open-policy-agent / open-policy-agent/java-opa-sdk

Support OPA delta bundles

Open
#64 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bundles evaluator services
Dominant language
Java
Stars
16
Forks
24
Avg merge
8h 17m
Merged PRs (30d)
15

Description

OPA's bundle protocol supports delta bundles for incremental data updates: a patch.json describing add/replace/remove operations against the existing data tree, instead of a full replacement. The Java SDK currently treats every bundle as a full replacement, which scales poorly for large data sets that change frequently.

  • Detect delta bundles via the manifest (roots + delta indicators) and parse patch.json.
  • Apply patches to the in-store data tree without re-loading policies.
  • Reject delta bundles that violate the active manifest's roots (depends on #63).
  • Tests for add / replace / remove ops and for invalid patches.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the existing bundle manifest handling and the in-store data-tree update path, then review OPA's delta bundle format for patch.json add, replace, and remove operations. Implement manifest detection and patch validation against active roots, including the dependency on issue #63. Add tests covering each operation and invalid patches without re-loading policies.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.