Akash Jain 0628d01fe4
chore(docs): Update k8s snippet of Google SSO (#15286)
* chore(docs): Update k8s snippet of Google SSO

* chore: Update code snippets for jwks config url

* chore(docs): Add a note on JWKS Url Reachability
2024-02-21 09:30:17 +01:00

1.3 KiB

title slug
Amazon Cognito SSO for Kubernetes /deployment/security/amazon-cognito/kubernetes

Amazon Cognito SSO for Kubernetes

Check the Helm information here.

Once the Client Id is generated, see the snippet below for an example of where to place the client id value and update the authorizer configurations in the values.yaml.

openmetadata:
  config:
    authorizer:
      className: "org.openmetadata.service.security.DefaultAuthorizer"
      containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
      initialAdmins:
        - "admin"
      principalDomain: "open-metadata.org"
    authentication:
      provider: "aws-cognito"
      publicKeys:
        - "{your domain}/api/v1/system/config/jwks"
        - "{Cognito Domain}/{User Pool ID}/.well-known/jwks.json" # Update with your Cognito Domain and User Pool ID
      authority: "{Cognito Domain}/{User Pool ID}" # Update with your Cognito Domain and User Pool ID as follows - https://cognito-idp.us-west-1.amazonaws.com/us-west-1_DL8xfTzj8
      clientId: "{Client ID}" # Update with your Client ID
      callbackUrl: "http://localhost:8585/callback"

{% partial file="/v1.3/deployment/configure-ingestion.md" /%}