Add custom-values.yaml, CUSTOM-README.md

2024-12-20 18:23:08 +09:00
parent e522720428
commit 47d5fb59dc
2 changed files with 409 additions and 0 deletions
@@ -0,0 +1,150 @@
+
+configOverrides: 
+  # Generate your own secret key for encryption. Use `openssl rand -base64 42` to generate a good key
+  secret: |
+    SECRET_KEY = '{openssl rand -base64 42 실행 값}'
+  enable_oauth: |
+    from flask_appbuilder.security.manager import (AUTH_DB, AUTH_OAUTH)
+    AUTH_TYPE = AUTH_OAUTH
+    OAUTH_PROVIDERS = [
+        {
+            "name": "keycloak",
+            "icon": "fa-key",
+            "token_key": "access_token",
+            "remote_app": {
+                "client_id": "superset",
+                "client_secret": "{keycloak client secret}",
+                "client_kwargs": {
+                  "scope": "openid email profile",
+                  'verify': False
+                },
+                'server_metadata_url': 'https://keycloak.example.org/auth/realms/paasxpert/.well-known/openid-configuration',
+                'api_base_url': 'https://keycloak.example.org/auth/realms/paasxpert/protocol/'
+            }
+        }
+    ]
+    # Map Authlib roles to superset roles
+    AUTH_ROLE_ADMIN = 'Admin'
+    AUTH_ROLE_PUBLIC = 'Public'
+    # Will allow user self registration, allowing to create Flask users from Authorized User
+    AUTH_USER_REGISTRATION = True
+    # The default user self registration role
+    AUTH_USER_REGISTRATION_ROLE = "Gamma"
+    
+
+# 접속할 DB에 대한 드라이버를 별도 설치해야함.
+bootstrapScript: |
+  #!/bin/bash
+  pip install sqlalchemy-drill psycopg2-binary Authlib
+
+# superset 공통 사용 이미지
+# 워커, 플라워, 
+image:
+  repository: apachesuperset.docker.scarf.sh/apache/superset
+  tag: ~
+  pullPolicy: IfNotPresent
+resources: {}
+nodeSelector: {}
+tolerations: []
+
+
+ingress:
+  enabled: true
+  annotations: 
+    cert-manager.io/cluster-issuer: "selfsigned-issuer" 
+    cert-manager.io/duration: 8760h  
+    cert-manager.io/renew-before: 720h
+  path: /
+  pathType: ImplementationSpecific
+  hosts:
+  - superset.example.org
+  tls: 
+  -  hosts:
+     - superset.example.org
+     secretName: superset-tls-secret
+  
+
+
+# Superset node configuration
+supersetNode:
+  replicas:
+    enabled: true
+    replicaCount: 1
+
+  connections:
+    # -- Change in case of bringing your own redis and then also set redis.enabled:false
+    redis_host: '{{ .Release.Name }}-redis-headless'
+    redis_port: "6379"
+    redis_user: ""
+    # redis_password: superset
+    redis_cache_db: "1"
+    redis_celery_db: "0"
+    # Or SSL port is usually 6380
+    # Update following for using Redis with SSL
+    redis_ssl:
+      enabled: false
+      ssl_cert_reqs: CERT_NONE
+    # You need to change below configuration incase bringing own PostgresSQL instance and also set postgresql.enabled:false
+    db_host: '{{ .Release.Name }}-postgresql'
+    db_port: "5432"
+    db_user: superset
+    db_pass: superset
+    db_name: superset
+  resources: {}
+
+# Superset Celery worker configuration
+supersetWorker:
+  replicas:
+    enabled: true
+    replicaCount: 1
+  resources: {}
+  
+
+# Superset beat configuration (to trigger scheduled jobs like reports)
+supersetCeleryBeat:
+  enabled: false
+  resources: {}
+
+supersetCeleryFlower:
+  enabled: false
+  replicaCount: 1
+  resources: {}
+
+postgresql:
+  enabled: true
+  auth:
+    username: superset
+    password: superset
+    database: superset
+  image:
+    registry: docker.io
+  primary:
+    resources:
+      limits: {}
+      requests:
+        memory: 256Mi
+        cpu: 250m
+    persistence:
+      enabled: true
+      storageClass: ""
+      size: 8Gi
+
+redis:
+  enabled: true
+  architecture: standalone
+  auth:
+    enabled: false    
+    password: superset
+  image:
+    registry: docker.io
+  master:
+    resources:
+      limits: {}
+      requests: {}
+    persistence:
+      enabled: true
+      storageClass: ""
+      size: 8Gi
+
+
+