Merge pull request #335 from ooni/add-clickhouse-write-ooniprobe

Add write access to clickhouse to the ooniprobe service

Author: LDiazN

tf/environments/dev/main.tf

@@ -240,6 +240,10 @@ data "aws_ssm_parameter" "clickhouse_readonly_test_url" {
   name = "/oonidevops/secrets/clickhouse_readonly_test_url"
 }
 
+data "aws_ssm_parameter" "clickhouse_write_url" {
+  name = "/oonidevops/secrets/clickhouse_write_password"
+}
+
 data "aws_ssm_parameter" "account_id_hashing_key" {
   name = "/oonidevops/secrets/ooni_services/account_id_hashing_key"
 }
@@ -582,7 +586,7 @@ module "ooniapi_ooniprobe" {
     POSTGRESQL_URL              = data.aws_ssm_parameter.oonipg_url.arn
     JWT_ENCRYPTION_KEY          = data.aws_ssm_parameter.jwt_secret_legacy.arn
     PROMETHEUS_METRICS_PASSWORD = data.aws_ssm_parameter.prometheus_metrics_password.arn
-    CLICKHOUSE_URL              = data.aws_ssm_parameter.clickhouse_readonly_url.arn
+    CLICKHOUSE_URL              = data.aws_ssm_parameter.clickhouse_write_url.arn
     ANONC_SECRET_KEY            = data.aws_ssm_parameter.anonc_secret_key.arn
   }
 

tf/environments/prod/main.tf

@@ -237,6 +237,10 @@ data "aws_ssm_parameter" "clickhouse_readonly_url" {
   name = "/oonidevops/secrets/clickhouse_readonly_url"
 }
 
+data "aws_ssm_parameter" "clickhouse_write_url" {
+  name = "/oonidevops/secrets/clickhouse_write_password"
+}
+
 data "aws_ssm_parameter" "account_id_hashing_key" {
   name = "/oonidevops/secrets/ooni_services/account_id_hashing_key"
 }
@@ -803,7 +807,7 @@ module "ooniapi_ooniprobe" {
     POSTGRESQL_URL              = data.aws_ssm_parameter.oonipg_url.arn
     JWT_ENCRYPTION_KEY          = data.aws_ssm_parameter.jwt_secret.arn
     PROMETHEUS_METRICS_PASSWORD = data.aws_ssm_parameter.prometheus_metrics_password.arn
-    CLICKHOUSE_URL              = data.aws_ssm_parameter.clickhouse_readonly_url.arn
+    CLICKHOUSE_URL              = data.aws_ssm_parameter.clickhouse_write_url.arn
     ANONC_SECRET_KEY            = data.aws_ssm_parameter.anonc_secret_key.arn
   }