Run an OPA bundle server, configure OPA to poll it for policy bundles, and validate decision log and status plugin output

Steps

1. Build an OPA bundle from a local directory using opa build, which produces a bundle.tar.gz containing compiled policies and data; host this file on an HTTP server or object storage bucket.
2. Write an OPA configuration file specifying services (the bundle server URL and optional authentication), a bundles section pointing to the bundle name and path, and a polling interval.
3. Start the OPA server with opa run --server --config-file config.yaml; OPA will download and activate the bundle on startup and re-poll at the configured interval.
4. Configure the decision_logs plugin in the config file with a console reporter or remote service endpoint; verify decisions appear in OPA logs after sending a policy query.
5. Configure the status plugin to report bundle download status and activation events to a remote endpoint; query the OPA /health and /status HTTP endpoints to confirm bundle is active.