image: repository: clickhouse/clickhouse-server pullPolicy: IfNotPresent tag: 24.3.2.23@sha256:c96ce349be6b6cb4642d852eabddf2f6bbe834a46d134a108605c29dc223fd0e includeCommon: true workload: main: replicas: 1 podSpec: containers: main: env: CLICKHOUSE_DB: "{{ .Values.clickhouseDatabase }}" CLICKHOUSE_USER: "{{ .Values.clickhouseUsername }}" CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: "{{ .Values.clickhouseDefaultAccessManagement }}" CLICKHOUSE_PASSWORD: secretKeyRef: expandObjectName: "{{ if .Values.clickhousePassword }}true{{ else }}false{{ end }}" name: '{{ if .Values.clickhousePassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "clickhousecreds" }}{{ end }}' key: "clickhouse-password" probes: liveness: type: http path: /ping readiness: type: http path: /ping startup: type: http path: /ping securityContext: container: readOnlyRootFilesystem: false # Optional capabilities advanced ClickHouse features. See also: # https://github.com/ClickHouse/ClickHouse/blob/master/docker/server/README.md#linux-capabilities # https://kb.altinity.com/altinity-kb-setup-and-maintenance/altinity-kb-clickhouse-in-docker/ # https://github.com/ClickHouse/ClickHouse/blob/b844c36a9d5e76300a88b4f49e6debccf1ad22e4/programs/install/Install.cpp#L793-L804 # capabilities: # add: # - IPC_LOCK # - NET_ADMIN # - SYS_NICE service: main: ports: main: port: 8123 protocol: http targetPort: 8123 persistence: data: enabled: true mountPath: /var/lib/clickhouse clickhouseDatabase: "test" clickhouseUsername: "test" clickhouseDefaultAccessManagement: 0 # -- Secret or password # One of these options is required, unless used as a dependency for another TrueCharts chart. clickhousePassword: "" existingSecret: "" secret: credentials: enabled: true data: clickhouse-password: '{{ ( .Values.clickhousePassword | default "empty" ) }}' portal: open: enabled: false