mirror of
https://github.com/open-metadata/OpenMetadata.git
synced 2025-10-31 10:39:30 +00:00
c010939072
* Added payload size check logic for Elasticsearch * Added payload size check logic for Elasticsearch - made review changes * Added payload size check logic for Elasticsearch - added env in docker files * Optimize payload logic, fix search application error stats issue
163 lines
5.6 KiB
Plaintext
163 lines
5.6 KiB
Plaintext
OPENMETADATA_CLUSTER_NAME="openmetadata"
|
|
SERVER_PORT="8585"
|
|
SERVER_ADMIN_PORT="8586"
|
|
LOG_LEVEL="INFO"
|
|
|
|
# Migration
|
|
MIGRATION_LIMIT_PARAM = 1200
|
|
|
|
# OpenMetadata Server Authentication Configuration
|
|
AUTHORIZER_CLASS_NAME="org.openmetadata.service.security.DefaultAuthorizer"
|
|
AUTHORIZER_REQUEST_FILTER="org.openmetadata.service.security.JwtFilter"
|
|
AUTHORIZER_ADMIN_PRINCIPALS=[admin]
|
|
AUTHORIZER_ALLOWED_REGISTRATION_DOMAIN=["all"]
|
|
AUTHORIZER_INGESTION_PRINCIPALS=[ingestion-bot]
|
|
AUTHORIZER_PRINCIPAL_DOMAIN="openmetadata.org"
|
|
AUTHORIZER_ENFORCE_PRINCIPAL_DOMAIN="false"
|
|
AUTHORIZER_ENABLE_SECURE_SOCKET="false"
|
|
AUTHENTICATION_PROVIDER="basic"
|
|
AUTHENTICATION_RESPONSE_TYPE:"id_token"
|
|
CUSTOM_OIDC_AUTHENTICATION_PROVIDER_NAME=""
|
|
AUTHENTICATION_PUBLIC_KEYS=[http://localhost:8585/api/v1/system/config/jwks]
|
|
AUTHENTICATION_AUTHORITY="https://accounts.google.com"
|
|
AUTHENTICATION_CLIENT_ID=""
|
|
AUTHENTICATION_CALLBACK_URL=""
|
|
AUTHENTICATION_JWT_PRINCIPAL_CLAIMS=[email,preferred_username,sub]
|
|
AUTHENTICATION_ENABLE_SELF_SIGNUP="true"
|
|
# For SAML Authentication
|
|
# SAML_DEBUG_MODE="false"
|
|
# SAML_IDP_ENTITY_ID=""
|
|
# SAML_IDP_SSO_LOGIN_URL=""
|
|
# SAML_IDP_CERTIFICATE=""
|
|
# SAML_AUTHORITY_URL="http://localhost:8585/api/v1/saml/login"
|
|
# SAML_IDP_NAME_ID="urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress"
|
|
# SAML_SP_ENTITY_ID="http://localhost:8585/api/v1/saml/metadata"
|
|
# SAML_SP_ACS="http://localhost:8585/api/v1/saml/acs"
|
|
# SAML_SP_CERTIFICATE=""
|
|
# SAML_SP_CALLBACK="http://localhost:8585/saml/callback"
|
|
# SAML_STRICT_MODE="false"
|
|
# SAML_SP_TOKEN_VALIDITY="3600"
|
|
# SAML_SEND_ENCRYPTED_NAME_ID="false"
|
|
# SAML_SEND_SIGNED_AUTH_REQUEST="false"
|
|
# SAML_SIGNED_SP_METADATA="false"
|
|
# SAML_WANT_MESSAGE_SIGNED="false"
|
