more otel

k8s/clickhouse.yaml

@@ -0,0 +1,134 @@
+# Single-node ClickHouse for the otel-debug-receiver, applied as one file:
+#   kubectl apply -f k8s/clickhouse.yaml
+#
+# A single instance (per request): one StatefulSet replica with a PVC so
+# telemetry survives pod restarts. Resources sized for a small cluster;
+# adjust before production use.
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: otel-debug
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: clickhouse-auth
+  namespace: monitoring
+type: Opaque
+stringData:
+  # Change these before applying. ClickHouse will honor the values from
+  # the users.d override mounted below, so no post-install SQL is needed.
+  username: otel
+  password: CHANGE_ME
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: clickhouse-config
+  namespace: monitoring
+data:
+  users.d-otel.xml: |
+    <clickhouse>
+      <users>
+        <otel>
+          <password from_env="CLICKHOUSE_PASSWORD"/>
+          <networks><ip>::/0</ip></networks>
+          <grants>
+            <grant><query>GRANT ALL ON otel.*</query></grant>
+          </grants>
+        </otel>
+      </users>
+    </clickhouse>
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: clickhouse
+  namespace: monitoring
+spec:
+  serviceName: clickhouse
+  replicas: 1
+  selector:
+    matchLabels:
+      app: clickhouse
+  template:
+    metadata:
+      labels:
+        app: clickhouse
+    spec:
+      securityContext:
+        fsGroup: 101
+      containers:
+      - name: clickhouse
+        image: clickhouse/clickhouse-server:24.8
+        ports:
+        - containerPort: 9000
+          name: native
+        - containerPort: 8123
+          name: http
+        env:
+        - name: CLICKHOUSE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: clickhouse-auth
+              key: password
+        volumeMounts:
+        - name: data
+          mountPath: /var/lib/clickhouse
+        # Mount the user override as a single file: ConfigMap volumes are
+        # read-only, and the entrypoint needs to write its own
+        # default-user.xml into the users.d directory on first start.
+        - name: user-config
+          mountPath: /etc/clickhouse-server/users.d/otel.xml
+          subPath: users.d-otel.xml
+        readinessProbe:
+          httpGet:
+            path: /ping
+            port: http
+          initialDelaySeconds: 10
+          periodSeconds: 10
+        livenessProbe:
+          httpGet:
+            path: /ping
+            port: http
+          initialDelaySeconds: 30
+          periodSeconds: 30
+        resources:
+          requests:
+            memory: "512Mi"
+            cpu: "250m"
+          limits:
+            memory: "2Gi"
+            cpu: "1"
+      volumes:
+      - name: user-config
+        configMap:
+          name: clickhouse-config
+          items:
+          - key: users.d-otel.xml
+            path: users.d-otel.xml
+  volumeClaimTemplates:
+  - metadata:
+      name: data
+    spec:
+      accessModes: ["ReadWriteOnce"]
+      resources:
+        requests:
+          storage: 20Gi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: clickhouse
+  namespace: monitoring
+spec:
+  selector:
+    app: clickhouse
+  ports:
+  - name: native
+    port: 9000
+    targetPort: 9000
+  - name: http
+    port: 8123
+    targetPort: 8123
+  type: ClusterIP