Build OPA bundle
opa_bundle_buildBuild a deployable OPA bundle from policy and data paths. Supports optimization, custom revision strings, inline signing, and WASM compilation.
Instructions
Build a deployable bundle from policy / data paths using opa build. Output is a .tar.gz archive with optional inline signing. Supports optimization, custom revision strings, and the WASM target.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| paths | Yes | Policy / data paths to include. Each must be in an allowed root. | |
| output | Yes | Output bundle path (typically `*.tar.gz`). Must be in an allowed root. | |
| optimize | No | Optimization level (0 = none, 2 = aggressive). | |
| revision | No | Bundle revision string written to the manifest. | |
| target | No | Build target (default `rego`; `wasm` compiles to WebAssembly). | |
| entrypoints | No | Entrypoint refs (required when `target=wasm` or `optimize > 0`). | |
| signingKey | No | Path to a signing key for inline signing. | |
| signingAlg | No | Signing algorithm (e.g. RS256). | |
| claimsFile | No | Path to a claims file for inline signing. | |
| capabilities | No | Path to a capabilities JSON file. |