Jaieu Sheil
11/10/2025, 6:19 PM- OPAL_INLINE_OPA_CONFIG={"decision_logs":{"console":true},"plugins":{"decision_logs":{"reporting":{"min_delay_seconds":1,"max_delay_seconds":5}}},"default_decision_id_enabled":true,"default_authorization_decision_id_enabled":true}Ask Inkeep
11/10/2025, 6:19 PMAsk Inkeep
11/10/2025, 6:19 PMOPAL_INLINE_OPA_CONFIG. However, the OPAL client documentation shows that it uses OPA with specific configuration files :
./wait-for.sh opal_server:7002 --timeout=20 -- ./start.sh
The OPAL client runs OPA as an inline process with this command (2) :
/app/bin/opa run --server --addr=:8181 --authentication=token --authorization=basic --config-file=/home/permit/opa/config.yaml --log-level=info --v0-compatible=False /home/permit/opa/basic-authz.rego
The key here is that OPA is configured via a config file (--config-file=/home/permit/opa/config.yaml) . To enable decision IDs, you would need to modify this OPA configuration file rather than passing it through environment variables.
For debugging purposes, you can verify OPA is running correctly by checking if it's accessible on port 8181 (1) :
ports:
- "7766:7000"
- "8181:8181"
If you're still not seeing decision IDs in your responses, ensure:
1. OPA is fully started and accessible before making requests
2. The OPA configuration file includes the decision ID settings
3. You're querying the correct OPA endpoint that returns decision metadata
Could you share which version of OPAL you're running and any logs from the OPAL client startup? This would help identify if thereAsk Inkeep
11/10/2025, 6:19 PMJaieu Sheil
11/10/2025, 10:24 PMpermit support automation2
11/10/2025, 10:24 PM