I can't find any rule about keystore in bazel's doc or any parameter about signature in android_binary's parameters. So how can I build a release apk with signature?
This question was asked on bazel-discuss mailing list, it also contains a solution plus some background.