Skip to content

Za/openmetadata - #734

Open
amrc-za wants to merge 14 commits into
mainfrom
za/openmetadata
Open

Za/openmetadata #734
amrc-za wants to merge 14 commits into
mainfrom
za/openmetadata

Conversation

@amrc-za

@amrc-za amrc-za commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

Adds OpenMetadata as a new optional ACS service, deployed via the upstream openmetadata and openmetadata-dependencies Helm charts (v1.13.3).

The upstream images for OpenMetadata's server, its ingestion/Airflow component, and OpenSearch (used as OpenMetadata's search backend) all bundle outdated log4j-core/log4j-api jars with known CVEs. Rather than wait on upstream, we build three patched images that swap in log4j 2.26.1 and use them in place of the stock images.

@amrc-za
amrc-za requested a review from djnewbould August 21, 2026 12:57

@djnewbould djnewbould left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It all looks good! I've just left a couple of small comments.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this be wrapped with {{ if .Values.openmetadata.enabled }}?
I think they're missing namespace: {{ .Release.Namespace }} too

Comment on lines +13 to +24
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: acs-dags
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Gi

---

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this one redundant? I can't see where its used anywhere

Comment on lines +21 to +27
# ---
# service: !u UUIDs.Service.Authentication
# version: 2
# grants:
# !u Openmetadata.Requirement.ServiceRole:
# !u UUIDs.Permission.Directory.AdvertiseService:
# !u Openmetadata.Service.Openmetadata: false

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does it need this grant or is it fine without it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants