openfga / openfga

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.

go-admin-team / go-admin

go-admin is a Gin + Vue starter kit for admin applications, supporting Element UI, Arco Design, and Ant Design. Features include multi-tenancy, user management, JWT authentication, RBAC, code generation, a form builder, and scheduled tasks. Build your own admin app in just 3 minutes.

apache / casbin

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

loft-sh / vcluster

vCluster creates tenant clusters: fully isolated environments delivered as managed Kubernetes, or as the foundation for Slurm, Ray, Run:ai and inference clusters. Each gets its own API server, CRDs and RBAC, and runs on an existing cluster or standalone on bare metal. CNCF Certified Kubernetes.

cerbos / cerbos

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

openrundev / openrun

Deployment platform for teams to deploy internal tools. Deploy web apps declaratively, on a single-node or on Kubernetes, with OIDC/SAML auth and RBAC.

Permify / permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

FairwindsOps / rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

szluyu99 / gin-vue-blog

Golang 全栈博客：Go + Gin + GORM + Redis 后端，Vue3 + Vite + UnoCSS 前台与后台管理。JWT 鉴权 + RBAC 动态菜单，Docker Compose 一键部署，CI 跑 lint/单测/构建/compose 端到端。前后端均有单元测试，内置 mock 模式可脱离后端运行（GitHub Pages 在线演示），注释与 Swagger 文档齐全。

ArkGravity / burrow

Lightweight, self-hosted OIDC identity provider for small teams. Go + React, password + mandatory TOTP, RBAC, and shared SSO. MIT licensed.

aserto-dev / topaz

Cloud-native authorization for modern applications and APIs

FairwindsOps / rbac-lookup

Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster

kube-rbac-proxy / kube-rbac-proxy

Kubernetes RBAC authorizing HTTP proxy for a single upstream.

kubeguard / guard

🔑 Kubernetes Authentication & Authorization WebHook Server