ClickHouse / ClickHouse/dbt-clickhouse

Add ca_cert credential for http connection

Open
#459 2 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
362
Forks
177
Avg merge
2d 10h
Merged PRs (30d)
8

Description

We connect to a Managed ClickHouse cluster whose server certificate is signed by an internal/Yandex Root CA.

`clickhouse-connect` supports a file-path argument ca_cert that lets a client trust such a certificate chain. The dbt-clickhouse credential schema, however, exposes only the boolean flag verify and it is not possible to add ca_cert .pem file like in clickhouse_connect.

Proposal: add an optional string field ca_cert to class ChHttpClient._create_client:
```
return clickhouse_connect.get_client(
...,
verify=credentials.verify,
ca_cert=credentials.ca_cert
)
```

Contributor guide

Open the contributing guide

Research direction

Start at ChHttpClient._create_client and the dbt-clickhouse credential schema, then trace how the existing verify field reaches clickhouse_connect.get_client. Add the optional ca_cert credential and pass it through alongside verify. Done means a configured PEM path is accepted and forwarded without changing behavior when it is omitted.

Written by the indexing model from the issue text.

Assessment

Tech stack
clickhouse, python
Domain
databases
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.