clickhouse

const (
	OperatorNamedCollectionName     = "__operator"
	OperatorConfigRevisionField     = "config_revision"
	OperatorSettingsProfileName     = "__operator"
	OperatorReloadMarkerSettingName = "custom_operator_reload_revision"
)

const (
	PortManagement     = 9001
	PortManagementHTTP = 9002
	PortNative         = 9000
	PortNativeSecure   = 9440
	PortHTTP           = 8123
	PortHTTPSecure     = 8443

	PortPrometheusScrape = 9363
	PortInterserver      = 9009

	ConfigPath               = "/etc/clickhouse-server/"
	ConfigDPath              = "config.d"
	ConfigFileName           = "config.yaml"
	UsersDPath               = "users.d"
	UsersFileName            = "users.yaml"
	ExtraConfigFileName      = "99-extra-config.yaml"
	ExtraUsersConfigFileName = "99-extra-users-config.yaml"
	ClientConfigPath         = "/etc/clickhouse-client/"
	ClientConfigFileName     = "config.yaml"
	AdditionalDiskBasePath   = internal.ClickHouseDataPath + "/disks/"

	// DefaultDiskName is the built-in ClickHouse disk; at-rest encryption wraps it and each JBOD disk with an encrypted disk.
	DefaultDiskName         = "default"
	EncryptedDiskNameSuffix = "_encrypted"
	EncryptedDiskSubPath    = "encrypted/"
	DiskEncryptionAlgorithm = "AES_128_CTR"

	TLSConfigPath       = "/etc/clickhouse-server/tls/"
	CertificateFilename = "clickhouse-server.crt"
	KeyFilename         = "clickhouse-server.key"
	CustomCAFilename    = "custom-ca.crt"

	LogPath = "/var/log/clickhouse-server/"

	DefaultClusterName         = "default"
	KeeperPathUsers            = "/clickhouse/access"
	KeeperPathUDF              = "/clickhouse/user_defined"
	KeeperPathDistributedDDL   = "/clickhouse/task_queue/ddl"
	KeeperPathNamedCollections = "/clickhouse/named_collections"

	ContainerName          = "clickhouse-server"
	DefaultRevisionHistory = 10
	MaximalAffinityWeight  = 100

	InterserverUserName        = "interserver"
	OperatorManagementUsername = "operator"
	DefaultProfileName         = "default"

	EnvInterserverPassword = "CLICKHOUSE_INTERSERVER_PASSWORD"
	EnvDefaultUserPassword = "CLICKHOUSE_DEFAULT_USER_PASSWORD"
	EnvKeeperIdentity      = "CLICKHOUSE_KEEPER_IDENTITY"
	EnvClusterSecret       = "CLICKHOUSE_CLUSTER_SECRET"
	EnvNamedCollectionsKey = "CLICKHOUSE_NAMED_COLLECTIONS_KEY"
	EnvDiskEncryptionKey   = "CLICKHOUSE_DISK_ENCRYPTION_KEY"

	SecretKeyInterserverPassword = "interserver-password"
	SecretKeyManagementPassword  = "management-password"
	SecretKeyKeeperIdentity      = "keeper-identity"
	SecretKeyClusterSecret       = "cluster-secret"
	SecretKeyNamedCollectionsKey = "named-collections-key"
	SecretKeyDiskEncryptionKey   = "disk-encryption-key"

	// NamedCollectionsKeyByteLen and DiskEncryptionKeyByteLen are AES-128 key sizes in bytes (16 bytes = 32 hex chars).
	NamedCollectionsKeyByteLen = 16
	DiskEncryptionKeyByteLen   = 16
)