# Metabase Helm Chart Values # https://github.com/pmint93/helm-charts/tree/master/charts/metabase image: repository: metabase/metabase tag: v0.51.1 # Use PostgreSQL for production database: type: postgres host: postgres-cluster-rw.postgres port: 5432 dbname: metabase existingSecret: database-config existingSecretUsernameKey: user existingSecretPasswordKey: password ingress: enabled: true className: traefik annotations: kubernetes.io/ingress.class: traefik traefik.ingress.kubernetes.io/router.entrypoints: websecure hosts: - {{ .Env.METABASE_HOST }} tls: - hosts: - {{ .Env.METABASE_HOST }} # Session configuration session: existingSecret: metabase-config existingSecretKey: session # Trino driver plugin configuration extraInitContainers: - name: download-trino-driver image: curlimages/curl:8.5.0 imagePullPolicy: IfNotPresent volumeMounts: - name: plugins mountPath: /plugins workingDir: /plugins command: - /bin/sh - -ec - | curl -Lso /plugins/starburst.metabase-driver.jar \ https://github.com/starburstdata/metabase-driver/releases/download/6.1.0/starburst-6.1.0.metabase-driver.jar extraVolumeMounts: - name: plugins mountPath: /plugins readOnly: false extraVolumes: - name: plugins emptyDir: {} # Basic configuration extraEnv: - name: MB_APPLICATION_NAME value: "Metabase Analytics" - name: MB_ENABLE_PUBLIC_SHARING value: "true" - name: MB_ENABLE_EMBEDDING value: "true" # Resource limits resources: limits: memory: 4Gi cpu: 2000m requests: memory: 2Gi cpu: 500m # Security context securityContext: runAsUser: 2000 runAsGroup: 2000 runAsNonRoot: true # Pod security context podSecurityContext: fsGroup: 2000 # Service account serviceAccount: create: true # Log4j2 configuration to reduce verbose logging log4j2XML: |