Skip to content

Docs/external secret config#203

Open
arekborucki wants to merge 3 commits into
ClickHouse:mainfrom
arekborucki:docs/external-secret-config
Open

Docs/external secret config#203
arekborucki wants to merge 3 commits into
ClickHouse:mainfrom
arekborucki:docs/external-secret-config

Conversation

@arekborucki
Copy link
Copy Markdown
Contributor

Adds a top-level "External Secret" section to the configuration guide covering:

  • The spec.externalSecret field and namespace constraint
  • Complete list of required Secret keys with format hints
  • Observe vs Manage policy semantics and when to pick each
  • The ExternalSecretValid status condition and how to debug ExternalSecretNotFound / ExternalSecretInvalid reasons

Why

The External Secret feature has been available since #168 but the documentation site had zero mention of it (grep -c externalSecret docs/ returned 0). Users have to read api/v1alpha1/common.go and the
reconciler in internal/controller/clickhouse/sync.go to understand the Observe vs Manage policy distinction, the required Secret keys (including the conditional named-collections-key for ClickHouse >= 25.12), and how to interpret the ExternalSecretValid status condition.

What

Adds a new top-level ## External Secret section in docs/guides/configuration.mdx, placed between TLS configuration and ClickHouse settings. Four subsections:

  • Introduction with a complete ClickHouseCluster example using externalSecret
  • Required keys table with format hints sourced from internal/controller/clickhouse/constants.go
  • Observe vs Manage policy comparison with guidance on when to pick each
  • Troubleshooting of the ExternalSecretValid status condition with ExternalSecretNotFound / ExternalSecretInvalid reasons

No code or chart changes. documentation only

arekborucki and others added 3 commits May 27, 2026 22:52
Adds a top-level "External Secret" section to the configuration guide
covering:

- The spec.externalSecret field and namespace constraint
- Complete list of required Secret keys with format hints
- Observe vs Manage policy semantics and when to pick each
- The ExternalSecretValid status condition and how to debug
  ExternalSecretNotFound / ExternalSecretInvalid reasons

The feature has been available since ClickHouse#168 but had zero coverage in the
docs site, forcing users to read api/v1alpha1/common.go and the
reconciler source to understand it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant