Production checklist

Before deploying Oso to production, ensure you've completed each of these steps.

Modeling

• Determine your authorization requirements.
• Create + deploy your environment's authorization model in Polar.
• Generate an API key for your application to access your environment. For more details, see Create New API Keys.

Authorization data

• Determine how you want to handle existing authorization data. For more details, see Authorization Data.
• Plan to manage authorization data with Oso running in production. Again, see Authorization Data.

Enforcement

• Enforce authorization through one of the following APIs:
  • Enforcement for determining an actors' ability to perform an action on a resource.
  • List filtering for determining a set of resources actors can act upon.

Testing + CI/CD

• Set up your local development workflow.
• Add Oso to your CI/CD pipeline.
• Plan for outages with a fallback node.
• Plan a staged rollout for Oso, for example by running it side-by-side with your legacy code using feature flags.