Create Organization on Local Installation

In this final section, you will set up an organization within your locally installed GoodData.CN deployment. This organization will manage users, permissions, and analytics workspaces, and will define how your GoodData.CN instance can be accessed on your local machine.

Create Organization

With GoodData.CN installed, the next step is to set up an organization within your deployment. This organization acts as the foundational structure for managing users and resources, providing an organized environment for your local testing.

Steps:

1. Come up with a password that you will be using as the administrator password, for example MySecretPassword.

2. Generate a salted hash of the administrator password:

   openssl passwd -6 MySecretPassword

   The resulting salted hash should look something like this:

   $6$xx7ZTNMJU2wHDbwI$eR5qNMzP6Bq.TSIr/tMdTz..8EF3tdG4Yxy.jpvZVORGxstC9WsPGTxaOC/0BVli84Q7OdtmcG0OJyAfui84h.

   You will use this hash in the next step.

3. Create a file your-org-definition.yaml where you prepare a YAML definition of the organization custom resource:

   apiVersion: controllers.gooddata.com/v1
   kind: Organization
   metadata:
     name: alpha-org
   spec:
     id: alpha
     name: "Alpha, Corp."
     hostname: localhost
     adminGroup: adminGroup
     adminUser: admin
     adminUserToken: "<admin_password_salted_hash>"

4. Load the YAML definition to the Kubernetes cluster:

   kubectl -n gooddata-cn create -f your-org-definition.yaml

5. Check that you can see your organization as one of your Kubernetes resources:

   kubectl -n gooddata-cn get org

   you should see:

   NAME         ID         NAME           HOSTNAME
   alpha-org    alpha      Alpha, Corp.   localhost

   Your organization is now up and running, you should be able to reach the login screen on https://localhost:

   
   

6. Create bootstrap token to be able to administer your GoodData.CN deployment. Construct a token string using the following format:

   <adminUser>:bootstrap:<adminPassword>

   so using our previously used example values:

   admin:bootstrap:MySecretPassword

7. Encode the token string using base64:

   echo -n 'admin:bootstrap:MySecretPassword' | base64

   you should get something like:

   YWRtaW46Ym9vdHN0cmFwOk15U2VjcmV0UGFzc3dvcmQ=

   save this bootstrap token for later use.

Set Up Admin User

The default admin user has already been created in the GoodData organization. The next step is to create a corresponding user in Dex and update the admin user in the GoodData organization with the corresponding authenticationId from Dex. This process will allow you to log in and fully utilize GoodData.CN, ensuring that your administrator account is properly integrated and functional within the system.

Steps:

1. To create a user in Dex, submit a POST request to /api/v1/auth/users:

   curl localhost/api/v1/auth/users \
     -H "Authorization: Bearer YWRtaW46Ym9vdHN0cmFwOk15U2VjcmV0UGFzc3dvcmQ=" \
     -H "Content-type: application/json" \
     -X POST \
     -d '{
           "email": "boss@alpha.example.com",
           "password": "123456",
           "displayName": "John Doe"
         }'

   You will get back a response with your user’s authenticationId:

   {
     "email": "boss@alpha.example.com",
     "password": null,
     "displayName": "John Doe",
     "authenticationId": "CiQxOTIwNzc0Ny04ZWJkLTQ4ZjEtOGY3OC1iYjY2YmQ0ZjQwMjASBWxvY2Fs"
   }

   You will need the authenticationId in the next step.

2. Now update the admin user in your GoodData.CN organization by making a PATCH request to /api/v1/entities/users:

   curl -X PATCH localhost/api/v1/entities/users/admin \
     -H "Authorization: Bearer YWRtaW46Ym9vdHN0cmFwOk15U2VjcmV0UGFzc3dvcmQ=" \
     -H "Content-Type: application/vnd.gooddata.api+json" \
     -d '{
         "data": {
             "id": "admin",
             "type": "user",
             "attributes": {
                 "authenticationId": "CiQxOTIwNzc0Ny04ZWJkLTQ4ZjEtOGY3OC1iYjY2YmQ0ZjQwMjASBWxvY2Fs",
                 "email": "boss@alpha.example.com",
                 "firstname": "John",
                 "lastname": "Doe"
             }
         }
     }'

3. Go to https://localhost and login using the user account you have just set up.

   
   

   You can now start using GoodData on your local machine!

   
   

   To add more users, use the /api/v1/auth/users endpoint to create new users in the Dex identity provider and then see Manage Users on how to add them in GoodData.CN.