161 lines
5.0 KiB
JSON
161 lines
5.0 KiB
JSON
{
|
|
"//": "⚠️ File referensi — gunakan bootstrap.sh untuk deployment otomatis.",
|
|
"//2": "JSON tidak mendukung shell variable expansion. Ubah nilai secara manual jika perlu import via UI.",
|
|
"realm": "sicabe",
|
|
"displayName": "eBdesk SiCABE",
|
|
"enabled": true,
|
|
"sslRequired": "none",
|
|
"registrationAllowed": false,
|
|
"loginWithEmailAllowed": true,
|
|
"resetPasswordAllowed": true,
|
|
"accessTokenLifespan": 3600,
|
|
"ssoSessionMaxLifespan": 86400,
|
|
"clients": [
|
|
{
|
|
"clientId": "trino",
|
|
"name": "Trino — Query Engine",
|
|
"description": "OIDC client untuk Trino (Processing Layer)",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "trino-secret",
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"publicClient": false,
|
|
"redirectUris": ["http://localhost:*", "https://localhost:*"],
|
|
"webOrigins": ["http://localhost:*", "https://localhost:*"]
|
|
},
|
|
{
|
|
"clientId": "starrocks",
|
|
"name": "StarRocks — OLAP Engine",
|
|
"description": "OIDC client untuk StarRocks (Serving Layer)",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "starrocks-secret",
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"publicClient": false,
|
|
"redirectUris": ["http://localhost:12030/*", "http://starrocks-fe:8030/api/oauth2"],
|
|
"webOrigins": ["http://localhost:12030"]
|
|
},
|
|
{
|
|
"clientId": "airflow",
|
|
"name": "Apache Airflow — Orchestrator",
|
|
"description": "OIDC client untuk Airflow (Ingestion Layer)",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "airflow-secret",
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"publicClient": false,
|
|
"redirectUris": ["http://localhost:12082/*"],
|
|
"webOrigins": ["http://localhost:12082"]
|
|
},
|
|
{
|
|
"clientId": "openmetadata",
|
|
"name": "OpenMetadata — Metadata Platform",
|
|
"description": "OIDC client untuk OpenMetadata (Governance Layer)",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "om-secret",
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"publicClient": false,
|
|
"redirectUris": ["http://localhost:12085/*"],
|
|
"webOrigins": ["http://localhost:12085"]
|
|
},
|
|
{
|
|
"clientId": "grafana",
|
|
"name": "Grafana — Observability",
|
|
"description": "OIDC client untuk Grafana (Governance Layer)",
|
|
"enabled": true,
|
|
"protocol": "openid-connect",
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "grafana-secret",
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"publicClient": false,
|
|
"redirectUris": ["http://localhost:12300/*"],
|
|
"webOrigins": ["http://localhost:12300"]
|
|
}
|
|
],
|
|
"roles": {
|
|
"realm": [
|
|
{
|
|
"name": "admin",
|
|
"description": "Administrator — akses penuh ke seluruh komponen"
|
|
},
|
|
{
|
|
"name": "engineer",
|
|
"description": "Data Engineer — akses ke Ingestion, Processing, Storage"
|
|
},
|
|
{
|
|
"name": "analyst",
|
|
"description": "Data Analyst — akses baca ke Serving dan Governance"
|
|
},
|
|
{
|
|
"name": "viewer",
|
|
"description": "Viewer — akses baca terbatas ke dashboard dan metadata"
|
|
}
|
|
]
|
|
},
|
|
"users": [
|
|
{
|
|
"username": "admin",
|
|
"enabled": true,
|
|
"email": "admin@sicabe.local",
|
|
"firstName": "Administrator",
|
|
"lastName": "SiCABE",
|
|
"credentials": [{ "type": "password", "value": "admin123", "temporary": false }],
|
|
"realmRoles": ["admin"],
|
|
"clientRoles": {
|
|
"trino": ["admin"],
|
|
"starrocks": ["admin"],
|
|
"airflow": ["admin"],
|
|
"openmetadata": ["admin"],
|
|
"grafana": ["Admin"]
|
|
}
|
|
},
|
|
{
|
|
"username": "engineer",
|
|
"enabled": true,
|
|
"email": "engineer@sicabe.local",
|
|
"firstName": "Data",
|
|
"lastName": "Engineer",
|
|
"credentials": [{ "type": "password", "value": "engineer123", "temporary": false }],
|
|
"realmRoles": ["engineer"]
|
|
},
|
|
{
|
|
"username": "analyst",
|
|
"enabled": true,
|
|
"email": "analyst@sicabe.local",
|
|
"firstName": "Data",
|
|
"lastName": "Analyst",
|
|
"credentials": [{ "type": "password", "value": "analyst123", "temporary": false }],
|
|
"realmRoles": ["analyst"]
|
|
},
|
|
{
|
|
"username": "viewer",
|
|
"enabled": true,
|
|
"email": "viewer@sicabe.local",
|
|
"firstName": "Viewer",
|
|
"lastName": "SiCABE",
|
|
"credentials": [{ "type": "password", "value": "viewer123", "temporary": false }],
|
|
"realmRoles": ["viewer"]
|
|
}
|
|
],
|
|
"scopeMappings": [
|
|
{
|
|
"client": "trino",
|
|
"roles": ["admin", "engineer"]
|
|
},
|
|
{
|
|
"client": "airflow",
|
|
"roles": ["admin", "engineer"]
|
|
}
|
|
]
|
|
}
|