values-openmetadata.yaml.template

openmetadata:
  config:
    logLevel: ${OPEN_METADATA_LOG_LEVEL}
    elasticsearch:
      host: ${ELASTIC_HOST}
      searchType: elasticsearch
      port: ${ELASTIC_PORT}
      scheme: http
      trustStore:
        enabled: false
      auth:
        enabled: false
    database:
      host: ${POSTGRES_OPEN_METADATA_HOST}
      port: ${POSTGRES_OPEN_METADATA_PORT}
      driverClass: org.postgresql.Driver
      dbScheme: postgresql
      databaseName: ${POSTGRES_OPEN_METADATA_DBNAME}
      auth:
        username: ${POSTGRES_OPEN_METADATA_USER}
        password:
          secretRef: openmetadata-postgres-secrets
          secretKey: openmetadata-postgres-password
      dbParams: "sslmode=disable"
    pipelineServiceClientConfig:
      enabled: false
    authentication:
      provider: "custom-oidc"
      publicKeys:
        - ${OPEN_METADATA_ROOT_URL}/api/v1/system/config/jwks
        - ${KEYCLOAK_URL}/realms/${MODERATE_REALM}/protocol/openid-connect/certs
      authority: ${KEYCLOAK_URL}/realms/${MODERATE_REALM}
      clientId: ${OPEN_METADATA_CLIENT_ID}
      callbackUrl: ${OPEN_METADATA_ROOT_URL}/callback
      enableSelf#: false
    authorizer:
      className: org.openmetadata.service.security.DefaultAuthorizer
      containerRequestFilter: org.openmetadata.service.security.JwtFilter
      initialAdmins:
        - admin
      principalDomain: fundacionctic.org
    jwtTokenConfiguration:
      enabled: true
      rsapublicKeyFilePath: /etc/openmetadata/jwtkeys/${OPEN_METADATA_PUBKEY}
      rsaprivateKeyFilePath: /etc/openmetadata/jwtkeys/${OPEN_METADATA_PRIVKEY}
      jwtissuer: ${KEYCLOAK_URL}/realms/${MODERATE_REALM}
      keyId: 5756d057-114e-4ecb-8b00-afdb4740f47a
extraVolumes:
  - name: openmetadata-jwt-vol
    secret:
      secretName: openmetadata-jwt-keys
extraVolumeMounts:
  - name: openmetadata-jwt-vol
    mountPath: /etc/openmetadata/jwtkeys
    readOnly: true