Skip to content

First steps

The addresses below are those of the Compose installation. On Kubernetes, use https://admin.<domain> and https://users.<domain>, and read the one-time password from the platform Secret; see addresses and sign-in.

  1. Open the administration portal at http://localhost:3000, sign in as platform-admin and change the temporary password. The installer prints it, and it is PLATFORM_ADMIN_PASSWORD in .env; entering the same one again keeps .env as a reference.
  2. Create a team, a database for that team, and a user in that team with the Read & write role. The administration guide explains each step.
  3. Sign out of the administration portal, because signing in to the user portal can fail while you are still signed in there. Open the user portal at http://localhost:3002, sign in as that user with the one-time password, and change it.
  4. Open Notebooks and pick an example from the notebook selector. Start with 01, which creates the data that the later examples read. See notebooks.

Services

Service URL Login
Administration portal http://localhost:3000 platform-admin + initial PLATFORM_ADMIN_PASSWORD
User portal http://localhost:3002 Keycloak account created or linked by an administrator
API documentation /docs on either portal Portal session
User MCP server http://localhost:3002/mcp Keycloak sign-in through the iceberg-mcp client, your own permissions
Administration MCP server http://localhost:3000/mcp Keycloak sign-in through the iceberg-mcp client, platform-admin role
Keycloak console http://localhost:8080/admin admin + KEYCLOAK_ADMIN_PASSWORD
Polaris Iceberg REST API http://localhost:8181/api/catalog Keycloak bearer token (connect from your computer) or client credentials
RustFS console http://localhost:9001 RUSTFS_ACCESS_KEY + RUSTFS_SECRET_KEY
pgAdmin http://localhost:5050 PGADMIN_EMAIL + PGADMIN_PASSWORD
Conversational BI http://localhost:3007 Optional extension; Keycloak account
dbt pipelines http://localhost:3004 Optional extension; Keycloak account, MCP through the ext-dbt-mcp client
Ingestion (dlt) http://localhost:3008 Optional extension; Keycloak account, MCP through the ext-ingestion-mcp client
OpenMetadata http://localhost:3011 Optional extension; opens your OpenMetadata server, sync status at /api/status

Credentials are in .env in the installation directory. All ports bind to 127.0.0.1, and PostgreSQL is internal only. For access beyond localhost, see deploying beyond localhost or the quick-share skill. On Kubernetes every portal has its own HTTPS host, the credentials are in the Secret iceberg-platform, and pgAdmin and the RustFS console don't exist; see addresses and sign-in.

Next