Support row policy

[guillaumes-hf]

Thank you for the provider.

Could you please add the support for row policies, i.e. https://clickhouse.com/docs/sql-reference/statements/create/row-policy

Thank you very much

[nikita-vanyasin]

Hello @guillaumes-hf!
Thanks for feature request.

cc @rsickles for tracking. Not sure if we already have a plan to add it?

[rsickles]

@guillaumes-hf yes thank you for this feature request! I've added this to our backlog and can provide updates here as we make progress.

[MattiasMTS]

What's the status of this? Would be great to have ✨

[rsickles]

Hi @MattiasMTS! There is no new update on this yet. This is still in our backlog but once we have a better idea of when we can plan to deliver this I will provide an update

[stephanerenou]

While waiting for the feature, has anyone found a trick to do this in terraform, or do we need to use an external tool? Like a way to run raw SQL from terraform, using the state management features for example?

[MattiasMTS]

While waiting for the feature, has anyone found a trick to do this in terraform, or do we need to use an external tool? Like a way to run raw SQL from terraform, using the state management features for example?

If you've a cluster that is accessible from where you execute your terraform code, you can use a combination of:

• CLI
• terraform_data
• SQL file/inline that will be executed via the CLI

Old mocked code showing the example for creating user (same applies for RBDC):

resource "terraform_data" "clickhouse_user" {
  for_each = local.clickhouse_users

  triggers_replace = {
    username      = each.value.username
    warehouse     = each.value.warehouse_key
    password_hash = sha256(random_password.clickhouse_user[each.key].result)
  }

  provisioner "local-exec" {
    command = <<-EOT
      ./clickhouse client \
        --host ${clickhouse_service.primary[each.value.warehouse_key].endpoints.nativesecure.host} \
        --port ${clickhouse_service.primary[each.value.warehouse_key].endpoints.nativesecure.port} \
        --secure \
        --stacktrace \
        --query "CREATE USER IF NOT EXISTS ${each.value.username} IDENTIFIED WITH sha256_password BY '${random_password.clickhouse_user[each.key].result}'"
    EOT
    environment = {
      CLICKHOUSE_PASSWORD='${random_password.warehouse_admin[each.value.warehouse_key].result}' \
    }
  }
}

NOTE: command here doesn't have to inline via EOT, you can perfectly store this as a file bash file and use command="${path.module}/user.sh".