feat: add clickhouse ssl config (#1671)

Author: zhenyatsk

charts/sentry/templates/_helper.tpl

@@ -412,6 +412,33 @@ Set ClickHouse cluster name
 {{- end -}}
 {{- end -}}
 
+{{/*
+Set ClickHouse secure setting
+*/}}
+{{- define "sentry.clickhouse.secure" -}}
+{{- if and (.Values.externalClickhouse.enabled) (.Values.externalClickhouse.secure) -}}
+True
+{{- end -}}
+{{- end -}}
+
+{{/*
+Set ClickHouse ca_certs setting
+*/}}
+{{- define "sentry.clickhouse.ca_certs" -}}
+{{- if and (.Values.externalClickhouse.enabled) (.Values.externalClickhouse.ca_certs) -}}
+{{ .Values.externalClickhouse.ca_certs }}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Set ClickHouse verify ca setting
+*/}}
+{{- define "sentry.clickhouse.verify" -}}
+{{- if and (.Values.externalClickhouse.enabled) (.Values.externalClickhouse.verify) -}}
+True
+{{- end -}}
+{{- end -}}
+
 {{/*
 Set Kafka Confluent host
 */}}

charts/sentry/templates/snuba/_helper-snuba.tpl

@@ -36,6 +36,9 @@ settings.py: |
     {
       "host": env("CLICKHOUSE_HOST", {{ include "sentry.clickhouse.host" . | quote }}),
       "port": int({{ include "sentry.clickhouse.port" . }}),
+      "secure": env("CLICKHOUSE_SECURE", False),
+      "ca_certs": env("CLICKHOUSE_CA_CERTS", None),
+      "verify": env("CLICKHOUSE_VERIFY", False),
       "user":  env("CLICKHOUSE_USER", "default"),
       "password": env("CLICKHOUSE_PASSWORD", ""),
       "max_connections": int(os.environ.get("CLICKHOUSE_MAX_CONNECTIONS", 100)),

charts/sentry/templates/snuba/secret-snuba-env.yaml

@@ -15,3 +15,12 @@ data:
 {{- if not .Values.externalClickhouse.existingSecret }}
   CLICKHOUSE_PASSWORD: {{ include "sentry.clickhouse.password" . | b64enc | quote }}
 {{- end }}
+{{- if not .Values.externalClickhouse.secure }}
+  CLICKHOUSE_SECURE: {{ include "sentry.clickhouse.secure" . | b64enc | quote }}
+{{- end }}
+{{- if not .Values.externalClickhouse.ca_certs }}
+  CLICKHOUSE_CA_CERTS: {{ include "sentry.clickhouse.ca_certs" . | b64enc | quote }}
+{{- end }}
+{{- if not .Values.externalClickhouse.verify }}
+  CLICKHOUSE_VERIFY: {{ include "sentry.clickhouse.verify" . | b64enc | quote }}
+{{- end }}