Policy Gateway Incidents

Symptoms

• Policy decisions returning errors
• OPA connection failures
• Default-deny not working
• High latency on policy checks

Immediate Mitigation

1
2
3
4
5
6
7
8
9
# Check policy gateway health
curl http://localhost:4600/health

# Check OPA health
curl http://localhost:8181/health

# Restart services
just restart policy-gateway
just restart opa

Verification Steps

1. Policy gateway health OK
2. OPA policies loaded
3. Test policy decision
4. Latency <100ms

Rollback

1
2
# Reload last known good policy
just opa-load-policy <policy-bundle-id>

Escalation

• P0: Policy enforcement bypassed → EMERGENCY
• P1: All decisions failing → Check OPA connectivity