Govern Installation and Setup¶
There are two modes for installing Govern:
It is recommended to have the same user logins between the different nodes of your Dataiku cluster. Users management on Govern node is the same as on other node types. Please see Security for more details.
We recommend that you keep the versions of the nodes connected to Govern in sync with the version of the Govern node.
Although it may work, connecting nodes to Govern with different software versions is not supported.
If you are using Dataiku Cloud Stacks, and have enabled fleet management on your virtual network, this is done automatically, so you don’t need to do the following operations.
Next, you are going to configure:
your Design / Automation nodes so that the different objects (projects, models, model versions) can be published to Govern
your Deployer nodes so that they can check the governance status of projects or API services before deploying them
For the Govern integration to work properly, you have to set the node ID of every DSS node that will connect to Govern.
You can configure a node ID by adding a
nodeid configuration option to the
general section of the
DATADIR/install.ini file, as shown in the example below:
[general] nodeid = YOUR_NODE_ID
After modifying that file, you will have to restart the DSS node in question.
You also have to make Govern aware of the node IDs you configured. In Govern, go to “Administration > Settings > Notifications & Integrations” and add an entry per node to the “Fallback node references” section.
On Govern, go to Administration > Security > Global API keys and generate a new API key. This key must have global admin privileges. Take note of the secret.
On the Design, Automation or Deployer node:
Go to “Administration > Settings > Dataiku Govern”
Enable Dataiku Govern integration
Enter the base URL (
http(s)://[host]:[port]) of the Govern node that you installed
Enter the secret of the API key
Repeat for each Design / Automation / Deployer node that you wish to connect to Govern.
As any other node type, Govern cannot guess what its external URL is.
The external URL is used any time Govern needs to build an absolute URL for the user, for example when sending links to Govern in an email.
To configure this setting, go to “Administration > Settings > Notifications & Integrations” and click on the wand icon: it should automatically set the Govern external URL by looking at the current URL of your browser.
You can set the name of your Govern node by going to “Administration > Settings > Instance”.
If you set an instance name, it will be displayed at the top right of every page of this instance, in the main navigation bar.
When defined, the instance name will also be included in audit trail messages when they are sent to an event server.
Govern can be configured to send email notifications when appropriate. Currently, this is mostly used to notify users about changes in the sign-off status of an item.
To enable email notifications:
Go to “Administration > Settings > Notifications & Integrations”.
Enable the “Enable notification emails” checkbox.
Fill-in the SMTP server connection parameters (host, port, SSL, TLS, login, password).
In addition, you must make sure that users who wishes to receive email notifications have their email address correctly set in their user profiles.
Please see Govern Security: Roles and Permissions for details on the Govern security model.