Skip to main content
After a successful installation of Helm chart, you need to perform the following steps to configure the OpenFGA.

​
1. Retrieve Store ID and Authorization Model ID

Run the following command to get the store_id and authorization_model_id from the OpenFGA logs: 
kubectl logs -l app.kubernetes.io/name=openfga,app.kubernetes.io/instance=enkryptai -n enkryptai-stack | grep -oP '(store_id|authorization_model_id)":"[^"]*'
This command will output something similar to the following: 
store_id":"01KCV38V1BTHC2R4W5E8Q3FZW9
authorization_model_id":"01KCV38V1Q7KQP4KPR6TS5KYWN
Take note of these values as you will need them in the next step.

​
2. Update Kubernetes Secrets

You now need to update the Kubernetes secrets with the store_id and authorization_model_id you just retrieved. The following table summarizes the secrets and keys that need to be updated in the enkryptai-stack namespace.
Secret NameKeyValue from Logs
gateway-env-secretDECK_OPENFGA_AUTHORIZATION_MODEL_IDauthorization_model_id
gateway-env-secretDECK_OPENFGA_STORE_IDstore_id
frontend-env-secretFGA_MODEL_IDauthorization_model_id
frontend-env-secretFGA_STORE_IDstore_id

​
3. Restart Deployments

After updating the secrets, you need to restart the frontend and gateway-kong deployments to apply the changes. 
kubectl rollout restart deployment frontend -n enkryptai-stack
kubectl rollout restart deployment gateway-kong -n enkryptai-stack
Note: Wait for the frontend and gateway-kong pods to be in a running state before attempting to use the Enkrypt AI stack. You can monitor the status of the pods using the following command: 
kubectl get pods -n enkryptai-stack -w