You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/modules/superset/pages/usage-guide/security.adoc
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -177,19 +177,19 @@ spec:
177
177
clusterConfig:
178
178
authorization:
179
179
roleMappingFromOpa:
180
-
configMapName: superset-opa-regorules # <1>
180
+
configMapName: opa # <1>
181
181
package: superset
182
182
cache: # <2>
183
183
entryTimeToLive: 10s # <3>
184
184
maxEntries: 5 # <4>
185
185
----
186
186
187
-
<1> ConfigMap name containing rego rules
188
-
<2> Mandatory Opa caching. If not set, default settings apply.
189
-
<3> Time for cached entries per user can live. Defaults to 30s.
190
-
<4> Number of maximum entries, defaults to 1000. Cache will be disabled for maxEntries: 0.
187
+
<1> Discovery ConfigMap of your OpaCluster
188
+
<2> Optional caching of group memberships. If not set, default settings apply.
189
+
<3> Time to live for cached user entries. Defaults to 30s.
190
+
<4> Maximum number of entries, defaults to 1000. Cache will be disabled for maxEntries: 0.
191
191
192
-
IMPORTANT: Any role assignments done in the Superset UI are discarded and will be overridden by the OPA security manager.
192
+
IMPORTANT: Any role assignments done in the Superset UI are discarded and will be overridden by the OPA security manager. Groups are only sync on log in!
0 commit comments