Trino values#

Values under trino configure Trino, the SQL query engine, and its test coordinator for user catalogs.

Generated from the Hopsworks Helm chart 5.0.14 (Hopsworks 5.0.13).

Deployed according to the first of these values that is set: global._hopsworks.trino.enabled, global._hopsworks.full_platform.

Upstream charts

Values under trino.trino go to trino 1.41.0 from https://trinodb.github.io/charts.

Only the values Hopsworks sets under trino.trino are listed on this page. Any other value of the chart can be set there too; the link opens its documentation for the version Hopsworks pins.

General#

Defaults as YAML

trino:
  catalogsConfigmapName: hopsworks-trino-catalogs
  hopsworkslib: {}
  trino:
    accessControl:
      configFile: rules.json
      refreshPeriod: 10s
      rules:
        rules.json: |-
          {
            "system_information": [
              {
                "user": "prometheus",
                "allow": ["read"]
              }
            ],
            "catalogs": [
              {
                "group": "admin",
                "catalog": ".*",
                "allow": "all"
              },
              {
                "catalog": "tpch",
                "allow": "read-only"
              },
              {
                "catalog": "tpcds",
                "allow": "read-only"
              },
              {
                "catalog": "iceberg",
                "allow": "all"
              },
              {
                "catalog": "delta",
                "allow": "all"
              },
              {
                "catalog": "hive",
                "allow": "all"
              },
              {
                "catalog": "hudi",
                "allow": "all"
              },
              {
                "group": "(.*)__data_owner",
                "catalog": "$1__.*",
                "allow": "all"
              },
              {
                "group": "(.*)__data_scientist",
                "catalog": "$1__.*",
                "allow": "read-only"
              },
              {
                "group": "(.*)__shared__(.*)",
                "catalog": "$1__$2",
                "allow": "read-only"
              },
              {
                "catalog": "system",
                "allow": "read-only"
              }
            ],
            "schemas": [
              {
                "group": "admin",
                "schema": ".*",
                "owner": true
              },
              {
                "group": "(.*)__data_owner",
                "schema": "($1|$1_featurestore)",
                "owner": true
              }
            ],
            "tables": [
              {
                "group": "admin",
                "privileges": [
                  "SELECT",
                  "INSERT",
                  "DELETE",
                  "UPDATE",
                  "OWNERSHIP",
                  "GRANT_SELECT"
                ]
              },
              {
                "group": "(.*)__data_owner",
                "schema": "($1|$1_featurestore)",
                "privileges": ["SELECT", "INSERT", "DELETE", "UPDATE", "OWNERSHIP"]
              },
              {
                "group": "(.*)__data_scientist",
                "schema": "($1|$1_featurestore)",
                "privileges": ["SELECT"]
              },
              {
                "group": "(.*)__shared_hivedb",
                "schema": "$1",
                "privileges": ["SELECT"]
              },
              {
                "group": "(.*)__shared_featurestore",
                "schema": "$1_featurestore",
                "privileges": ["SELECT"]
              },
              {
                "catalog": "tpch",
                "privileges": ["SELECT"]
              },
              {
                "catalog": "tpcds",
                "privileges": ["SELECT"]
              },
              {
                "catalog": "system",
                "schema": "metadata",
                "privileges": ["SELECT"]
              }
            ],
            "queries": [
              {
                "group": "admin",
                "allow": ["execute", "kill", "view"]
              },
              {
                "group": "(.*)__data_owner",
                "queryOwner": "$1__.*",
                "allow": ["kill", "view"]
              },
              {
                "user": "(.*)__.*",
                "queryOwner": "$1__.*",
                "allow": ["view"]
              },
              {
                "allow": ["execute"]
              }
            ]
          }
      type: configmap
    additionalCatalogs: {}
    additionalConfigProperties:
    - internal-communication.shared-secret=${ENV:TRINO_SHARED_SECRET}
    - http-server.process-forwarded=true
    auth:
      groupsAuthSecret: trino-groups-file
      passwordAuthSecret: trino-password-file
      refreshPeriod: 5s
    catalogs: []
    configMounts:
    - configMap: hopsworks-trino-catalogs
      name: catalog-volume
      path: /etc/trino/catalog
    coordinator:
      additionalVolumeMounts:
      - mountPath: /certs
        name: certs
        readOnly: true
      additionalVolumes:
      - emptyDir: {}
        name: certs
      configMounts:
      - configMap: hopsfs-config
        name: hdfs-site
        path: /etc/hadoop/hdfs-site.xml
        subPath: hdfs-site.xml
      - configMap: hopsfs-config
        name: core-site
        path: /etc/hadoop/core-site.xml
        subPath: core-site.xml
      secretMounts:
      - name: super-crypto-kstore
        path: /srv/hops/super_crypto/trino
        secretName: hopsworks-trino-crypto-material
    coordinatorNameOverride: hopsworks-trino-coordinator
