This message was deleted.

Hello @Jack Geek , I’ll check with the team members and get back to you

1. The OPAL client variant will manage the OPA process for you (act as a watchdog and run it in the same container). The OPAL client standalone variant will assume you manage the OPA agent lifecycle yourself, OPAL will expect a stable DNS (url) to find OPA at. We think for most people the first option is better, since you don't have to worry about syncing 2 processes. 2. OPA will save policies in memory (ram) so no. For most use cases you don't need a volume. For very advanced use cases (i.e: OPAL scopes) you will need a volume.