Install

An ephemeral/non persistent Redis is required for Superset.

Minimal In Memory Redis Helm/Helmfile snippet

  - name: redis
    namespace: kosmos-data
    createNamespace: true
    wait: true
    chart: ../../redis/redis
    skipDeps: true
    labels:
      app: superset
    values:
      - ../../redis/minimal-values.yaml

Superset

  - name: redis
    namespace: kosmos-data
    createNamespace: true
    wait: true
    chart: ../../redis/redis
    skipDeps: true
    labels:
      app: redis
    values:
      - ../../redis/minimal-values.yaml

  - name: superset-secrets
    namespace: kosmos-data
    createNamespace: true
    wait: true
    chart: ../../superset/superset-secrets
    skipDeps: true
    labels:
      app: superset

  # will create a superset user and a superset db in pg and generate a password
  - name: superset-initdb
    namespace: kosmos-sql
    wait: true
    needs: [kosmos-sql/pgcluster]
    chart: ../../init-datastore/initpg
    labels:
      app: superset
    values:
      - pgSecretName: pgcluster-superuser
        appDbName: superset
        appDbUser: superset

  - name: superset
    namespace: kosmos-data
    createNamespace: true
    wait: true
    chart: ../../superset/superset
    skipDeps: true
    needs: [kosmos-data/superset-secrets, kosmos-data/redis, kosmos-sql/superset-initdb]
    labels:
      app: superset
    values:
      - ../../superset/values-nooidc.yaml
      - supersetNode:
          connections:
            redis_password: ref+k8s://v1/Secret/kosmos-data/redis/redis-password
            db_user: ref+k8s://v1/Secret/kosmos-sql/superset-initdb-secret/app_db_user
            db_pass: ref+k8s://v1/Secret/kosmos-sql/superset-initdb-secret/app_db_password
        init:
          adminUser:
            username: ref+k8s://v1/Secret/kosmos-data/superset-admin-secret/username
            firstname: Superset
            lastname: Admin
            email: admin@athea.tech
            password: ref+k8s://v1/Secret/kosmos-data/superset-admin-secret/password
        ingress:
          hosts:
            - superset.{{.StateValues.domain }}
          tls:
            - secretName: superset-cert
              hosts:
                - superset.{{.StateValues.domain }}

  # Create the keycloak resources for OIDC purposes
  - name: keycloakimporter-superset
    namespace: kosmos-iam
    labels:
        app: superset
    needs:
        - kosmos-iam/keycloakimporter-init-realm-kosmos
        - kosmos-data/superset-secrets
    chart: ../../keycloakimporter/keycloakimporter
    values:
        - values_templates/superset/import-client-superset.yaml.gotmpl

info

For more information on Keycloak Importer see here

Get credentials.

kubectl get secret superset-admin-secret -n kosmos-data -o jsonpath='{.data.username}' | base64 --decode
kubectl get secret superset-admin-secret -n kosmos-data -o jsonpath='{.data.password}' | base64 --decode