    defaultCatalogs:
      delta.properties: |
        connector.name=delta_lake
        fs.hadoop.enabled=true
        hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
        hive.metastore.username=trino
        hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
        hive.metastore.thrift.client.ssl.enabled=true
        hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
        hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
        hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
        hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
        hive.hdfs.impersonation.enabled=true
        delta.enable-non-concurrent-writes=true
      hive.properties: |
        connector.name=hive
        fs.hadoop.enabled=true
        hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
        hive.metastore.username=trino
        hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
        hive.metastore.thrift.client.ssl.enabled=true
        hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
        hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
        hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
        hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
        hive.hdfs.impersonation.enabled=true
      hudi.properties: |
        connector.name=hudi
        fs.hadoop.enabled=true
        hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
        hive.metastore.username=trino
        hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
        hive.metastore.thrift.client.ssl.enabled=true
        hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
        hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
        hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
        hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
        hive.hdfs.impersonation.enabled=true
      iceberg.properties: |
        connector.name=iceberg
        fs.hadoop.enabled=true
        hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
        hive.metastore.username=trino
        hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
        hive.metastore.thrift.client.ssl.enabled=true
        hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
        hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
        hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
        hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
        iceberg.catalog.type=hive_metastore
        iceberg.file-format=PARQUET
        iceberg.compression-codec=ZSTD
        iceberg.hive-catalog.locking-enabled=false
        hive.hdfs.impersonation.enabled=true
    env:
    - name: SSL_CERT_KEY_PASSWORD
      valueFrom:
        secretKeyRef:
          key: trino__passwd
          name: hopsworks-trino-crypto-material
    - name: HOPS_USE_LOGIN_USER
      value: 'true'
    - name: TRINO_SHARED_SECRET
      valueFrom:
        secretKeyRef:
          key: shared-secret
          name: trino-internal-secret
    - name: MYSQL_DB
      value: hopsworks
    - name: MYSQL_USER
      value: hopsworksroot
    - name: MYSQL_PASSWORD
      valueFrom:
        secretKeyRef:
          key: hopsworksroot
          name: mysql-users-secrets
    envFrom:
    - configMapRef:
        name: '{{ .Values.nameOverride }}-mysql-conn-env'
    eventListenerProperties: []
    image:
      pullPolicy: IfNotPresent
      registry: docker.hops.works
      repository: hopsworks/trino
      tag: 480.1-v2
    initContainers:
      coordinator:
      - command:
        - sh
        - -c
        - cat /srv/hops/super_crypto/trino/trino_priv.pem /srv/hops/super_crypto/trino/trino_certificate_bundle.pem > /certs/keystore.pem
        image: '{{ .Values.image.registry }}/hopsworks/hwutils:1.7.2'
        imagePullPolicy: IfNotPresent
        name: init-coordinator-cert
        resources:
          limits:
            cpu: 500m
            memory: 256Mi
          requests:
            cpu: 50m
            memory: 64Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
        volumeMounts:
        - mountPath: /certs
          name: certs
        - mountPath: /srv/hops/super_crypto/trino
          name: super-crypto-kstore
    moreCatalogs:
      tpcds.properties: |
        connector.name=tpcds
        tpcds.splits-per-node=4
      tpch.properties: |
        connector.name=tpch
        tpch.splits-per-node=4
    nameOverride: hopsworks-trino
    securityContext:
      runAsGroup: 1000
      runAsNonRoot: true
      runAsUser: 1000
      seccompProfile:
        type: RuntimeDefault
    server:
      config:
        authenticationType: PASSWORD
        https:
          enabled: true
          keystore:
            path: /certs/keystore.pem
          port: 8443
      coordinatorExtraConfig: |
        web-ui.preview.enabled=true
    service:
      coordinator:
        annotations:
          consul.hashicorp.com/service-name: trino
          consul.hashicorp.com/service-port: '8443'
          consul.hashicorp.com/service-tags: coordinator
          prometheus.io/path: /metrics
          prometheus.io/port: '8443'
          prometheus.io/scheme: https
          prometheus.io/scrape: 'true'
      type: ClusterIP
    worker:
      configMounts:
      - configMap: hopsfs-config
        name: hdfs-site
        path: /etc/hadoop/hdfs-site.xml
        subPath: hdfs-site.xml
      - configMap: hopsfs-config
        name: core-site
        path: /etc/hadoop/core-site.xml
        subPath: core-site.xml
      secretMounts:
      - name: super-crypto-kstore
        path: /srv/hops/super_crypto/trino
        secretName: hopsworks-trino-crypto-material
    workerNameOverride: hopsworks-trino-worker

