Commits on Oct 6, 2022

1. server+sdk+plugins: Integrate NDBCache into decision logging. …

   This commit integrates the ND builtins caching system into decision
   logging, both in the server and sdk packages. Some reworking of the
   NDBCache's serialization format were required to accommodate this.
   The feature is disabled by default, and must be opted into by user
   configuration.
   
   The feature can be enabled via a top-level config key:
   
       nd_builtin_cache=true
   
   The NDBCache is exposed to the masking system under the
   `/nd_builtin_cache` path, which allows masking or dropping sensitive
   values from decision logs selectively.
   
   Note: If a decision log event exceeds the `upload_size_limit_bytes`
   value for the OPA instance, OPA will reattempt uploading it, after
   dropping the NDBCache from the event. This behavior will trigger a log
   error, and will increment the `decision_logs_nd_builtin_cache_dropped`
   metrics counter.
   
   Fixes: open-policy-agent#1514
   
   Signed-off-by: Philip Conrad <philipaconrad@gmail.com>

   

   philipaconrad committed Oct 6, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for b84c523
   • Browse repository at this point

   Copy the full SHA

   b84c523 View commit details

   Browse the repository at this point in the history