clickhouse credentials from k8s secret

[grandwizard28]

Description

We need the ability to read clickhouse credentials from k8s secrets.

[BryanFauble]

Something of a larger benefit that I started to look at was starting to consider how k8s secrets might be used to configure things like the clickhouse password. However, there was some more work to consider how stuff like the traces url could also be fed in as it includes the username/password as well:

1. main...BryanFauble:charts-signoz:main
2. https://github.com/BryanFauble/charts-signoz/blob/7a29318aabc8bccab36a4db3aaf3bf7e71fb27df/charts/signoz/templates/_clickhouse.tpl#L234

The secretFrom stanza was something that the underlying clickhouse implementation is doing: https://altinity.com/blog/clickhouse-confidential-using-kubernetes-secrets-with-the-altinity-operator

[grandwizard28]

Thanks @BryanFauble.

I see what you mean by the url problem.

• metricsurl being used in remote_read (https://github.com/BryanFauble/charts-signoz/blob/7a29318aabc8bccab36a4db3aaf3bf7e71fb27df/charts/signoz/templates/query-service/configmap.yaml#L31).
• clickhouseurl being used as an env variable in query-service (https://github.com/BryanFauble/charts-signoz/blob/7a29318aabc8bccab36a4db3aaf3bf7e71fb27df/charts/signoz/templates/query-service/statefulset.yaml#L131)

First, we need to systematically read these from a secret which might or might not require application side changes. Then we can use the same secret for clickhouse.