trino #

Type object, default {}. override trino values

trino.catalogsConfigmapName #

Type string, default "hopsworks-trino-catalogs".

trino.hopsworkslib #

Type object, default {}. override hopsworkslib values

trino.trino #

Type object, passed to the trino 1.41.0 chart, whose other values are documented there. override trino values

Default

accessControl:
  configFile: rules.json
  refreshPeriod: 10s
  rules:
    rules.json: |-
      {
        "system_information": [
          {
            "user": "prometheus",
            "allow": ["read"]
          }
        ],
        "catalogs": [
          {
            "group": "admin",
            "catalog": ".*",
            "allow": "all"
          },
          {
            "catalog": "tpch",
            "allow": "read-only"
          },
          {
            "catalog": "tpcds",
            "allow": "read-only"
          },
          {
            "catalog": "iceberg",
            "allow": "all"
          },
          {
            "catalog": "delta",
            "allow": "all"
          },
          {
            "catalog": "hive",
            "allow": "all"
          },
          {
            "catalog": "hudi",
            "allow": "all"
          },
          {
            "group": "(.*)__data_owner",
            "catalog": "$1__.*",
            "allow": "all"
          },
          {
            "group": "(.*)__data_scientist",
            "catalog": "$1__.*",
            "allow": "read-only"
          },
          {
            "group": "(.*)__shared__(.*)",
            "catalog": "$1__$2",
            "allow": "read-only"
          },
          {
            "catalog": "system",
            "allow": "read-only"
          }
        ],
        "schemas": [
          {
            "group": "admin",
            "schema": ".*",
            "owner": true
          },
          {
            "group": "(.*)__data_owner",
            "schema": "($1|$1_featurestore)",
            "owner": true
          }
        ],
        "tables": [
          {
            "group": "admin",
            "privileges": [
              "SELECT",
              "INSERT",
              "DELETE",
              "UPDATE",
              "OWNERSHIP",
              "GRANT_SELECT"
            ]
          },
          {
            "group": "(.*)__data_owner",
            "schema": "($1|$1_featurestore)",
            "privileges": ["SELECT", "INSERT", "DELETE", "UPDATE", "OWNERSHIP"]
          },
          {
            "group": "(.*)__data_scientist",
            "schema": "($1|$1_featurestore)",
            "privileges": ["SELECT"]
          },
          {
            "group": "(.*)__shared_hivedb",
            "schema": "$1",
            "privileges": ["SELECT"]
          },
          {
            "group": "(.*)__shared_featurestore",
            "schema": "$1_featurestore",
            "privileges": ["SELECT"]
          },
          {
            "catalog": "tpch",
            "privileges": ["SELECT"]
          },
          {
            "catalog": "tpcds",
            "privileges": ["SELECT"]
          },
          {
            "catalog": "system",
            "schema": "metadata",
            "privileges": ["SELECT"]
          }
        ],
        "queries": [
          {
            "group": "admin",