|
# SAML_WANT_ASSERTION_SIGNED="false"
|
|
# SAML_WANT_ASSERTION_ENCRYPTED="false"
|
|
# SAML_WANT_NAME_ID_ENCRYPTED="false"
|
|
# SAML_KEYSTORE_FILE_PATH=""
|
|
# SAML_KEYSTORE_ALIAS=""
|
|
# SAML_KEYSTORE_PASSWORD=""
|
|
# For LDAP Authentication
|
|
# AUTHENTICATION_LDAP_HOST=""
|
|
# AUTHENTICATION_LDAP_PORT=""
|
|
# AUTHENTICATION_LOOKUP_ADMIN_DN=""
|
|
# AUTHENTICATION_LOOKUP_ADMIN_PWD=""
|
|
# AUTHENTICATION_USER_LOOKUP_BASEDN=""
|
|
# AUTHENTICATION_USER_MAIL_ATTR=""
|
|
# AUTHENTICATION_LDAP_POOL_SIZE="3"
|
|
# AUTHENTICATION_LDAP_SSL_ENABLED=""
|
|
# AUTHENTICATION_LDAP_TRUSTSTORE_TYPE="TrustAll"
|
|
# AUTHENTICATION_LDAP_TRUSTSTORE_PATH=""
|
|
# AUTHENTICATION_LDAP_KEYSTORE_PASSWORD=""
|
|
# AUTHENTICATION_LDAP_SSL_KEY_FORMAT=""
|
|
# AUTHENTICATION_LDAP_ALLOW_WILDCARDS=""
|
|
# AUTHENTICATION_LDAP_ALLOWED_HOSTNAMES="[]"
|
|
# AUTHENTICATION_LDAP_SSL_VERIFY_CERT_HOST=""
|
|
# AUTHENTICATION_LDAP_EXAMINE_VALIDITY_DATES="true"
|
|
|
|
# JWT Configuration
|
|
RSA_PUBLIC_KEY_FILE_PATH="./conf/public_key.der"
|
|
RSA_PRIVATE_KEY_FILE_PATH="./conf/private_key.der"
|
|
JWT_ISSUER="open-metadata.org"
|
|
JWT_KEY_ID="Gb389a-9f76-gdjs-a92j-0242bk94356"
|
|
# OpenMetadata Server Pipeline Service Client Configuration
|
|
PIPELINE_SERVICE_CLIENT_ENDPOINT="http://ingestion:8080"
|
|
SERVER_HOST_API_URL="http://openmetadata-server:8585/api"
|
|
PIPELINE_SERVICE_CLIENT_VERIFY_SSL="no-ssl"
|
|
PIPELINE_SERVICE_CLIENT_SSL_CERT_PATH=""
|
|
#Database configuration for postgresql
|
|
DB_DRIVER_CLASS="org.postgresql.Driver"
|
|
DB_SCHEME="postgresql"
|
|
DB_USE_SSL="false"
|
|
DB_USER="openmetadata_user"
|
|
DB_USER_PASSWORD="openmetadata_password"
|
|
DB_HOST="postgresql"
|
|
DB_PORT="5432"
|
|
OM_DATABASE="openmetadata_db"
|
|
# ElasticSearch Configurations
|
|
ELASTICSEARCH_HOST= "elasticsearch"
|
|
ELASTICSEARCH_PORT="9200"
|
|
ELASTICSEARCH_SCHEME="http"
|
|
ELASTICSEARCH_USER=""
|
|
ELASTICSEARCH_PASSWORD=""
|
|
SEARCH_TYPE="elasticsearch"
|
|
ELASTICSEARCH_TRUST_STORE_PATH=""
|
|
ELASTICSEARCH_TRUST_STORE_PASSWORD=""
|
|
ELASTICSEARCH_CONNECTION_TIMEOUT_SECS="5"
|
|
ELASTICSEARCH_SOCKET_TIMEOUT_SECS="60"
|
|
ELASTICSEARCH_KEEP_ALIVE_TIMEOUT_SECS="600"
|
|
ELASTICSEARCH_BATCH_SIZE="10"
|
|
ELASTICSEARCH_PAYLOAD_BYTES_SIZE="10485760"
|
