charts icon indicating copy to clipboard operation
charts copied to clipboard

clickhouse_operator allowed IP for running with Istio

Open nickb937 opened this issue 1 year ago • 0 comments

If running on a Istio cluster, then the incoming connection from clickhouse-operator to the database may come from the passthrough-IP 127.0.0.6 rather than 127.0.0.1, which causes auth errors and log-spew like this:

2023.03.09 08:13:43.936271 [ 752 ] {} <Error> Access(user directories): from: ::ffff:127.0.0.6, user: clickhouse_operator: Authentication failed: Code: 195. DB::Exception: Connections from ::ffff:127.0.0.6 are not allowed. (IP_ADDRESS_NOT_ALLOWED), Stack trace (when copying this message, always include the lines below):

Can the configuration here https://github.com/SigNoz/charts/blob/64e948345d1b3c48ee80f54b1f2cd7bb02ce178a/charts/clickhouse/templates/clickhouse-operator/configmap.yaml#L428 either be made to be modifyable by the values.yaml, or take the easier path of changing the default to 127.0.0.0/16 or adding <ip>127.0.0.6</ip> to the list?

nickb937 avatar Mar 09 '23 08:03 nickb937