            "allow": ["execute", "kill", "view"]
          },
          {
            "group": "(.*)__data_owner",
            "queryOwner": "$1__.*",
            "allow": ["kill", "view"]
          },
          {
            "user": "(.*)__.*",
            "queryOwner": "$1__.*",
            "allow": ["view"]
          },
          {
            "allow": ["execute"]
          }
        ]
      }
  type: configmap
additionalCatalogs: {}
additionalConfigProperties:
- internal-communication.shared-secret=${ENV:TRINO_SHARED_SECRET}
- http-server.process-forwarded=true
auth:
  groupsAuthSecret: trino-groups-file
  passwordAuthSecret: trino-password-file
  refreshPeriod: 5s
catalogs: []
configMounts:
- configMap: hopsworks-trino-catalogs
  name: catalog-volume
  path: /etc/trino/catalog
coordinator:
  additionalVolumeMounts:
  - mountPath: /certs
    name: certs
    readOnly: true
  additionalVolumes:
  - emptyDir: {}
    name: certs
  configMounts:
  - configMap: hopsfs-config
    name: hdfs-site
    path: /etc/hadoop/hdfs-site.xml
    subPath: hdfs-site.xml
  - configMap: hopsfs-config
    name: core-site
    path: /etc/hadoop/core-site.xml
    subPath: core-site.xml
  secretMounts:
  - name: super-crypto-kstore
    path: /srv/hops/super_crypto/trino
    secretName: hopsworks-trino-crypto-material
coordinatorNameOverride: hopsworks-trino-coordinator
defaultCatalogs:
  delta.properties: |
    connector.name=delta_lake
    fs.hadoop.enabled=true
    hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
    hive.metastore.username=trino
    hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
    hive.metastore.thrift.client.ssl.enabled=true
    hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
    hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
    hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
    hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
    hive.hdfs.impersonation.enabled=true
    delta.enable-non-concurrent-writes=true
  hive.properties: |
    connector.name=hive
    fs.hadoop.enabled=true
    hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
    hive.metastore.username=trino
    hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
    hive.metastore.thrift.client.ssl.enabled=true
    hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
    hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
    hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
    hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
    hive.hdfs.impersonation.enabled=true
  hudi.properties: |
    connector.name=hudi
    fs.hadoop.enabled=true
    hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
    hive.metastore.username=trino
    hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
    hive.metastore.thrift.client.ssl.enabled=true
    hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
    hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
    hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
    hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
    hive.hdfs.impersonation.enabled=true
  iceberg.properties: |
    connector.name=iceberg
    fs.hadoop.enabled=true
    hive.config.resources=/etc/hadoop/hdfs-site.xml,/etc/hadoop/core-site.xml
    hive.metastore.username=trino
