parent
5479f08e14
commit
1e8c6c663d
@ -1,81 +0,0 @@ |
||||
#version: openmetadata, 1.12.1 |
||||
openmetadata: |
||||
config: |
||||
authorizer: |
||||
className: "org.openmetadata.service.security.DefaultAuthorizer" |
||||
containerRequestFilter: "org.openmetadata.service.security.JwtFilter" |
||||
initialAdmins: |
||||
- "admin" |
||||
- "kkmbal" |
||||
principalDomain: "paasup.io" |
||||
allowedDomains: |
||||
- "gke.paasup.io" |
||||
- "paasup.io" |
||||
|
||||
authentication: |
||||
clientType: confidential |
||||
provider: "custom-oidc" |
||||
publicKeys: |
||||
- "https://openmetadata3.gke.paasup.io/api/v1/system/config/jwks" |
||||
- "https://keycloak.gke.paasup.io/realms/paasup/protocol/openid-connect/certs" |
||||
clientId: "open-metadata" |
||||
callbackUrl: "https://openmetadata3.gke.paasup.io/callback" |
||||
jwtPrincipalClaims: |
||||
- "preferred_username" |
||||
- "email" |
||||
- "sub" |
||||
oidcConfiguration: |
||||
enabled: true |
||||
oidcType: "Keycloak" |
||||
clientId: |
||||
secretRef: oidc-secrets |
||||
secretKey: openmetadata-oidc-client-id |
||||
clientSecret: |
||||
secretRef: oidc-secrets |
||||
secretKey: openmetadata-oidc-client-secret |
||||
discoveryUri: "https://keycloak.gke.paasup.io/realms/paasup/.well-known/openid-configuration" |
||||
serverUrl: "https://openmetadata3.gke.paasup.io" |
||||
callbackUrl: "https://openmetadata3.gke.paasup.io/callback" |
||||
tokenValidity: "3600" |
||||
sessionExpiry: "604800" |
||||
pipelineServiceClientConfig: |
||||
metadataApiEndpoint: "http://openmetadata3:8585/api" |
||||
airflow: |
||||
apiEndpoint: "http://openmetadata-dep-api-server:8080" |
||||
|
||||
ingress: |
||||
enabled: true |
||||
className: "kong" |
||||
annotations: |
||||
cert-manager.io/cluster-issuer: root-ca-issuer |
||||
cert-manager.io/duration: 8760h |
||||
cert-manager.io/renew-before: 720h |
||||
konghq.com/protocols: https |
||||
konghq.com/https-redirect-status-code: "301" |
||||
hosts: |
||||
- host: "openmetadata3.gke.paasup.io" |
||||
paths: |
||||
- path: / |
||||
pathType: ImplementationSpecific |
||||
tls: |
||||
- secretName: openmetadata-tls |
||||
hosts: |
||||
- "openmetadata3.gke.paasup.io" |
||||
|
||||
extraVolumes: |
||||
- name: java-truststore |
||||
secret: |
||||
secretName: java-truststore |
||||
|
||||
extraVolumeMounts: |
||||
- name: java-truststore |
||||
mountPath: /etc/ssl/java |
||||
readOnly: true |
||||
|
||||
resources: {} |
||||
|
||||
extraEnvs: |
||||
- name: LOG_LEVEL |
||||
value: "INFO" |
||||
- name: "OPENMETADATA_PUBLIC_URL" |
||||
value: "https://openmetadata3.gke.paasup.io" |
||||
Loading…
Reference in new issue