unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

logging: add read-only clickhouse logreader user + Vault-synced secret #400

Merged
benvin merged 1 commits from benvin/clickhouse-logreader into main 2026-08-23 17:00:07 +10:00
Conversation 0 Commits 1 Files Changed 2
+40

1 Commits

Author SHA1 Message Date
unkin-agent 9f574d03e1 logging: add read-only clickhouse logreader user + Vault-synced secret
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
CLI tools and the logviewer UI need ClickHouse access without write or
DDL rights. Adds a logreader user to the logs CHI mirroring the vector
user mechanism: password sha256 hash sourced from a Vault-synced Secret,
readonly profile, scoped to the logs database only. Credentials are
seeded in Vault kv and synced by VSO, so no secret material lands in git.
 2026-08-23 16:32:37 +10:00