Rodrigo Mayer
08/25/2025, 5:42 PM[25/Aug/2025:14:28:16] [2025-08-25T14:28:16Z ERROR pdp_server::api::authz::user_permissions] Failed to send request to OPA: Failed to send request to OPA: error sending request for url (<http://localhost:8181/v1/data/permit/user_permissions>)
[25/Aug/2025:14:28:16] [2025-08-25T14:28:16Z ERROR pdp_server::api::authz::allowed_bulk] Failed to send request to OPA: Failed to send request to OPA: error sending request for url (<http://localhost:8181/v1/data/permit/bulk>)
We restarted the PDP deployment and the issue was fixed.
Could you help us understand what's causing this issue and how to fix it?
Thanks in advance.Ask Inkeep
08/25/2025, 5:42 PMAsk Inkeep
08/25/2025, 5:42 PM<http://localhost:8181>, this appears to be an issue with the OPA service that runs inside the PDP container . The PDP uses OPA internally to evaluate policies, and when OPA becomes unresponsive or crashes, permission checks will fail .
Here are some configuration changes that might help stabilize your deployment:
1. *Adjust OPA timeout settings* (2) :
• PDP_OPA_CLIENT_QUERY_TIMEOUT - Default is 1 second, you might want to increase this
• PDP_OPA_CLIENT_FAILURE_THRESHOLD - Default is 0.1 (10% failure rate triggers health check failure)
• PDP_OPA_CLIENT_FAILURE_THRESHOLD_INTERVAL - Default is 60 seconds
2. *Monitor OPA health more closely* :
• Enable PDP_OPA_DECISION_LOG_CONSOLE=True to see more detailed OPA logs
• Set OPAL_INLINE_OPA_LOG_FORMAT to full or http for better debugging
3. *Consider resource limits* - The PDP might be running out of memory over time, causing OPA to crash (3) .
To help our engineers investigate this issue further, could you please provide:
1. Which Workspace / Project / Env you are using
2. What specific SDK calls are you performing (as SDK code or CURL examples)
3. The exact PDP version (you mentioned v0.9.3 - can you confirm with docker images or your deployment manifest?)
4. The relevant PDP logs from when the issue occurs, including:
• Logs showing the OPA connection errors
• Any memory/CPU usage metrics from your monitoring
• Logs from PDP startup showing the configuration being applied
The logs you mentioned having from last Friday would be particularly helpful for diagnosis.Ask Inkeep
08/25/2025, 5:42 PMAlon Boshi
08/25/2025, 5:43 PMThomas
08/25/2025, 6:17 PMFailed to send request to OPA: Failed to send request to OPA: error sending request for url is a because of lack of CPU or memory resources, but won't be able to tell until we get into the logs.Rodrigo Mayer
08/25/2025, 6:18 PM