Ashutosh Narkar
Ashutosh Narkar
You're right. From the code https://github.com/open-policy-agent/opa-docker-authz/blob/master/main.go#L162 it looks like a single policy file can be loaded. Can you expand on your use-case and the kind of policies you want to...
Maybe something like [conftest](https://github.com/instrumenta/conftest) could help with this ? > Rules should be enforced on Docker using this plugin, but it should be also possible to tell on advanced if...
Are there any other logs ? Any more information from running `docker plugin inspect` ?
Also what's different between the pre-prod and prod environments ?
In that case, have you tried allotting more resources to check if the system is not exhausted ?
Memory usage typically depends on the size of the data and policy that you load into OPA. [This](https://www.openpolicyagent.org/docs/latest/policy-performance/#resource-utilization) page provides more details on resource utilization. Do you have an estimate...
The data seems pretty small. Have you documented OPA's memory usage with time ? And also how much memory have you allocated so far ?
@ramapalani Can you provide an example of how to reproduce the issue ? Any scripts that you have to simulate the traffic etc. would be helpful.
Hmm you're getting a segmentation fault. What system are you running this on ?
That's great ! Is that custom plugin using OPA ?