Deploy metabase and provide access to selected app-team members

[pcrespov]

Deploy Metabase on admin.osparc.io with Restricted Access and Data Source Integration

Description:
Set up [Metabase](https://www.metabase.com/) for internal analytics, accessible via the subdomain admin.osparc.io. The deployment should fulfill the following requirements:

• Access Control:

  • The subdomain admin.osparc.io must be accessible only from the Z43 network.
  • Implement per-user authentication within Metabase.
  • Enable SSO integration (e.g., with GE authentication).

• Networking & Routing:

  • Configure a reverse proxy using [Traefik](https://traefik.io/) to route traffic to the Metabase instance.

• Data Access:

  • Metabase must be able to connect to the existing Postgres service.
  • Allow future expansion to support additional data sources.

Access should be provisioned to selected members of the app team.

Definition of Done:

• As an app team user:

  • I receive an admin Metabase account provisioned by the ops-team.

  • I am accessing the platform from within the Z43 network (Z43 IP domains).

  • When I navigate to https://admin.osparc.io:

    • I am first prompted with a general authentication layer (Traefik-based auth).
    • After successful general auth, I log in with my Metabase credentials.

  • Once logged in, I can view the number of users on the platform via a Metabase dashboard or query.

[YuryHrytsuk]

Adding new databases to running Postgres https://www.reddit.com/r/PostgreSQL/comments/1lg6fai/create_add_new_database_to_already_running/

Creating a user restricted to a database:

• https://stackoverflow.com/questions/11012441/restrict-user-privileges-to-one-particular-database-only
• https://www.reddit.com/r/PostgreSQL/comments/16pl8bu/all_users_getting_access_to_dbs/
• https://www.reddit.com/r/PostgreSQL/comments/11fy3cb/revoking_access_from_user_to_see_schemas_and/

Why new user in PostgreSQL can connect to all databases?

• https://stackoverflow.com/questions/6884020/why-new-user-in-postgresql-can-connect-to-all-databases
• https://www.reddit.com/r/PostgreSQL/comments/1hvxw0s/understanding_the_public_schema_in_postgresql/

Role management in Postgres:

• https://www.reddit.com/r/PostgreSQL/comments/k4k8b8/is_there_a_way_to_automate_postgres_user/
• https://www.reddit.com/r/PostgreSQL/comments/1e9sbb2/automating_user_provisioning_in_postgresql/

[YuryHrytsuk]

Keep open until deployed to all necessary deployments