OpenTelemetry

Opa supports sending OpenTelemetry traces as stated in the documentation.

As of SDP 25.7, configOverrides are (still) not supported, we are tracking the progress in this GitHub issue. To enable traces you need to modify the config and thus pause the reconciliation of your OpaCluster, so that changes to the ConfigMap aren’t immediately overridden by the opa-operator.

It’s not encouraged to pause the reconciliation more than just temporarily. We recommend disabling it while you debug e.g. performance problems and re-enabling it afterwards. This problem will be solved once we support configOverrides for OPA.

Afterwards you can edit the <stacklet-name>-server-default ConfigMap and append a distributed_tracing section as follows. Please check the OPA documentation to see what other settings you can configure.

apiVersion: v1
kind: ConfigMap
metadata:
  name: opa-server-default
data:
  config.json: |-
    {
      <<< existing JSON >>>
      "distributed_tracing": {
        "address": "jaeger-collector.default.svc.cluster.local:4317",
        "type": "grpc"
      }
    }