Skip to content

Rego API: add option to allow bundle to own all roots except defined #7097

Open
@anderseknert

Description

@anderseknert

Bundles currently own the roots they've defined, or all roots if none have been provided. Some tools extending OPA embed a bundle of their own to e.g. provide Rego rules and functions as an embedded library. This easily creates conflicts if the same tool loads user provided policy directories as bundles unless these have provided .manifest files where non-conflicting bundle roots are defined. For this scenario, it would be helpful if the Rego API allowed a mode where defined bundle roots had precedence, but where a bundle loaded without defined roots instead of trying to claim all roots would claim all roots not previously defined.

If there are better ways to do this available already, that would be even better :)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions