubecloud Bot commented Jun 7, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Oathkeeper RBAC rules to connection-manager Helm chart

1 participant