OPA Dashboard

Monitor OPA enforcement metrics - decision trends, match rates, tool usage, and enforcement action distribution.

Overview

The OPA Dashboard at /dashboard/opa-dashboard provides real-time analytics on how the OPA engine is evaluating and enforcing policy decisions.

Period Selector

Use the period selector in the header to choose the time range: 24 hours, 7 days, or 30 days.

Status Card

The OPA Status Card shows the current engine state:

FieldDescription
HealthWhether OPA is reachable and healthy
ModeCurrent enforcement mode: enforce, shadow, or disabled
External URLThe OPA endpoint URL (if using an external OPA instance)

Metrics Cards

Four key metrics are displayed as cards:

MetricDescription
Total DecisionsCombined count of native and OPA decisions
OPA EvaluatedNumber of decisions evaluated by OPA, with percentage of total
Match RateAlignment between OPA and native decisions. Color-coded: green (95%+), yellow (80%+), red (below 80%)
Avg LatencyAverage response time comparison - OPA vs. native (in milliseconds)

Decision Chart

A stacked area chart showing decisions over time:

  • Native (gray) - Decisions made by the native engine
  • OPA (blue) - Decisions made by OPA
  • Fallback (yellow) - Fallback decisions when OPA is unavailable

Hover over any point to see the breakdown for that date.

Decision Table

A table of recent individual decisions showing the decision outcome, timestamp, and details.

Enforcement Chart

A donut chart showing the distribution of enforcement actions:

  • Block - Request blocked
  • Hold - Request held for review
  • Allow_log - Request allowed with logging
  • Allow - Request allowed
  • Shadow - Decision logged but not enforced

The center of the donut shows the total enforcement count.

Tools Chart

A horizontal bar chart showing per-tool decision breakdown:

  • Green bars - Allowed decisions
  • Red bars - Denied decisions

Each bar is labeled with the tool name (truncated to 20 characters for display).

On this page