    hive.metastore.uri=thrift://{{ include "trino.consul.hiveMetastoreAddress" . }}
    hive.metastore.thrift.client.ssl.enabled=true
    hive.metastore.thrift.client.ssl.key=/srv/hops/super_crypto/trino/trino__kstore.jks
    hive.metastore.thrift.client.ssl.key-password=${ENV:SSL_CERT_KEY_PASSWORD}
    hive.metastore.thrift.client.ssl.trust-certificate=/srv/hops/super_crypto/trino/trino__tstore.jks
    hive.metastore.thrift.client.ssl.trust-certificate-password=${ENV:SSL_CERT_KEY_PASSWORD}
    iceberg.catalog.type=hive_metastore
    iceberg.file-format=PARQUET
    iceberg.compression-codec=ZSTD
    iceberg.hive-catalog.locking-enabled=false
    hive.hdfs.impersonation.enabled=true
env:
- name: SSL_CERT_KEY_PASSWORD
  valueFrom:
    secretKeyRef:
      key: trino__passwd
      name: hopsworks-trino-crypto-material
- name: HOPS_USE_LOGIN_USER
  value: 'true'
- name: TRINO_SHARED_SECRET
  valueFrom:
    secretKeyRef:
      key: shared-secret
      name: trino-internal-secret
- name: MYSQL_DB
  value: hopsworks
- name: MYSQL_USER
  value: hopsworksroot
- name: MYSQL_PASSWORD
  valueFrom:
    secretKeyRef:
      key: hopsworksroot
      name: mysql-users-secrets
envFrom:
- configMapRef:
    name: '{{ .Values.nameOverride }}-mysql-conn-env'
eventListenerProperties: []
image:
  pullPolicy: IfNotPresent
  registry: docker.hops.works
  repository: hopsworks/trino
  tag: 480.1-v2
initContainers:
  coordinator:
  - command:
    - sh
    - -c
    - cat /srv/hops/super_crypto/trino/trino_priv.pem /srv/hops/super_crypto/trino/trino_certificate_bundle.pem > /certs/keystore.pem
    image: '{{ .Values.image.registry }}/hopsworks/hwutils:1.7.2'
    imagePullPolicy: IfNotPresent
    name: init-coordinator-cert
    resources:
      limits:
        cpu: 500m
        memory: 256Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
    volumeMounts:
    - mountPath: /certs
      name: certs
    - mountPath: /srv/hops/super_crypto/trino
      name: super-crypto-kstore
moreCatalogs:
  tpcds.properties: |
    connector.name=tpcds
    tpcds.splits-per-node=4
  tpch.properties: |
    connector.name=tpch
    tpch.splits-per-node=4
nameOverride: hopsworks-trino
securityContext:
  runAsGroup: 1000
  runAsNonRoot: true
  runAsUser: 1000
  seccompProfile:
    type: RuntimeDefault
server:
  config:
    authenticationType: PASSWORD
    https:
      enabled: true
      keystore:
        path: /certs/keystore.pem
      port: 8443
  coordinatorExtraConfig: |
    web-ui.preview.enabled=true
service:
  coordinator:
    annotations:
      consul.hashicorp.com/service-name: trino
      consul.hashicorp.com/service-port: '8443'
      consul.hashicorp.com/service-tags: coordinator
      prometheus.io/path: /metrics
      prometheus.io/port: '8443'
      prometheus.io/scheme: https
      prometheus.io/scrape: 'true'
  type: ClusterIP
worker:
  configMounts:
  - configMap: hopsfs-config
    name: hdfs-site
    path: /etc/hadoop/hdfs-site.xml
    subPath: hdfs-site.xml
  - configMap: hopsfs-config
    name: core-site
    path: /etc/hadoop/core-site.xml
    subPath: core-site.xml
  secretMounts:
  - name: super-crypto-kstore
    path: /srv/hops/super_crypto/trino
    secretName: hopsworks-trino-crypto-material
workerNameOverride: hopsworks-trino-worker

