mirror of
https://github.com/open-metadata/OpenMetadata.git
synced 2025-07-19 07:17:38 +00:00
57 lines
2.0 KiB
Markdown
57 lines
2.0 KiB
Markdown
# Configure OpenMetadata Helm
|
|
|
|
## Update Helm Values
|
|
|
|
Once the **Client Id**, and **Issuer URL** are generated, add those details in `openmetadata-security.yaml` file in the respective fields.
|
|
|
|
```yaml
|
|
authenticationConfiguration:
|
|
provider: "okta"
|
|
publicKeyUrls:
|
|
- "{ISSUER_URL}/v1/keys"
|
|
authority: "{ISSUER_URL}"
|
|
clientId: "{CLIENT_ID - SPA APP}"
|
|
callbackUrl: "http://localhost:8585/callback"
|
|
```
|
|
|
|
* **ISSUER\_URL** - This can be found in **Security -> API -> Authorization Servers**.
|
|
|
|
 (1).png>)
|
|
|
|
* **CLIENT\_ID - SPA APP** - This is the Client\_ID for Single Page Applications. On configuring the app, the Client\_ID can be found in the **General** section, under **Client Credentials >> Client ID**
|
|
|
|
.png>)
|
|
|
|
Update `authorizerConfiguration` to add `adminPrincipals`
|
|
|
|
* For `adminPrincipals`, add the **Username**.
|
|
* For `botPrincipals`, add the **Ingestion Client ID** for the Service application. This can be found in **Okta -> Applications -> Applications**.
|
|
|
|
.png>)
|
|
|
|
```yaml
|
|
global:
|
|
authorizer:
|
|
className: "org.openmetadata.catalog.security.DefaultAuthorizer"
|
|
containerRequestFilter: "org.openmetadata.catalog.security.JwtFilter"
|
|
initialAdmin: "<username>"
|
|
botPrincipal: "<Ingestion Client ID>"
|
|
principalDomain: "open-metadata.org"
|
|
authentication:
|
|
provider: "okta"
|
|
publicKey: "{ISSUER_URL}/v1/keys"
|
|
authority: "{ISSUER_URL}"
|
|
clientId: "{CLIENT_ID - SPA APP}"
|
|
callbackUrl: "http://localhost:8585/callback"
|
|
authenticationConfiguration:
|
|
provider: "okta"
|
|
publicKey: "{ISSUER_URL}/v1/keys"
|
|
authority: "{ISSUER_URL}"
|
|
clientId: "{CLIENT_ID - SPA APP}"
|
|
callbackUrl: "http://localhost:8585/callback"
|
|
```
|
|
|
|
### Upgrade Helm Release
|
|
|
|
Head towards [upgrade-openmetadata-on-kubernetes.md](../../../../upgrade/upgrade-on-kubernetes/upgrade-openmetadata-on-kubernetes.md "mention") to upgrade your OpenMetadata Helm Release.
|