lucargir opened a new pull request, #38597:
URL: https://github.com/apache/superset/pull/38597
This PR updates the Superset Helm chart to **0.16.0** with new capabilities,
security and operational improvements, and configuration fixes.
**New features and integrations:**
- **External Secrets Operator** – `externalSecrets` values and template for
secret management
- **Gateway API** – HTTPRoute template (alternative to Ingress)
- **Observability** – ServiceMonitor (Prometheus Operator) and VPA (Vertical
Pod Autoscaler)
- **Autoscaling** – KEDA ScaledObject for Celery workers
- **Security & validation** – NetworkPolicy template, pre-install validation
job, dedicated upgrade job for DB migrations
- **Optional dependencies** – Configurable optional pip/uv dependency groups
in values and config generation
**Chart and template improvements:**
- **Labels** – Standardized to Kubernetes recommended labels
(`app.kubernetes.io/*`); legacy selectors kept for backward compatibility
- **Helpers** – Refactored `_helpers.tpl` with default init containers,
deprecation checks, and component labels
- **Values** – Expanded `values.yaml` with new options and documentation;
migration guide in `UPGRADING.md` (0.15.x → 0.16.x)
- **Chart tests** – New tests for deployment, security, secrets, features,
labels, pods, RBAC, and deprecation
App version remains 6.0.0. Backward compatibility is preserved and
documented in `UPGRADING.md`.
### TESTING INSTRUCTIONS
1. **Lint and template check**
```bash
cd helm/superset
helm lint .
helm template test . --debug 2>&1 | head -100
```
2. **Run chart tests (if available)**
```bash
helm unittest . # if installed
ct lint --chart-dir . # chart-testing
```
3. **Install from branch**
```bash
helm install my-superset ./helm/superset -f my-values.yaml --set
init.adminUser.password=admin
```
Confirm all main components (web, worker, beat, optional flower/ws)
deploy and pods become Ready.
4. **Upgrade from 0.15.x (optional)**
- Install a 0.15.x chart, then upgrade using this chart and a values set
that matches your previous overrides.
- Confirm no unexpected resource changes and that Superset and Celery
still work (login, run a query, trigger a report).
5. **Verify optional features**
- If using External Secrets: set `externalSecrets.enabled: true` and
confirm ExternalSecret resources are created.
- If using Gateway API: set `gateway.enabled: true` and confirm HTTPRoute
is created.
- If using KEDA for workers: set `supersetWorker.keda.enabled: true` and
confirm ScaledObject is created.
### ADDITIONAL INFORMATION
- [ ] Has associated issue:
- [ ] Required feature flags:
- [ ] Changes UI
- [ ] Includes DB Migration (follow approval process in
[SIP-59](https://github.com/apache/superset/issues/13351))
- [ ] Migration is atomic, supports rollback & is backwards-compatible
- [ ] Confirm DB migration upgrade and downgrade tested
- [ ] Runtime estimates and downtime expectations provided
- [x] Introduces new feature or API (new chart options, Gateway API, ESO,
KEDA, VPA, ServiceMonitor, etc.)
- [ ] Removes existing feature or API
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
