This message was deleted.

Usually, build or use something on a separate web-facing server that's allowed to connect to the cluster. (Like using superset iiuc, or something like Imply's Pivot, etc.)