OPA: Add decision outcome to span (#3096)

mjungsbluth · web-flow · commit 5a1374041780 · 2024-06-05T11:05:56.000+02:00
Signed-off-by: Magnus Jungsbluth &lt;magnus.jungsbluth@zalando.de&gt;
diff --git a/filters/openpolicyagent/opaauthorizerequest/opaauthorizerequest.go b/filters/openpolicyagent/opaauthorizerequest/opaauthorizerequest.go
@@ -151,6 +151,7 @@ func (f *opaAuthorizeRequestFilter) Request(fc filters.FilterContext) {
 		f.opa.HandleInvalidDecisionError(fc, span, result, err, !f.opa.EnvoyPluginConfig().DryRun)
 		return
 	}
+	span.SetTag("opa.decision.allowed", allowed)
 	if !allowed {
 		fc.Metrics().IncCounter(f.opa.MetricsKey("decision.deny"))
 		f.opa.ServeResponse(fc, span, result)

Original file line number	Diff line number	Diff line change
`@@ -151,6 +151,7 @@ func (f *opaAuthorizeRequestFilter) Request(fc filters.FilterContext) {`
`151`	`151`	`f.opa.HandleInvalidDecisionError(fc, span, result, err, !f.opa.EnvoyPluginConfig().DryRun)`
`152`	`152`	`return`
`153`	`153`	`}`
	`154`	`+ span.SetTag("opa.decision.allowed", allowed)`
`154`	`155`	`if !allowed {`
`155`	`156`	`fc.Metrics().IncCounter(f.opa.MetricsKey("decision.deny"))`
`156`	`157`	`f.opa.ServeResponse(fc, span, result)`