OPA Pods Experience Frequent OOM Kills and Restarts After Upgrading to Version 4.0.3

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

You observe frequent Out of Memory (OOM) kills and pod restarts for Open Policy Agent (OPA) pods following an upgrade to version 4.0.3. Even after you increase memory limits (e.g., from 2Gi to 4Gi), the pods continue to crash, which leads to intermittent authentication failures. Diagnostic logs from monitoring tools indicates that increasing memory only delays the restart rather than resolving the underlying consumption.

Environment

Symantec Identity Security Platform - IDSP 4.0.3

Cause

This issue occurs due to a defect in OPA v1.17.0, which is included in the version 4.0.3 release. The OPA pods enter a continuous restart loop that prevents policy evaluation from stabilizing. This behavior is tracked under defect ID DE682022.

Resolution

This issue is fixed in release 4.0.4, 4.1.1, and higher.

To resolve the OOM kills, you must upgrade your environment to one of the fixed versions.