superset.yaml

---
# The Superset metadata database is restored from postgres_superset_dump.sql (see
# setup-postgresql.yaml), which contains rows (e.g. the Trino database connection
# password) encrypted with the SECRET_KEY below.
apiVersion: v1
kind: Secret
metadata:
  name: superset-secret-key
stringData:
  SECRET_KEY: supersetSecretKey
---
apiVersion: superset.stackable.tech/v1alpha1
kind: SupersetCluster
metadata:
  name: superset
spec:
  image:
    productVersion: 6.0.0
  clusterConfig:
    credentialsSecretName: superset-admin-credentials
    metadataDatabase:
      postgresql:
        host: postgresql-superset
        database: superset
        credentialsSecretName: superset-postgresql-credentials
    authentication:
      - authenticationClass: keycloak
        oidc:
          clientCredentialsSecret: superset-keycloak-client
        userRegistrationRole: Gamma_extended
    # Superset roles are assigned at every login based on the Keycloak group
    # memberships, see superset-regorules.yaml
    authorization:
      roleMappingFromOpa:
        configMapName: opa
        package: superset
  nodes:
    roleConfig:
      listenerClass: external-stable
    roleGroups:
      default:
        replicas: 1
    podOverrides:
      spec:
        initContainers:
          - name: wait-for-setup-db-job
            image: oci.stackable.tech/sdp/testing-tools:0.3.0-stackable0.0.0-dev
            command:
              - bash
              - -c
              - |
                kubectl wait --for=condition=complete job/setup-db-job
---
apiVersion: v1
kind: Secret
metadata:
  name: superset-admin-credentials
type: Opaque
stringData:
  adminUser.username: admin
  adminUser.firstname: Superset
  adminUser.lastname: Admin
  adminUser.email: admin@superset.com
  adminUser.password: {{ supersetAdminPassword }}
---
apiVersion: v1
kind: Secret
metadata:
  name: superset-postgresql-credentials
stringData:
  username: superset
  password: superset
---
apiVersion: v1
kind: Secret
metadata:
  name: superset-keycloak-client
stringData:
  clientId: superset
  clientSecret: "{{ keycloakSupersetClientSecret }}"