Policy as Code Meets OpenTelemetry: The Next Frontier of Observability
summary
Combines Open Policy Agent and OpenTelemetry to treat authorization outcomes as structured decision telemetry, emitting a privacy‑preserving fingerprint or digital DNA for each eval so decisions can be replayed and drift detected; demos a bank wire scenario where a $380,000 international transfer trips a $250,000 human‑approval rule and a new policy version increases denials; shows enforcement via OPA sidecar/agent with sub‑millisecond overhead and announces a helper called Zift that extracts in‑app auth logic into Rego for testing and telemetry.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:03OPA and OpenTelemetry maturity
- 2:48Traditional telemetry misses auth context
- 7:21Decision telemetry and privacy signals
- 11:12Live demo: policy-driven wire transfer
- 15:49Policy drift detection
- 18:21Decision observability next frontier
- 19:46Actionable steps
- 21:52Q&A
related talks
31mDeploying Policy-as-Code with Readable Rego Policies, and Open Policy Agent
38mPolicy as Code with Open Policy Agent
33mIntro: Open Policy Agent
29mOpen Policy Agent (OPA) Intro & Deep Dive
32mImplementing Authorization
39mIntro: Open Policy Agent
41mOpen Policy Agent (OPA) Intro & Deep Dive
33mOpen Policy Agent Deep Dive