mirror of
https://github.com/apache/druid.git
synced 2025-02-09 19:44:57 +00:00
d4967c38f8
* Various documentation updates.
1) Split out "data management" from "ingestion". Break it into thematic pages.
2) Move "SQL-based ingestion" into the Ingestion category. Adjust content so
all conceptual content is in concepts.md and all syntax content is in reference.md.
Shorten the known issues page to the most interesting ones.
3) Add SQL-based ingestion to the ingestion method comparison page. Remove the
index task, since index_parallel is just as good when maxNumConcurrentSubTasks: 1.
4) Rename various mentions of "Druid console" to "web console".
5) Add additional information to ingestion/partitioning.md.
6) Remove a mention of Tranquility.
7) Remove a note about upgrading to Druid 0.10.1.
8) Remove no-longer-relevant task types from ingestion/tasks.md.
9) Move ingestion/native-batch-firehose.md to the hidden section. It was previously deprecated.
10) Move ingestion/native-batch-simple-task.md to the hidden section. It is still linked in some
places, but it isn't very useful compared to index_parallel, so it shouldn't take up space
in the sidebar.
11) Make all br tags self-closing.
12) Certain other cosmetic changes.
13) Update to node-sass 7.
* make travis use node12 for docs
Co-authored-by: Vadim Ogievetsky <vadim@ogievetsky.com>
2.7 KiB
2.7 KiB
| id | title |
|---|---|
| druid-pac4j | Druid pac4j based Security extension |
Apache Druid Extension to enable OpenID Connect based Authentication for Druid Processes using pac4j as the underlying client library. This can be used with any authentication server that supports same e.g. Okta. This extension should only be used at the router node to enable a group of users in existing authentication server to interact with Druid cluster, using the web console. This extension does not support JDBC client authentication.
Configuration
Creating an Authenticator
druid.auth.authenticatorChain=["pac4j"]
druid.auth.authenticator.pac4j.type=pac4j
Properties
| Property | Description | Default | required |
|---|---|---|---|
druid.auth.pac4j.cookiePassphrase |
passphrase for encrypting the cookies used to manage authentication session with browser. It can be provided as plaintext string or The Password Provider. | none | Yes |
druid.auth.pac4j.readTimeout |
Socket connect and read timeout duration used when communicating with authentication server | PT5S | No |
druid.auth.pac4j.enableCustomSslContext |
Whether to use custom SSLContext setup via simple-client-sslcontext extension which must be added to extensions list when this property is set to true. | false | No |
druid.auth.pac4j.oidc.clientID |
OAuth Client Application id. | none | Yes |
druid.auth.pac4j.oidc.clientSecret |
OAuth Client Application secret. It can be provided as plaintext string or The Password Provider. | none | Yes |
druid.auth.pac4j.oidc.discoveryURI |
discovery URI for fetching OP metadata see this. | none | Yes |