Skip to content

Conversation

@Blargian
Copy link
Member

@Blargian Blargian commented Dec 30, 2025

Summary

Adds a guide for secure connection to GCS using gcs table engine and HMAC keys.
Addresses half of #5101.

Checklist

@Blargian Blargian requested a review from a team as a code owner December 30, 2025 17:32
@vercel
Copy link

vercel bot commented Dec 30, 2025

@Blargian is attempting to deploy a commit to the ClickHouse Team on Vercel.

A member of the Team first needs to authorize it.

@vercel
Copy link

vercel bot commented Dec 30, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
clickhouse-docs Ready Ready Preview Jan 7, 2026 11:19am
2 Skipped Deployments
Project Deployment Review Updated (UTC)
clickhouse-docs-ru Ignored Ignored Preview Jan 7, 2026 11:19am
clickhouse-docs-zh Ignored Ignored Preview Jan 7, 2026 11:19am

Copy link
Collaborator

@dhtclk dhtclk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Real small verbiage change, otherwise LGTM

@Blargian
Copy link
Member Author

Blargian commented Jan 7, 2026

@morsapaes when you get a chance, would you mind giving a quick scroll through if it looks okay, if anything is missing? I'll try get around to doing the one for Azure later in the week.


:::note Workload Identity Federation
ClickHouse Cloud currently only supports HMAC key authentication for GCS access.
Support for Workload Identity Federation (the GCP equivalent of AWS IAM role assumption) is planned for a future release.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this planned for the native table engine? Couldn't find a tracking issue.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Vaguely remember discussions about it but also can't find an issue now. I'll remove.


## Use HMAC keys with ClickHouse Cloud {#use-hmac-keys-with-clickhouse-cloud}

Now you can use the HMAC credentials to access GCS from ClickHouse Cloud.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we go a little broader here? It'd be nice to mention ClickPipes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants