From 7f92392c0d4e599d5543dce22981cd08d2c68913 Mon Sep 17 00:00:00 2001 From: Sebastian Bernauer Date: Wed, 12 Nov 2025 13:01:23 +0100 Subject: [PATCH 1/3] docs: Fix wrong OPA configMapName docs --- .../modules/superset/pages/usage-guide/security.adoc | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/modules/superset/pages/usage-guide/security.adoc b/docs/modules/superset/pages/usage-guide/security.adoc index d6e9f86e..e5ab24d3 100644 --- a/docs/modules/superset/pages/usage-guide/security.adoc +++ b/docs/modules/superset/pages/usage-guide/security.adoc @@ -177,19 +177,19 @@ spec: clusterConfig: authorization: roleMappingFromOpa: - configMapName: superset-opa-regorules # <1> + configMapName: opa # <1> package: superset cache: # <2> entryTimeToLive: 10s # <3> maxEntries: 5 # <4> ---- -<1> ConfigMap name containing rego rules -<2> Mandatory Opa caching. If not set, default settings apply. -<3> Time for cached entries per user can live. Defaults to 30s. -<4> Number of maximum entries, defaults to 1000. Cache will be disabled for maxEntries: 0. +<1> Discovery ConfigMap of your OpaCluster +<2> Optional caching of group memberships. If not set, default settings apply. +<3> Time to live for cached user entries. Defaults to 30s. +<4> Maximum number of entries, defaults to 1000. Cache will be disabled for maxEntries: 0. -IMPORTANT: Any role assignments done in the Superset UI are discarded and will be overridden by the OPA security manager. +IMPORTANT: Any role assignments done in the Superset UI are discarded and will be overridden by the OPA security manager. Groups are only sync on log in! === Superset database From e6a6e44136c3f8c210c9eea2155468ecd7e747fd Mon Sep 17 00:00:00 2001 From: Sebastian Bernauer Date: Wed, 12 Nov 2025 13:08:10 +0100 Subject: [PATCH 2/3] Update docs/modules/superset/pages/usage-guide/security.adoc Co-authored-by: Malte Sander --- docs/modules/superset/pages/usage-guide/security.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/modules/superset/pages/usage-guide/security.adoc b/docs/modules/superset/pages/usage-guide/security.adoc index e5ab24d3..cf63a557 100644 --- a/docs/modules/superset/pages/usage-guide/security.adoc +++ b/docs/modules/superset/pages/usage-guide/security.adoc @@ -189,7 +189,7 @@ spec: <3> Time to live for cached user entries. Defaults to 30s. <4> Maximum number of entries, defaults to 1000. Cache will be disabled for maxEntries: 0. -IMPORTANT: Any role assignments done in the Superset UI are discarded and will be overridden by the OPA security manager. Groups are only sync on log in! +IMPORTANT: Any role assignments done in the Superset UI are discarded and will be overridden by the OPA security manager. Groups are only synchronized during log in! === Superset database From c6343957dc3c119b47ee2d3106987a49633b3916 Mon Sep 17 00:00:00 2001 From: Sebastian Bernauer Date: Wed, 12 Nov 2025 13:10:04 +0100 Subject: [PATCH 3/3] Improve docs --- docs/modules/superset/pages/usage-guide/security.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/modules/superset/pages/usage-guide/security.adoc b/docs/modules/superset/pages/usage-guide/security.adoc index cf63a557..aed03dcc 100644 --- a/docs/modules/superset/pages/usage-guide/security.adoc +++ b/docs/modules/superset/pages/usage-guide/security.adoc @@ -184,8 +184,8 @@ spec: maxEntries: 5 # <4> ---- -<1> Discovery ConfigMap of your OpaCluster -<2> Optional caching of group memberships. If not set, default settings apply. +<1> Discovery ConfigMap of your OpaCluster. +<2> Caching of group memberships. If not set, the default settings below apply. <3> Time to live for cached user entries. Defaults to 30s. <4> Maximum number of entries, defaults to 1000. Cache will be disabled for maxEntries: 0.