Sign OPA bundle
opa_bundle_signSign an OPA bundle with a private key to generate a .signatures.json file or update the archive for integrity verification.
Instructions
Sign an OPA bundle with a private key using opa sign. Writes a .signatures.json next to the bundle directory, or updates the archive in place.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| bundle | Yes | Path to a bundle directory or archive. Must be in an allowed root. | |
| signingKey | Yes | Path to the signing key. | |
| signingAlg | No | Signing algorithm (e.g. RS256). Default: RS256. | |
| claimsFile | No | Path to extra claims to include in the signature. |