++ fix superset redis image

.gitignore

@@ -4,5 +4,4 @@ CLAUDE.md
 .env
 
 tmp
-.tmp/
 snapshots/*

.tmp/wb-superset-trino-secrets.README.md

@@ -0,0 +1,14 @@
+# wb superset/trino local secret files
+
+Do not commit this directory.
+
+- `.tmp/wb_superset_pg_password`
+  - target secret: `superset/postgresql-auth`
+  - target keys: `password`, `postgres-password`
+  - postgresql role: `superset`
+
+- `.tmp/wb_readonly_pg_password`
+  - target secret: `trino/postgres-secret`
+  - target key: `postgres_ro_password`
+  - postgresql role: `readonly`
+

.tmp/wb-superset-values.yaml

@@ -0,0 +1,93 @@
+fullnameOverride: superset
+vault:
+  enabled: false
+stronghold:
+  enabled: false
+extraEnv:
+  GUNICORN_TIMEOUT: "300"
+  SERVER_WORKER_AMOUNT: "4"
+  BABEL_DEFAULT_LOCALE: ru
+extraEnvRaw:
+  - name: ENABLE_PROXY_FIX
+    value: "true"
+  - name: DB_PASS
+    valueFrom:
+      secretKeyRef:
+        name: postgresql-auth
+        key: password
+  - name: SUPERSET_SECRET_KEY
+    valueFrom:
+      secretKeyRef:
+        name: superset-secret
+        key: secret.key
+  - name: JWT_SECRET
+    valueFrom:
+      secretKeyRef:
+        name: jwt-secret
+        key: jwt_secret
+supersetNode:
+  connections:
+    redis_host: superset-redis-headless
+    redis_port: "6379"
+    redis_user: ""
+    redis_cache_db: "1"
+    redis_celery_db: "0"
+    db_host: sarex-vpsql-01.xc.wb.ru
+    db_port: "5432"
+    db_user: superset
+    db_name: ss
+  resources:
+    requests:
+      cpu: 500m
+      memory: 1Gi
+    limits:
+      memory: 2Gi
+supersetWorker:
+  resources:
+    requests:
+      cpu: 500m
+      memory: 1Gi
+    limits:
+      memory: 2Gi
+init:
+  loadExamples: false
+postgresql:
+  enabled: false
+redis:
+  enabled: true
+  architecture: standalone
+  auth:
+    enabled: false
+    existingSecret: ""
+    existingSecretKey: ""
+    password: ""
+  master:
+    persistence:
+      enabled: false
+configOverrides:
+  feature_flags: |
+    FEATURE_FLAGS = {
+        "EMBEDDED_SUPERSET": True,
+        "ENABLE_TEMPLATE_PROCESSING": True,
+    }
+  iframe_config: |
+    X_FRAME_OPTIONS = None
+    HTTP_HEADERS = {
+        "Content-Security-Policy": "frame-ancestors https://*.wb.ru",
+    }
+  extend_timeout: |
+    SQLLAB_ASYNC_TIME_LIMIT_SEC = 300
+    SUPERSET_WEBSERVER_TIMEOUT = 300
+    SQLLAB_TIMEOUT = 600
+  set_locale: |
+    BABEL_DEFAULT_LOCALE = "ru"
+  enable_oauth: ""
+extraConfigs:
+  import_datasources.yaml: |
+    databases:
+      - database_name: trino
+        sqlalchemy_uri: trino://superset@trino.trino.svc.cluster.local:8080
+        expose_in_sqllab: true
+        allow_ctas: true
+        allow_cvas: true
+        allow_dml: false

.tmp/wb-trino-values.yaml

@@ -0,0 +1,103 @@
+nameOverride: trino
+coordinatorNameOverride: trino-coordinator
+workerNameOverride: trino-worker
+gateway:
+  enabled: false
+virtualService:
+  enabled: false
+server:
+  workers: 1
+  config:
+    authenticationType: ""
+  autoscaling:
+    enabled: false
+auth:
+  passwordAuthSecret: ""
+env:
+  - name: PROD_PG_RO_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: postgres-secret
+        key: postgres_ro_password
+catalogs:
+  sarex_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/sarex_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  flows_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/flows_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  issues_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/issues_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  workspaces_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/workspaces_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  resources_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/resources_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  pm_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/pm_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  eav_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/eav_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  inspections_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/inspections_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  documentations_db: |
+    connector.name=postgresql
+    connection-url=jdbc:postgresql://sarex-vpsql-01.xc.wb.ru:5432/documentations_db?sslmode=disable
+    connection-user=readonly
+    connection-password=${ENV:PROD_PG_RO_PASSWORD}
+    postgresql.array-mapping=AS_JSON
+  clickhouse_db: |
+    connector.name=tpch
+    tpch.splits-per-node=4
+  hive: |
+    connector.name=tpch
+    tpch.splits-per-node=4
+coordinator:
+  resources:
+    requests:
+      cpu: 500m
+      memory: 2Gi
+    limits:
+      memory: 4Gi
+worker:
+  resources:
+    requests:
+      cpu: 500m
+      memory: 2Gi
+    limits:
+      memory: 4Gi
+  nodeSelector:
+    dedicated: processing-light
+  tolerations:
+    - key: dedicated
+      operator: Equal
+      value: processing-light
+      effect: NoSchedule

.tmp/wb_pg_admin_password

@@ -0,0 +1 @@
+pZpMmssSArrqHbeegnxTVU7YEbyKzgEg

.tmp/wb_pg_exporter_secret.json

@@ -0,0 +1,18 @@
+{
+    "apiVersion": "v1",
+    "data": {
+        "data_source_password": "cFpwTW1zc1NBcnJxSGJlZWdueFRWVTdZRWJ5S3pnRWc="
+    },
+    "kind": "Secret",
+    "metadata": {
+        "annotations": {
+            "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"data\":{\"data_source_password\":\"cFpwTW1zc1NBcnJxSGJlZWdueFRWVTdZRWJ5S3pnRWc=\"},\"kind\":\"Secret\",\"metadata\":{\"annotations\":{},\"name\":\"postgres-exporter-prometheus-postgres-exporter\",\"namespace\":\"postgres-exporter\"},\"type\":\"Opaque\"}\n"
+        },
+        "creationTimestamp": "2026-05-27T10:32:32Z",
+        "name": "postgres-exporter-prometheus-postgres-exporter",
+        "namespace": "postgres-exporter",
+        "resourceVersion": "97334157",
+        "uid": "0f74002a-eb50-419c-91d7-2d285b505319"
+    },
+    "type": "Opaque"
+}

.tmp/wb_readonly_pg_password

@@ -0,0 +1 @@
+1uCiCAN4kFsCwsz+Tx/7nB2nZk6JAyRoJoz9t+41jJzcQjjE

.tmp/wb_superset_pg_password

@@ -0,0 +1 @@
+BKw+QgsRaH+MizRiZTTSPkdH95zOdQ8Rod0vUw9N9EEuswgB