[magicpointer]

Did you use OPA as a sidecar or a separate service? I have a similar setup but with a separate service the "diff pushing" approach adds quite some complexity, due to OPA and the data source having separate lifecycles.

[obiwanpallav1]

It was a separate service. The other service, that was using it, was a monolith.