trino.trino.image.registry #

Type string, default "docker.hops.works". Image registry, defaults to empty, which results in DockerHub usage

trino.trino.image.repository #

Type string, default "hopsworks/trino". Repository location of the Trino image, typically organization/imagename

trino.trino.image.tag #

Type string, default "480.1-v2". Image tag for the Trino image. This value is explicitly pinned here and overrides any defaulting to appVersion from Chart.yaml.

auth#

Defaults as YAML

trino:
  auth:
    adminUserPwd: Tr1n0_Admin_ChangeMe_!2345
    adminUserPwdHash: $2y$10$wu8UEOW.3A9rBautqh98zuwZTxgM85QhS8Mfl8hDKcLazIy0LpWfK
    adminUsername: trino
    createSecrets: true
    createSharedSecret: true
    monitoringUser: prometheus
    monitoringUserPwd: Tr1n0_Monitoring_ChangeMe_!2345
    monitoringUserPwdHash: $2y$10$tE7wiYz2XqiIg.E9DlqTfuqBqnQa42cqYog6frsxd5yj5WOH0r802

trino.auth.adminUserPwd #: Type string, default "Tr1n0_Admin_ChangeMe_!2345".
trino.auth.adminUserPwdHash #: Type string, default "$2y$10$wu8UEOW.3A9rBautqh98zuwZTxgM85QhS8Mfl8hDKcLazIy0LpWfK".
trino.auth.adminUsername #: Type string, default "trino". Trino admin username. Should not be changed. Used in hadoop.proxyuser.trino
trino.auth.createSecrets #: Type bool, default true. If createSecrets is false, you must manually create the following Kubernetes Secrets: 1. trino-admin-credentials, plus the password-file and group-file Secrets used by Trino's password-file authentication. By default, these are named trino-password-file and trino-groups-file, but their names are configurable via .Values.trino.auth.passwordAuthSecret and .Values.trino.auth.groupsAuthSecret. 2. trino-monitoring-credentials using the monitoring username/password defined below. Passwords stored in the password-file Secret (default: trino-password-file) must be securely hashed using bcrypt or PBKDF2. See https://trino.io/docs/current/security/password-file.html#password-files for details.
trino.auth.createSharedSecret #: Type bool, default true.
trino.auth.monitoringUser #: Type string, default "prometheus". Username used by Prometheus for scraping Trino metrics. If you override this value, you MUST also: 1. Update Trino access control to grant this user the required permissions (e.g. adjust accessControl.rules.rules.json accordingly). 2. Update the Prometheus scrape configuration so that the same username is used: set .Values.prometheus.prometheus.serverFiles.prometheus.yml.scrape_configs[*].basic_auth.username for the scrape job with job_name: "trino" to match this value.
trino.auth.monitoringUserPwd #: Type string, default "Tr1n0_Monitoring_ChangeMe_!2345".
trino.auth.monitoringUserPwdHash #: Type string, default "$2y$10$tE7wiYz2XqiIg.E9DlqTfuqBqnQa42cqYog6frsxd5yj5WOH0r802".

dependencies#

Defaults as YAML

trino:
  dependencies:
    hive:
      consulServiceName: hive
      consulServiceTag: metastore
      port: 9083
    mysql:
      consulServiceName: mysql
      port: 3306

trino.dependencies.hive.consulServiceName #: Type string, default "hive".
trino.dependencies.hive.consulServiceTag #: Type string, default "metastore".
trino.dependencies.hive.port #: Type int, default 9083.
trino.dependencies.mysql.consulServiceName #: Type string, default "mysql".
trino.dependencies.mysql.port #: Type int, default 3306.

externalLoadBalancer#

Defaults as YAML

trino:
  externalLoadBalancer:
    annotations: {}
    class: null
    enabled: null
    managed: null
    nodeSelector: {}

trino.externalLoadBalancer.annotations #: Type object, default {}. annotations for load balancer
trino.externalLoadBalancer.class #: Type string, default nil. load balancer class name
trino.externalLoadBalancer.enabled #: Type string, default nil. Enable External Load Balancers for the Trino coordinator/service. If not set the .global._hopsworks.externalLoadBalancers.enabled will be used instead
trino.externalLoadBalancer.managed #: Type string, default nil. Cloud provider provisions Load Balancers. If not set the .global._hopsworks.externalLoadBalancers.managed will be used instead
trino.externalLoadBalancer.nodeSelector #: Type object, default {}. selector for nodes the load balancer can use to route traffic