Skip to content

Commit b375f30

Browse files
committed
docs: Improve NiFi OPA authorization improvement section
1 parent 09eac86 commit b375f30

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

modules/ROOT/partials/release-notes/release-26.3.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -198,7 +198,7 @@ Implemented in https://github.com/stackabletech/hdfs-operator/pull/751[hdfs-oper
198198
===== Apache NiFi
199199

200200
* *Breaking:* The authorization configuration for the operator has been adjusted to more closely match and represent the Apache NiFi interfaces and implementations.
201-
The `OpaAuthorizer`, `SingleUserAuthorizer` and `StandardManagedAuthorizer` can now be explicitly set.
201+
The `opa`, `singleUser`, and `standard` authorization options can now be explicitly set.
202202
This allows to set an `initialAdminUser` for file-based authorization.
203203
+
204204
--
@@ -217,11 +217,11 @@ spec:
217217
initialAdminUser: CN=admin,OU=admin-group,DC=example,DC=org
218218
----
219219

220-
If not provided this defaults to the `SingleUserAuthorizer`.
220+
If not provided this defaults to the `singleUser`.
221221

222222
[WARNING]
223223
====
224-
Users authenticating via LDAP that do not use the `OpaAuthorizer` (but relied on the operator-generated file-based authorization), now have to explicitly set the `StandardManagedAuthorizer` and the `initialAdminUser`.
224+
Users authenticating via LDAP that do not use the `opa` authorizer (but relied on the operator-generated file-based authorization), now have to explicitly set the `standard` authorizer and the `initialAdminUser`.
225225
The cluster definition must be extended by an authorization part like shown above.
226226
227227
This means that the bind user now can differ from the `initialAdminUser`.

0 commit comments

Comments
 (0)