charts/.vib/clickhouse-operator/runtime-parameters.yaml

# Adding an extra initial delay to avoid race conditions with the
# deployment and Goss stages (so the operator has time to deploy
# ClickHouse and ClickHouse Keeper installations)
readinessProbe:
  initialDelaySeconds: 45
auth:
  username: test_user
  password: bitnami1234
extraDeploy:
# ref: https://github.com/Altinity/clickhouse-operator/tree/master/docs/chi-examples
- |
  apiVersion: clickhouse.altinity.com/v1
  kind: ClickHouseInstallationTemplate
  metadata:
    name: default-chi-template
    namespace: {{ include "common.names.namespace" . | quote }}
  spec:
    templates:
      podTemplates:
        - name: default-clickhouse
          distribution: Unspecified
          metadata:
            labels: {{- include "common.labels.matchLabels" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 12 }}
              app.kubernetes.io/part-of: clickhouse-operator
              app.kubernetes.io/component: clickhouse
          spec:
            {{- include "clickhouse-operator.imagePullSecrets" . | nindent 10 }}
            securityContext:
              fsGroupChangePolicy: OnRootMismatch
              {{- if not (include "common.compatibility.isOpenshift" .) }}
              fsGroup: 1001
              {{- end }}
            containers:
              - name: clickhouse
                image: {{ template "clickhouse-operator.clickhouse.image" . }}
                imagePullPolicy: {{ .Values.clickHouseImage.pullPolicy | quote }}
                securityContext:
                  allowPrivilegeEscalation: false
                  capabilities:
                    drop:
                    - ALL
                  seccompProfile:
                    type: RuntimeDefault
                  readOnlyRootFilesystem: true
                  runAsNonRoot: true
                  {{- if not (include "common.compatibility.isOpenshift" .) }}
                  runAsGroup: 1001
                  runAsUser: 1001
                  {{- end }}
                env:
                  - name: BITNAMI_DEBUG
                    value: "true"
                resources:
                  requests:
                    memory: "256M"
                    cpu: "0.5"
                  limits:
                    memory: "1Gi"
                    cpu: "1"
                volumeMounts:
                  - name: default-volume-claim
                    mountPath: /bitnami/clickhouse
                  # Hack required for read-only fs
                  - name: chi-vib-deploy-confd-vib-0-0
                    mountPath: /opt/bitnami/clickhouse/etc/conf.d
                  - name: chi-vib-common-configd
                    mountPath: /opt/bitnami/clickhouse/etc/config.d
                  - name: chi-vib-common-usersd
                    mountPath: /opt/bitnami/clickhouse/etc/users.d
                  - name: empty-dir
                    mountPath: /opt/bitnami/clickhouse/etc
                    subPath: app-conf-dir
                  - name: empty-dir
                    mountPath: /opt/bitnami/clickhouse/logs
                    subPath: app-logs-dir
                  - name: empty-dir
                    mountPath: /opt/bitnami/clickhouse/tmp
                    subPath: app-tmp-dir
                  # end of hack
                  - name: empty-dir
                    mountPath: /tmp
                    subPath: tmp-dir
            volumes:
              - name: empty-dir
                emptyDir: {}
      volumeClaimTemplates:
        - name: default-volume-claim
          spec:
            accessModes:
            - ReadWriteOnce
            resources:
              requests:
                storage: 8Gi
- apiVersion: clickhouse.altinity.com/v1
  kind: ClickHouseInstallation
  metadata:
    name: vib
  spec:
    useTemplates:
    - name: default-chi-template
    defaults:
      templates:
        podTemplate: default-clickhouse
        dataVolumeClaimTemplate: default-volume-claim
    configuration:
      settings:
        http_port: 8123
        tcp_port: 9000
        interserver_http_port: 9009
      users:
        test_user/networks/ip:
          - 0.0.0.0/0
          - '::/0'
      zookeeper:
        nodes:
          - host: chk-vib-vib
            port: 2181
      clusters:
        - name: vib
          layout:
            replicasCount: 1
# ref: https://github.com/Altinity/clickhouse-operator/tree/master/docs/chk-examples
- |
  apiVersion: clickhouse-keeper.altinity.com/v1
  kind: ClickHouseKeeperInstallation
  metadata:
    name: vib
  spec:
    defaults:
      templates:
        podTemplate: default-clickhouse-keeper
        dataVolumeClaimTemplate: default-volume-claim
    configuration:
      clusters:
        - name: vib
          layout:
            replicasCount: 1
    templates:
      podTemplates:
        - name: default-clickhouse-keeper
          distribution: Unspecified
          metadata:
            labels: {{- include "common.labels.matchLabels" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 12 }}
              app.kubernetes.io/part-of: clickhouse-operator
              app.kubernetes.io/component: clickhouse-keeper
          spec:
            {{- include "clickhouse-operator.imagePullSecrets" . | nindent 10 }}
            securityContext:
              fsGroupChangePolicy: OnRootMismatch
              {{- if not (include "common.compatibility.isOpenshift" .) }}
              fsGroup: 1001
              {{- end }}
            containers:
              - name: clickhouse-keeper
                image: {{ template "clickhouse-operator.keeper.image" . }}
                imagePullPolicy: {{ .Values.keeperImage.pullPolicy | quote }}
                securityContext:
                  allowPrivilegeEscalation: false
                  capabilities:
                    drop:
                    - ALL
                  seccompProfile:
                    type: RuntimeDefault
                  readOnlyRootFilesystem: true
                  runAsNonRoot: true
                  {{- if not (include "common.compatibility.isOpenshift" .) }}
                  runAsGroup: 1001
                  runAsUser: 1001
                  {{- end }}
                workingDir: /var/lib/clickhouse-keeper
                env:
                  - name: BITNAMI_DEBUG
                    value: "true"
                  - name: CLICKHOUSE_KEEPER_SERVER_ID
                    value: "1"
                resources:
                  requests:
                    memory: "256M"
                    cpu: "0.5"
                  limits:
                    memory: "1Gi"
                    cpu: "1"
                volumeMounts:
                  - name: default-volume-claim
                    mountPath: /bitnami/clickhouse-keeper
                  # Hack required for read-only fs
                  - name: empty-dir
                    mountPath: /opt/bitnami/clickhouse-keeper/etc
                    subPath: app-conf-dir
                  - name: empty-dir
                    mountPath: /opt/bitnami/clickhouse-keeper/logs
                    subPath: app-logs-dir
                  - name: empty-dir
                    mountPath: /opt/bitnami/clickhouse-keeper/tmp
                    subPath: app-tmp-dir
                  # end of hack
                  - name: empty-dir
                    mountPath: /tmp
                    subPath: tmp-dir
            volumes:
              - name: empty-dir
                emptyDir: {}
      volumeClaimTemplates:
        - name: default-volume-claim
          spec:
            accessModes:
            - ReadWriteOnce
            resources:
              requests:
                storage: 8Gi
- apiVersion: v1
  kind: Service
  metadata:
    name: chk-vib-vib
    labels:
      clickhouse-keeper.altinity.com/chk: vib
      clickhouse-keeper.altinity.com/cluster: vib
  spec:
    ports:
      - port: 2181
        name: client
    selector:
      clickhouse-keeper.altinity.com/chk: vib
      clickhouse-keeper.altinity.com/cluster: vib
      clickhouse-keeper.altinity.com/ready: "yes"