unkin-agent 9f574d03e1 logging: add read-only clickhouse logreader user + Vault-synced secret ...

CLI tools and the logviewer UI need ClickHouse access without write or
DDL rights. Adds a logreader user to the logs CHI mirroring the vector
user mechanism: password sha256 hash sourced from a Vault-synced Secret,
readonly profile, scoped to the logs database only. Credentials are
seeded in Vault kv and synced by VSO, so no secret material lands in git.

2026-08-23 16:32:37 +10:00

..

base

logging: add read-only clickhouse logreader user + Vault-synced secret

2026-08-23 16:32:37 +10:00

overlays/au-syd1

Scrape traefik gateway metrics into VictoriaMetrics (#397)

2026-08-23 12:41:58 +10:00