Configuring user impersonation for microservice data services/Routes - Cloud

Talend Remote Engine User Guide for Linux
Version
Cloud
Language
English
EnrichDitaval
Linux
Product
Talend Cloud
Module
Talend Remote Engine
Content
Design and Development
Installation and Upgrade

Procedure

  1. Open the <RemoteEngineInstallationDirectory>/etc/org.talend.ipaas.rt.dsrunner.cfg file.
  2. Specify the Java path to be used by the impersonated user in ms.custom.jre.path. By default, the system JRE path is used.
    This setting ensures that the impersonated user has access to the Java installation used by the engine.
  3. Edit the ms.execution.run.as.allow.list value and add all the users you need.
    The following table presents how different values of this parameter impact task runs with impersonation:
    Parameter value example Impersonation user example Task run Note
    anybody No impersonated user is used Accepted  
    anybody Jim Accepted All users are allowed
    * No impersonated user is used Rejected You must specify a user
    * Jim Accepted All users are allowed
    Jim,Jules No impersonated user is used Rejected You must specify a user recognized by this parameter
    Jim,Jules Jim Accepted Jim is recognized by this parameter
    Ju* Jules Accepted Jules is recognized by this parameter because Jules matches Ju*

    The value of this parameter is case-sensitive.

    Note:
    • This parameter is required if you need to use impersonation to run tasks.
    • Spaces and commas are valid separators for user name values in this file.
  4. Edit ms.execution.run.as.user.validation.regex to ensure that undesired instructions are not inserted in the user name variable. Default value is set to ^[a-z][-a-z0-9]*\$.