OPA nodes may not on synch with latest policy in Git

[mriduldeka]

Hi Team,
We use OPA-OPAL for authorization. We have deployed OPA as daemon set and per node whereas OPAL server is deployed as deployment set. We frequently see pub/sub connectivity issue between OPAL client and server. At same time , when this error comes, OPA gives deny for a valid policy for which it was giving allow. As a quick turnaround, we restart OPAL/OPA and OPA pods and it is giving allow again which is expected.

1. Does connectivity loss between OPAL client and server and when it regain connectivity again causes OPA to synch with stale policy and not recent one ?? I am attaching screenshot of error we get for OPAL --

Regards
Mridul Deka
Tech Lead -- Johnson Controls

[srenatus]

Heya! Please open an issue on the opal repo -- This is where you'll have the best chance to come across OPAL expertise 🤞