Use flowId for decision ID.

filters/openpolicyagent/evaluation.go

@@ -16,17 +16,20 @@ import (
 )
 
 func (opa *OpenPolicyAgentInstance) Eval(ctx context.Context, req *ext_authz_v3.CheckRequest) (*envoyauth.EvalResult, error) {
-	result, stopeval, err := envoyauth.NewEvalResult()
-	span := opentracing.SpanFromContext(ctx)
-	if span != nil {
-		span.SetTag("opa.decision_id", result.DecisionID)
-	}
+
+	decisionId, err := opa.idGenerator.Generate()
 
 	if err != nil {
 		opa.Logger().WithFields(map[string]interface{}{"err": err}).Error("Unable to generate decision ID.")
 		return nil, err
 	}
 
+	result, stopeval, err := envoyauth.NewEvalResult(WithDecisionID(decisionId))
+	span := opentracing.SpanFromContext(ctx)
+	if span != nil {
+		span.SetTag("opa.decision_id", result.DecisionID)
+	}
+
 	var input map[string]interface{}
 	defer func() {
 		stopeval()
@@ -71,3 +74,11 @@ func (opa *OpenPolicyAgentInstance) logDecision(ctx context.Context, input inter
 
 	return decisionlog.LogDecision(ctx, opa.manager, info, result, err)
 }
+
+type Opt func(*envoyauth.EvalResult)
+
+func WithDecisionID(decisionID string) Opt {
+	return func(result *envoyauth.EvalResult) {
+		result.DecisionID = decisionID
+	}
+}

filters/openpolicyagent/openpolicyagent.go

@@ -5,6 +5,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"github.com/zalando/skipper/filters/flowid"
 	"io"
 	"net/http"
 	"os"
@@ -360,6 +361,8 @@ type OpenPolicyAgentInstance struct {
 
 	maxBodyBytes       int64
 	bodyReadBufferSize int64
+
+	idGenerator flowid.Generator
 }
 
 func envVariablesMap() map[string]string {
@@ -395,6 +398,8 @@ func interpolateConfigTemplate(configTemplate []byte, bundleName string) ([]byte
 // new returns a new OPA object.
 func (registry *OpenPolicyAgentRegistry) new(store storage.Store, configBytes []byte, instanceConfig OpenPolicyAgentInstanceConfig, filterName string, bundleName string, maxBodyBytes int64, bodyReadBufferSize int64) (*OpenPolicyAgentInstance, error) {
 	id := uuid.New().String()
+	uniqueIDGenerator, _ := flowid.NewStandardGenerator(32)
+
 	opaConfig, err := config.ParseConfig(configBytes, id)
 	if err != nil {
 		return nil, err
@@ -428,6 +433,8 @@ func (registry *OpenPolicyAgentRegistry) new(store storage.Store, configBytes []
 
 		preparedQueryDoOnce:    new(sync.Once),
 		interQueryBuiltinCache: iCache.NewInterQueryCache(manager.InterQueryBuiltinCacheConfig()),
+
+		idGenerator: uniqueIDGenerator,
 	}
 
 	manager.RegisterCompilerTrigger(opa.compilerUpdated)

go.mod

@@ -181,4 +181,6 @@ require (
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )
 
+replace github.com/open-policy-agent/opa-envoy-plugin => /Users/pjayawardhan/opa-envoy-plugin  //ToDO
+
 go 1.21