Skip to content

Commit cd6a64c

Browse files
committed
Adding reference to opa user-info-fetcher
1 parent 203e390 commit cd6a64c

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

docs/modules/superset/pages/usage-guide/security.adoc

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -134,6 +134,8 @@ In order to map roles from Opa into superset, we expect rego rules with a rule n
134134

135135
IMPORTANT: Only role mapping is enabled. Permissions can only be added through the Superset UI. RBAC through OPA is not implemented.
136136

137+
OPA rules can be synced using the xref:opa:usage-guide:user-info-fetcher[user-info-fetcher].
138+
137139
[source,yaml]
138140
----
139141
apiVersion: v1
@@ -155,7 +157,7 @@ data:
155157
roles := user.roles
156158
user.username == input.username
157159
}
158-
160+
# TODO: User opainfofetcher()
159161
users := [
160162
{"username": "admin", "roles": ["Admin", "Test"]},
161163
{"username": "testuser", "roles": ["El_Testos", "Custom2"]}
@@ -182,7 +184,7 @@ spec:
182184
----
183185

184186
<1> ConfigMap name containing rego rules
185-
<2> Mandatory Opa caching. Reduces calls to OPA API.
187+
<2> Mandatory Opa caching. If not set, default settings apply.
186188
<3> Time for cached entries per user can live. Defaults to 30s.
187189
<4> Number of maximum entries, defaults to 1000. Cache will be disabled for maxEntries: 0.
188190

0 commit comments

Comments
 (0)