wbsong111
151 lines
3.6 KiB
YAML
151 lines
3.6 KiB
YAML
|
|
configOverrides:
|
|
# Generate your own secret key for encryption. Use `openssl rand -base64 42` to generate a good key
|
|
secret: |
|
|
SECRET_KEY = '{openssl rand -base64 42 실행 값}'
|
|
enable_oauth: |
|
|
from flask_appbuilder.security.manager import (AUTH_DB, AUTH_OAUTH)
|
|
AUTH_TYPE = AUTH_OAUTH
|
|
OAUTH_PROVIDERS = [
|
|
{
|
|
"name": "keycloak",
|
|
"icon": "fa-key",
|
|
"token_key": "access_token",
|
|
"remote_app": {
|
|
"client_id": "superset",
|
|
"client_secret": "{keycloak client secret}",
|
|
"client_kwargs": {
|
|
"scope": "openid email profile",
|
|
'verify': False
|
|
},
|
|
'server_metadata_url': 'https://keycloak.example.org/auth/realms/paasxpert/.well-known/openid-configuration',
|
|
'api_base_url': 'https://keycloak.example.org/auth/realms/paasxpert/protocol/'
|
|
}
|
|
}
|
|
]
|
|
# Map Authlib roles to superset roles
|
|
AUTH_ROLE_ADMIN = 'Admin'
|
|
AUTH_ROLE_PUBLIC = 'Public'
|
|
# Will allow user self registration, allowing to create Flask users from Authorized User
|
|
AUTH_USER_REGISTRATION = True
|
|
# The default user self registration role
|
|
AUTH_USER_REGISTRATION_ROLE = "Gamma"
|
|
|
|
|
|
# 접속할 DB에 대한 드라이버를 별도 설치해야함.
|
|
bootstrapScript: |
|
|
#!/bin/bash
|
|
pip install sqlalchemy-drill psycopg2-binary Authlib
|
|
|
|
# superset 공통 사용 이미지
|
|
# 워커, 플라워,
|
|
image:
|
|
repository: apachesuperset.docker.scarf.sh/apache/superset
|
|
tag: ~
|
|
pullPolicy: IfNotPresent
|
|
resources: {}
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: "selfsigned-issuer"
|
|
cert-manager.io/duration: 8760h
|
|
cert-manager.io/renew-before: 720h
|
|
path: /
|
|
pathType: ImplementationSpecific
|
|
hosts:
|
|
- superset.example.org
|
|
tls:
|
|
- hosts:
|
|
- superset.example.org
|
|
secretName: superset-tls-secret
|
|
|
|
|
|
|
|
# Superset node configuration
|
|
supersetNode:
|
|
replicas:
|
|
enabled: true
|
|
replicaCount: 1
|
|
|
|
connections:
|
|
# -- Change in case of bringing your own redis and then also set redis.enabled:false
|
|
redis_host: '{{ .Release.Name }}-redis-headless'
|
|
redis_port: "6379"
|
|
redis_user: ""
|
|
# redis_password: superset
|
|
redis_cache_db: "1"
|
|
redis_celery_db: "0"
|
|
# Or SSL port is usually 6380
|
|
# Update following for using Redis with SSL
|
|
redis_ssl:
|
|
enabled: false
|
|
ssl_cert_reqs: CERT_NONE
|
|
# You need to change below configuration incase bringing own PostgresSQL instance and also set postgresql.enabled:false
|
|
db_host: '{{ .Release.Name }}-postgresql'
|
|
db_port: "5432"
|
|
db_user: superset
|
|
db_pass: superset
|
|
db_name: superset
|
|
resources: {}
|
|
|
|
# Superset Celery worker configuration
|
|
supersetWorker:
|
|
replicas:
|
|
enabled: true
|
|
replicaCount: 1
|
|
resources: {}
|
|
|
|
|
|
# Superset beat configuration (to trigger scheduled jobs like reports)
|
|
supersetCeleryBeat:
|
|
enabled: false
|
|
resources: {}
|
|
|
|
supersetCeleryFlower:
|
|
enabled: false
|
|
replicaCount: 1
|
|
resources: {}
|
|
|
|
postgresql:
|
|
enabled: true
|
|
auth:
|
|
username: superset
|
|
password: superset
|
|
database: superset
|
|
image:
|
|
registry: docker.io
|
|
primary:
|
|
resources:
|
|
limits: {}
|
|
requests:
|
|
memory: 256Mi
|
|
cpu: 250m
|
|
persistence:
|
|
enabled: true
|
|
storageClass: ""
|
|
size: 8Gi
|
|
|
|
redis:
|
|
enabled: true
|
|
architecture: standalone
|
|
auth:
|
|
enabled: false
|
|
password: superset
|
|
image:
|
|
registry: docker.io
|
|
master:
|
|
resources:
|
|
limits: {}
|
|
requests: {}
|
|
persistence:
|
|
enabled: true
|
|
storageClass: ""
|
|
size: 8Gi
|
|
|
|
|
|
|