OKDP-flavored distribution of Apache Superset: custom Docker images and a Helm chart that wraps the official one with OAuth2/OIDC, Trino support and externalized secrets.

What is OKDP Superset?

This repository provides:

• A custom Docker image (quay.io/okdp/superset) built on top of apache/superset with Trino, PostgreSQL and Authlib pre-installed — plus security-patched rebuilds of the upstream -dockerize and -websocket variants used by the Helm chart.
• A Helm chart that wraps the official Apache Superset chart and adds:
  • Custom OAuth2/OIDC providers (Keycloak, Dex)
  • Optional OAuth2 for Trino
  • Externalized secrets (database, Redis, OAuth2, Superset)
  • High-level configuration overrides

Prerequisites

• Kubernetes cluster
• Helm v3+

Quick Start

helm upgrade --cleanup-on-fail --install my-release \
  oci://quay.io/okdp/charts/superset --version 0.15.2-2.0 \
  --set okdp.superset.superset_secret_key=$(openssl rand -base64 42)

The superset_secret_key is used by Flask to sign session cookies and encrypt sensitive data in Superset's metadata DB. Generate a strong unique value with openssl rand -base64 42. Replace 0.15.2-2.0 with the latest chart version from Releases.

Installation

See the Helm chart README for the full configuration reference and customization guide.

A ready-to-use sample is provided in helm/superset/sample-values.yaml (Keycloak OAuth2, ingress, examples loading):

helm upgrade --cleanup-on-fail --install my-release \
  oci://quay.io/okdp/charts/superset --version 0.15.2-2.0 \
  --values helm/superset/sample-values.yaml

Try it in the OKDP Sandbox

Superset is pre-integrated in the OKDP Sandbox, a complete local Kubernetes data platform (Keycloak, SeaweedFS, Spark, Airflow, JupyterHub, Trino, Superset).

Images

Published to quay.io/okdp:

• quay.io/okdp/superset:<version>
• quay.io/okdp/superset:<version>-dockerize
• quay.io/okdp/superset:<version>-websocket

---

Built for the OKDP Community