settings for lab as default

Signed-off-by: entlein <einentlein@gmail.com>

Author: entlein

k8s/vizier/bootstrap/adaptive_export_deployment.yaml

@@ -68,18 +68,20 @@ spec:
           value: "6"
         # Optional overrides for the ClickHouse PxL scripts. When unset they are
         # parsed from CLICKHOUSE_DSN. Individual fields win over the parsed DSN.
+        # Defaults below match soc/tree/clickhouse-lab (forensic-soc-db CHI,
+        # ingest_writer user, forensic_db database).
         - name: KUBESCAPE_TABLE
           value: "kubescape_logs"
         # - name: CLICKHOUSE_HOST
         #   value: "clickhouse-forensic-soc-db.clickhouse.svc.cluster.local"
         # - name: CLICKHOUSE_PORT
         #   value: "9000"
         # - name: CLICKHOUSE_USER
-        #   value: "otelcollector"
+        #   value: "ingest_writer"
         # - name: CLICKHOUSE_PASSWORD
-        #   value: "changeme"
+        #   value: "changeme-ingest"
         # - name: CLICKHOUSE_DATABASE
-        #   value: "default"
+        #   value: "forensic_db"
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:

k8s/vizier/bootstrap/adaptive_export_secrets.yaml

@@ -7,5 +7,7 @@ type: Opaque
 stringData:
   # Replace with your actual Pixie API key from https://work.withpixie.ai
   pixie-api-key: "PIXIE_API_KEY_PLACEHOLDER"
-  # Replace with your ClickHouse DSN: clickhouse://user:password@host:port/database
-  clickhouse-dsn: "otelcollector:otelcollectorpass@hyperdx-hdx-oss-v2-clickhouse.click.svc.cluster.local:9000/default"
+  # ClickHouse DSN matches soc/tree/clickhouse-lab (CHI "forensic-soc-db",
+  # ingest_writer user with INSERT rights into the forensic_db database).
+  # Format: user:password@host:port/database
+  clickhouse-dsn: "ingest_writer:changeme-ingest@clickhouse-forensic-soc-db.clickhouse.svc.cluster.local:9000/forensic_db"