bulwark
bulwark copied to clipboard
Document Behavior for Multiple Plugins Accessing the Same Redis Keys/Values
There's a need to document how multiple plugins, or instances of the same plugin, can interact with shared Redis keys/values based on their permissions. This aspect is crucial for understanding potential inter-plugin communication and ensuring that the system's behavior aligns with user expectations.
Currently, the documentation on this topic is very light, particularly in the section related to state management and permissions: https://docs.bulwark.security/ops/configuration#state
This issue was raised in the context of a PR discussion, where it was noted that multiple plugins might declare the same permissions for the same keys in Redis, potentially leading to conflicts or unexpected behavior. Specifically, concerns were raised about different expiration windows for rate limiter keys and how they might interfere with each other.
For full context, see the PR and comment discussion here: https://github.com/bulwark-security/bulwark/pull/202#discussion_r1520908769
@sporkmonger has requested this documentation update to ensure users are fully informed about how permissions and Redis key/value access work within the Bulwark system.