OPA: Add decision outcome to span in opaServeResponse filter

Signed-off-by: Farasath Ahamed <[email protected]>
zalando · Aug 15, 2024 · 5d981e3 · 5d981e3
1 parent 05bd5f8
commit 5d981e3
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/filters/openpolicyagent/opaserveresponse/opaserveresponse.go b/filters/openpolicyagent/opaserveresponse/opaserveresponse.go
@@ -126,9 +126,15 @@ func (f *opaServeResponseFilter) Request(fc filters.FilterContext) {
 	fc.Metrics().MeasureSince(f.opa.MetricsKey("eval_time"), start)
 	if err != nil {
 		f.opa.ServeInvalidDecisionError(fc, span, result, err)
+		return
+	}
 
+	allowed, err := result.IsAllowed()
+	if err != nil {
+		f.opa.ServeInvalidDecisionError(fc, span, result, err)
 		return
 	}
+	span.SetTag("opa.decision.allowed", allowed)
 
 	f.opa.ServeResponse(fc, span, result)
 }