Skip to content

Portal#

The following table contains the list of custom properties that can be configured for the Portal service. To use a custom property from the table, just add it to the following YML file in the custom-vars folder configured as per your environment:

  • vars.portal.yml
Property Description Values Default Value
PORTAL_PORT_EXTERNAL Property to change the default port number for Portal. 6868
SAML_GLOBAL_LOGOUT Enabled by default. The global logout for SAML is enabled. Once a logout is initiated, all the sessions you've accessed from the browser would be terminated from the Identity Provider (IDP). true, false true
SAML_EMAIL_ATTRIBUTE Property to customize the email assertion attribute of SAML.    http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
SAML_USERNAME_ATTRIBUTE Property to customize the username assertion attribute of SAML.   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
SAML_LASTNAME_ATTRIBUTE Property to customize the lastname assertion attribute of SAML.   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
SAML_FIRSTNAME_ATTRIBUTE Property to customize the firstname assertion attribute of SAML.   http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
PORTAL_LDAP_SSL_AUTO_GEN_TRUSTSTORE_FILE

Privacera Manager can create a certificate automatically with a certain name. In this property, give a name for the certificate. 

client_ldaps_truststore.cer OR client_ldaps_truststore.jks OR client_ldaps_truststore.p12 client_ldaps_truststore.cer
PORTAL_LDAP_SSL_AUTO_GEN_TRUSTSTORE_TYPE

Privacera Manager can create a certificate automatically of a specific type. In this property, give a type for the certificate. 

cer, jks, p12 cer
PORTAL_K8S_READINESS_PROBE_DELAY_SECS Time in seconds to delay the Kubernetes readiness probe for the Portal pod. 120
PORTAL_K8S_READINESS_PROBE_FAILURE_THRESHOLD Failure threshold is the number of times Kubernetes will try to perform the readiness probe for the Portal pod. 6
PORTAL_K8S_READINESS_PROBE_PERIOD_SECS Time in seconds to perform the Kubernetes readiness probe for the Portal pod. 30
PORTAL_K8S_LIVENESS_PROBE_DELAY_SECS Time in seconds to delay the Kubernetes liveness probe for the Portal pod. 400
PORTAL_K8S_LIVENESS_PROBE_PERIOD_SECS Time in seconds to perform the Kubernetes liveness probe for the Portal pod. 30
PORTAL_K8S_LIVENESS_PROBE_FAILURE_THRESHOLD Failure threshold is the number of times Kubernetes will try to perform the liveness probe for the Portal pod. 3
PORTAL_K8S_STARTUP_PROBE_ENABLED Enable the startup probe for the Portal pod. true, false false
PORTAL_K8S_STARTUP_PROBE_PERIOD_SECS Time in seconds to perform the Kubernetes startup probe for the Portal pod. 30
PORTAL_K8S_STARTUP_PROBE_DELAY_SECS Time in seconds to delay the Kubernetes startup probe for the Portal pod. 400
PORTAL_K8S_STARTUP_PROBE_FAILURE_THRESHOLD Failure threshold is the number of times Kubernetes will try to perform the startup probe for the Portal pod. 3
PORTAL_DATABRICKS_REPORT_ENABLE

Property to enable/disable offline reporting in Databricks.

Note: Do not set this property, if a Discovery service is already running in your environment.

true,false false
SAML_MAX_AUTH_AGE_SEC it is the maximum time in seconds that a users is allowed by IDP to be logged in since his initial authentication. The default time is 7889400 seconds (3 months). 7889400
SAML_RESPONSE_SKEW_SEC It is the maximum difference between local time and time of the assertion creation which still allows messages to be processed. It determines the maximum difference between the clocks of the IDP and SP machines. 600
SAML_FORCE_AUTHN When the property is set to true, IDP is required to re-authenticate a user even if the user has an existing session and not rely on any previous authentication events. true,false true
Memory Variables
PORTAL_HEAP_MIN_MEMORY_MB Minimum Java Heap memory in MB used by Privacera Portal. For example, PORTAL_HEAP_MIN_MEMORY_MB: "1024"
PORTAL_HEAP_MIN_MEMORY Minimum Java Heap memory used by Privacera Portal. Setting this value will override PORTAL_HEAP_MIN_MEMORY_MB. For example, PORTAL_HEAP_MIN_MEMORY: "1g"
PORTAL_HEAP_MAX_MEMORY_MB Maximum Java Heap memory in MB used by Privacera Portal. For example, PORTAL_HEAP_MAX_MEMORY_MB: "1024"
PORTAL_HEAP_MAX_MEMORY Maximum Java Heap memory used by Privacera Portal. Setting this value will override PORTAL_HEAP_MAX_MEMORY_MB. For example, PORTAL_HEAP_MAX_MEMORY: "1g"
PORTAL_K8S_MEM_REQUESTS_MB Minimum amount of kubernetes memory in MB to be requested by Privacera Portal. For example, PORTAL_K8S_MEM_REQUESTS_MB: "1024"
PORTAL_K8S_MEM_REQUESTS Minimum amount of kubernetes memory to be used by Privacera Portal. Setting this value will override PORTAL_K8S_MEM_REQUESTS_MB. For example, PORTAL_K8S_MEM_REQUESTS: "1G"
PORTAL_K8S_MEM_LIMITS_MB Maximum amount of kubernetes memory in MB to be requested by Privacera Portal. For example, PORTAL_K8S_MEM_LIMITS_MB: "1024"
PORTAL_K8S_MEM_LIMITS Maximum amount of kubernetes memory to be used by Privacera Portal. Setting this value will override PORTAL_K8S_MEM_LIMITS_MB. For example, PORTAL_K8S_MEM_LIMITS: "1G"
PORTAL_CPU_MIN Minimum amount of kubernetes CPU to be requested by Privacera Portal. For example, PORTAL_CPU_MIN: "0.5"
PORTAL_CPU_MAX Maximum amount of kubernetes CPU to be used by Privacera Portal. For example, PORTAL_CPU_MAX: "0.5"

Last update: September 23, 2021