Page tree

   

Steps:

  1. You can apply this change through the Admin Settings Page (recommended) or
    trifacta-conf.json
    . For more information, see Platform Configuration Methods.
  2. Enable WASB as the base storage layer:

    "webapp.storageProtocol": "wasbs",
    "hdfs.enabled": false,
    ParameterDescription
    webapp.storageProtocol

    Sets the base storage layer for the platform. Set this value to wasbs.

    NOTE: After this parameter has been saved, you cannot modify it. You must re-install the platform to change it.

    wasb protocol is not supported.

    hdfs.enabledFor WASB blob storage, set this value to false.
  3. Save your changes.
  4. In the following sections, you configure where the platform acquires the SAS token to use for WASB access from one of the following:
    1. From platform configuration
    2. From the Azure key vault
Configure SAS token for WASB

When integrating with WASB, the platform must be configured to use a SAS token to gain access to WASB resources. This token can be made available in either of the following ways, each of which requires separate configuration.

Via Trifacta platform configuration:

  1. You can apply this change through the Admin Settings Page (recommended) or
    trifacta-conf.json
    . For more information, see Platform Configuration Methods.
  2. Locate and specify the following parameter:

    "azure.wasb.fetchSasTokensFromKeyVault": false,
    ParameterDescription
    azure.wasb.fetchSasTokensFromKeyVaultFor acquiring the SAS token from platform configuration, set this value to false.
  3. Save your changes and restart the platform.

Via Azure Key Vault:

To require the Trifacta platform to acquire the SAS token from the Azure key vault, please complete the following configuration steps.

  1. You can apply this change through the Admin Settings Page (recommended) or
    trifacta-conf.json
    . For more information, see Platform Configuration Methods.
  2. Locate and specify the following parameter:

    "azure.wasb.fetchSasTokensFromKeyVault": true,
    ParameterDescription
    azure.wasb.fetchSasTokensFromKeyVaultFor acquiring the SAS token from the key vault, set this value to true.
Define WASB stores
  1. To apply this configuration change, login as an administrator to the Trifacta node. Then, edit
    trifacta-conf.json
    . Some of these settings may not be available through the Admin Settings Page. For more information, see Platform Configuration Methods.
  2. Locate the azure.wasb.stores configuration block.

  3. Apply the appropriate configuration as specified below.

    Tip: The default container must be specified as the first set of elements in the array. All containers listed after the first one are treated as extra stores.

    "azure.wasb.stores": 
        [
         {
          "sasToken": "<DEFAULT_VALUE1_HERE>",
          "keyVaultSasTokenSecretName": "<DEFAULT_VALUE1_HERE>",
          "container": "<DEFAULT_VALUE1_HERE>",
          "blobHost": "<DEFAULT_VALUE1_HERE>"
         },
         {
          "sasToken": "<VALUE2_HERE>",
          "keyVaultSasTokenSecretName": "<VALUE2_HERE>",
          "container": "<VALUE2_HERE>",
          "blobHost": "<VALUE2_HERE>"
         }
        ]
    },
    ParameterDescriptionSAS Token from Azure Key VaultSAS Token from Platform Configuration
    sasToken

    Set this value to the SAS token to use, if applicable.

    Example value:

    ?sv=2019-02-02&ss=bfqt&srt=sco&sp=rwdlacup&se=2022-02-13T00:00:00Z&st=2020-02-13T00:00:00Z&spr=https&sig=<redacted>

    Set this value to an empty string.

    NOTE: Do not delete the entire line. Leave the value as empty.

    See below for the command to execute to generate a SAS token.
    keyVaultSasTokenSecretName

    Set this value to the secret name of the SAS token in the Azure key vault to use for the specified blob host and container.

    If needed, you can generate and apply a per-container SAS token for use in this field for this specific store. Details are below.


    Set this value to an empty string.

    NOTE: Do not delete the entire line. Leave the value as empty.

    container

    Apply the name of the WASB container.

    NOTE: If you are specifying different blob host and container combinations for your extra stores, you must create a new Key Vault store. See above for details.



    blobHost

    Specify the blob host of the container.

    Example value:

    storage-account.blob.core.windows.net

    NOTE: If you are specifying different blob host and container combinations for your extra stores, you must create a new Key Vault store. See above for details.



  4. Save your changes and restart the platform.


This page has no comments.