++ ignore local tmp files

.gitignore

@@ -4,4 +4,5 @@ CLAUDE.md
 .env
 
 tmp
+.tmp/
 snapshots/*

.tmp/wb-superset-trino-secrets.README.md

@@ -1,14 +0,0 @@
-# wb superset/trino local secret files
-
-Do not commit this directory.
-
-- `.tmp/wb_superset_pg_password`
-  - target secret: `superset/postgresql-auth`
-  - target keys: `password`, `postgres-password`
-  - postgresql role: `superset`
-
-- `.tmp/wb_readonly_pg_password`
-  - target secret: `trino/postgres-secret`
-  - target key: `postgres_ro_password`
-  - postgresql role: `readonly`
-

.tmp/wb-superset-values.yaml

@@ -1,93 +0,0 @@
-fullnameOverride: superset
-vault:
-  enabled: false
-stronghold:
-  enabled: false
-extraEnv:
-  GUNICORN_TIMEOUT: "300"
-  SERVER_WORKER_AMOUNT: "4"
-  BABEL_DEFAULT_LOCALE: ru
-extraEnvRaw:
-  - name: ENABLE_PROXY_FIX
-    value: "true"
-  - name: DB_PASS
-    valueFrom:
-      secretKeyRef:
-        name: postgresql-auth
-        key: password
-  - name: SUPERSET_SECRET_KEY
-    valueFrom:
-      secretKeyRef:
-        name: superset-secret
-        key: secret.key
-  - name: JWT_SECRET
-    valueFrom:
-      secretKeyRef:
-        name: jwt-secret
-        key: jwt_secret
-supersetNode:
-  connections:
-    redis_host: superset-redis-headless
-    redis_port: "6379"
-    redis_user: ""
-    redis_cache_db: "1"
-    redis_celery_db: "0"
-    db_host: sarex-vpsql-01.xc.wb.ru
-    db_port: "5432"
-    db_user: superset
-    db_name: ss
-  resources:
-    requests:
-      cpu: 500m
-      memory: 1Gi
-    limits:
-      memory: 2Gi
-supersetWorker:
-  resources:
-    requests:
-      cpu: 500m
-      memory: 1Gi
-    limits:
-      memory: 2Gi
-init:
-  loadExamples: false
-postgresql:
-  enabled: false
-redis:
-  enabled: true
-  architecture: standalone
-  auth:
-    enabled: false
-    existingSecret: ""
-    existingSecretKey: ""
-    password: ""
-  master:
-    persistence:
-      enabled: false
-configOverrides:
-  feature_flags: |
-    FEATURE_FLAGS = {
-        "EMBEDDED_SUPERSET": True,
-        "ENABLE_TEMPLATE_PROCESSING": True,
-    }
-  iframe_config: |
-    X_FRAME_OPTIONS = None
-    HTTP_HEADERS = {
-        "Content-Security-Policy": "frame-ancestors https://*.wb.ru",
-    }
-  extend_timeout: |
-    SQLLAB_ASYNC_TIME_LIMIT_SEC = 300
-    SUPERSET_WEBSERVER_TIMEOUT = 300
-    SQLLAB_TIMEOUT = 600
-  set_locale: |
-    BABEL_DEFAULT_LOCALE = "ru"
-  enable_oauth: ""
-extraConfigs:
-  import_datasources.yaml: |
-    databases:
-      - database_name: trino
-        sqlalchemy_uri: trino://superset@trino.trino.svc.cluster.local:8080
-        expose_in_sqllab: true
-        allow_ctas: true
-        allow_cvas: true
-        allow_dml: false

.tmp/wb-trino-values.yaml

@@ -1,103 +0,0 @@
-nameOverride: trino
-coordinatorNameOverride: trino-coordinator
-workerNameOverride: trino-worker
-gateway:
-  enabled: false
-virtualService:
-  enabled: false
-server:
-  workers: 1
-  config:
-    authenticationType: ""
-  autoscaling:
-    enabled: false
-auth:
-  passwordAuthSecret: ""
-env:
-  - name: PROD_PG_RO_PASSWORD
-    valueFrom:
-      secretKeyRef:
-        name: postgres-secret
-        key: postgres_ro_password
-catalogs:
-  sarex_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/sarex_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  flows_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/flows_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  issues_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/issues_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  workspaces_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/workspaces_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  resources_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/resources_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  pm_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/pm_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  eav_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/eav_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  inspections_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/inspections_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  documentations_db: |
-    connector.name=postgresql
-    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/documentations_db?sslmode=disable
-    connection-user=readonly
-    connection-password=${ENV:PROD_PG_RO_PASSWORD}
-    postgresql.array-mapping=AS_JSON
-  clickhouse_db: |
-    connector.name=tpch
-    tpch.splits-per-node=4
-  hive: |
-    connector.name=tpch
-    tpch.splits-per-node=4
-coordinator:
-  resources:
-    requests:
-      cpu: 500m
-      memory: 2Gi
-    limits:
-      memory: 4Gi
-worker:
-  resources:
-    requests:
-      cpu: 500m
-      memory: 2Gi
-    limits:
-      memory: 4Gi
-  nodeSelector:
-    dedicated: processing-light
-  tolerations:
-    - key: dedicated
-      operator: Equal
-      value: processing-light
-      effect: NoSchedule

.tmp/wb_pg_admin_password

@@ -1 +0,0 @@
-pZpMmssSArrqHbeegnxTVU7YEbyKzgEg

.tmp/wb_pg_exporter_secret.json

@@ -1,18 +0,0 @@
-{
-    "apiVersion": "v1",
-    "data": {
-        "data_source_password": "cFpwTW1zc1NBcnJxSGJlZWdueFRWVTdZRWJ5S3pnRWc="
-    },
-    "kind": "Secret",
-    "metadata": {
-        "annotations": {
-            "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"data\":{\"data_source_password\":\"cFpwTW1zc1NBcnJxSGJlZWdueFRWVTdZRWJ5S3pnRWc=\"},\"kind\":\"Secret\",\"metadata\":{\"annotations\":{},\"name\":\"postgres-exporter-prometheus-postgres-exporter\",\"namespace\":\"postgres-exporter\"},\"type\":\"Opaque\"}\n"
-        },
-        "creationTimestamp": "2026-05-27T10:32:32Z",
-        "name": "postgres-exporter-prometheus-postgres-exporter",
-        "namespace": "postgres-exporter",
-        "resourceVersion": "97334157",
-        "uid": "0f74002a-eb50-419c-91d7-2d285b505319"
-    },
-    "type": "Opaque"
-}

.tmp/wb_readonly_pg_password

@@ -1 +0,0 @@
-1uCiCAN4kFsCwsz+Tx/7nB2nZk6JAyRoJoz9t+41jJzcQjjE

.tmp/wb_superset_pg_password

@@ -1 +0,0 @@
-BKw+QgsRaH+MizRiZTTSPkdH95zOdQ8Rod0vUw9N9EEuswgB