|
ELASTICSEARCH_INDEX_MAPPING_LANG="EN"
|
|
# Event Monitoring configurations
|
|
EVENT_MONITOR="prometheus"
|
|
EVENT_MONITOR_BATCH_SIZE="10"
|
|
EVENT_MONITOR_PATH_PATTERN=["/api/v1/tables/*", "/api/v1/health-check"]
|
|
EVENT_MONITOR_LATENCY="[]"
|
|
#PipelineServiceClient Configuration
|
|
PIPELINE_SERVICE_CLIENT_CLASS_NAME="org.openmetadata.service.clients.pipeline.airflow.AirflowRESTClient"
|
|
PIPELINE_SERVICE_IP_INFO_ENABLED="false"
|
|
PIPELINE_SERVICE_CLIENT_HOST_IP=""
|
|
PIPELINE_SERVICE_CLIENT_SECRETS_MANAGER_LOADER="noop"
|
|
#Airflow Parameters
|
|
AIRFLOW_USERNAME="admin"
|
|
AIRFLOW_PASSWORD="admin"
|
|
AIRFLOW_TIMEOUT="10"
|
|
AIRFLOW_TRUST_STORE_PATH=""
|
|
AIRFLOW_TRUST_STORE_PASSWORD=""
|
|
FERNET_KEY="jJ/9sz0g0OHxsfxOoSfdFdmk3ysNmPRnH3TUAbz3IHA="
|
|
#secretsManagerConfiguration
|
|
SECRET_MANAGER="noop"
|
|
OM_SM_REGION=""
|
|
OM_SM_ACCESS_KEY_ID=""
|
|
OM_SM_ACCESS_KEY=""
|
|
#email configuration:
|
|
OM_EMAIL_ENTITY="OpenMetadata"
|
|
OM_SUPPORT_URL="https://slack.open-metadata.org"
|
|
AUTHORIZER_ENABLE_SMTP="false"
|
|
OPENMETADATA_SERVER_URL="http://localhost:8585"
|
|
OPENMETADATA_SMTP_SENDER_MAIL=""
|
|
SMTP_SERVER_ENDPOINT=""
|
|
SMTP_SERVER_PORT=""
|
|
SMTP_SERVER_USERNAME=""
|
|
SMTP_SERVER_PWD=""
|
|
SMTP_SERVER_STRATEGY="SMTP_TLS"
|
|
#extensionConfiguration
|
|
OM_RESOURCE_PACKAGES="[]"
|
|
OM_EXTENSIONS="[]"
|
|
# Heap OPTS Configurations
|
|
OPENMETADATA_HEAP_OPTS="-Xmx1G -Xms1G"
|
|
# Application Config
|
|
CUSTOM_LOGO_URL_PATH=""
|
|
CUSTOM_MONOGRAM_URL_PATH=""
|
|
OM_MAX_FAILED_LOGIN_ATTEMPTS=3
|
|
OM_LOGIN_ACCESS_BLOCK_TIME=600
|
|
OM_JWT_EXPIRY_TIME=3600
|
|
# Mask passwords values in UI
|
|
MASK_PASSWORDS_API="false"
|
|
#WebConfiguration
|
|
WEB_CONF_URI_PATH="/api"
|
|
WEB_CONF_HSTS_ENABLED=false
|
|
WEB_CONF_HSTS_MAX_AGE="365 days"
|
|
WEB_CONF_HSTS_INCLUDE_SUBDOMAINS="true"
|
|
WEB_CONF_HSTS_PRELOAD="true"
|
|
WEB_CONF_FRAME_OPTION_ENABLED=false
|
|
WEB_CONF_FRAME_OPTION="SAMEORIGIN"
|
|
WEB_CONF_FRAME_ORIGIN=""
|
|
WEB_CONF_CONTENT_TYPE_OPTIONS_ENABLED=false
|
|
WEB_CONF_XSS_PROTECTION_ENABLED=false
|
|
WEB_CONF_XSS_PROTECTION_ON=true
|
|
WEB_CONF_XSS_PROTECTION_BLOCK=true
|
|
WEB_CONF_XSS_CSP_ENABLED=false
|
|
WEB_CONF_XSS_CSP_POLICY="default-src 'self'"
|
|
WEB_CONF_XSS_CSP_REPORT_ONLY_POLICY="" |