---
description: "This documentation outlines ClickHouse connection settings and deployment considerations for system integration"
---

# ClickHouse Connection Setup

In this section you can see information on specific settings that must be set in your system to allow connection and operation with ClickHouse:

| Item                | Description                  |
| ------------------- | ---------------------------- |
| ClickHouse Username | The ClickHouse User name     |
| ClickHouse Password | The ClickHouse User password |

Table: ClickHouse connection setup

See more information on [[installation-guide-accountsandsecurity]] for specific information on accounts and security settings for ClickHouse.

## Deployment

Critical Manufacturing MES uses ClickHouse for data persistence. For the MES system to operate correctly, deploy `ClickHouse-Server` with the appropriate version matching the definitions listed in [[system-requirements-additionalcomponents]]. You can use the provided ClickHouse templates available here: [ClickHouse Templates](https://github.com/criticalmanufacturing/install-scripts/tree/main/platform/v11.0/Kubernetes/Clickhouse).

!!! warning
	These templates are available for guidance purposes only. Critical Manufacturing recommends consulting an expert for proper ClickHouse setup.

Furthermore, at least one user must exist with the permissions listed in [[installation-guide-accountsandsecurity]].

If you are using mTLS as the authentication method, a secret is required in the namespace where ClickHouse will be installed. This secret should contain the following key-value pairs:

| Key          | Value                           |
| ------------ | ------------------------------- |
| `root.crt`   | (Cluster Certificate Authority) |
| `client.crt` | (User Public Key)               |
| `client.key` | (User Private Key)              |

The name of this secret should be passed to `values.yaml`.

!!! warning
	If you are using SASL Plain as the authentication method, it is necessary to pass the username and password to `values.yaml` instead of user certificates.

### Fully managed ClickHouse service

It is also possible to use a fully managed ClickHouse service such as ClickHouse Cloud. If this is the setup you wish to deploy in your system, please contact ClickHouse on [ClickHouse Support](https://clickhouse.com/support/program) for detailed instructions on setting up ClickHouse and integrating with Confluent Cloud.