mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-13 03:42:35 -06:00
7a4e82194a
Previously, when OPA activated a bundle, it would erase ALL existing policy and data that had been cached. This meant that the bundles and components like kube-mgmt were mutually exclusive (because the bundles would overwrite the other component's policy and data.) With these changes, bundles can include a set of roots that scope the bundle. When the bundle activates, only policy and data under those roots are erased and overwitten. Signed-off-by: Torin Sandall <torinsandall@gmail.com>