{"resources":{"clickhousedb":{"id":"clickhousedb","name":"clickhousedb","fields":{"cluster":{"name":"cluster","type":"\u001bclickhousedb.cluster","title":"ClickHouse cluster","desc":"A cluster the server participates in, aggregated across its shards and replicas. The name field selects the cluster, for example clickhousedb.instance.clusters.where(name == \"my_cluster\"). Read from system.clusters.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb","is_implicit_resource":true},"instance":{"name":"instance","type":"\u001bclickhousedb.instance","title":"ClickHouse server","desc":"The connected ClickHouse server: its version, plus the users, roles, grants, settings profiles, quotas, clusters, and server settings reached from here. Populated from the system.* tables; data the connecting user is not permitted to read is left empty rather than failing.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb","is_implicit_resource":true},"quota":{"name":"quota","type":"\u001bclickhousedb.quota","title":"ClickHouse quota","desc":"A resource-usage quota that can be applied to users and roles. The name field selects the quota, for example clickhousedb.instance.quotas.where(name == \"default\"). Read from system.quotas.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb","is_implicit_resource":true},"role":{"name":"role","type":"\u001bclickhousedb.role","title":"ClickHouse role","desc":"A role and the privileges granted to it. Roles are assigned to users to grant sets of privileges. The name field selects the role, for example clickhousedb.instance.roles.where(name == \"readonly\"). Read from system.roles, with privileges from system.grants.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb","is_implicit_resource":true},"serverSetting":{"name":"serverSetting","type":"\u001bclickhousedb.serverSetting","title":"ClickHouse server setting","desc":"A single server-level configuration setting and its running value, from system.server_settings. Security-relevant settings (for example tcp_port_secure, https_port) are audited by selecting the setting by name, for example clickhousedb.instance.serverSettings.where(name == \"tcp_port_secure\").","provider":"go.mondoo.com/mql/v13/providers/clickhousedb","is_implicit_resource":true},"settingsProfile":{"name":"settingsProfile","type":"\u001bclickhousedb.settingsProfile","title":"ClickHouse settings profile","desc":"A named set of settings and constraints (for example a read-only profile) that can be applied to users and roles. The name field selects the profile, for example clickhousedb.instance.settingsProfiles.where(name == \"readonly\"). Read from system.settings_profiles.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb","is_implicit_resource":true},"user":{"name":"user","type":"\u001bclickhousedb.user","title":"ClickHouse user","desc":"A user account and its security attributes: how it authenticates, whether it still allows password-less login, where it is defined (SQL-managed vs an XML config file), which hosts it may connect from, its default roles, and the privileges granted to it. The name field selects the user, for example clickhousedb.instance.users.where(name == \"default\"). Read from system.users; password material (auth_params) is never exposed.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb","is_implicit_resource":true}},"title":"ClickHouse","desc":"Root of the ClickHouse provider. The connected server and everything queryable through it (users, roles, grants, settings profiles, quotas, clusters, and server settings) is reached from clickhousedb.instance.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"clickhousedb.cluster":{"id":"clickhousedb.cluster","name":"clickhousedb.cluster","fields":{"maxReplicaCount":{"name":"maxReplicaCount","type":"\u0005","is_mandatory":true,"title":"Highest replica count across the cluster's shards","desc":"The maximum number of replicas any one shard has. When shards have unequal replica counts, this reports the largest.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cluster name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"shardCount":{"name":"shardCount","type":"\u0005","is_mandatory":true,"title":"Number of shards in the cluster","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}},"title":"ClickHouse cluster","desc":"A cluster the server participates in, aggregated across its shards and replicas. The name field selects the cluster, for example clickhousedb.instance.clusters.where(name == \"my_cluster\"). Read from system.clusters.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"clickhousedb.instance":{"id":"clickhousedb.instance","name":"clickhousedb.instance","fields":{"clusters":{"name":"clusters","type":"\u0019\u001bclickhousedb.cluster","title":"Clusters the server is a member of","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"quotas":{"name":"quotas","type":"\u0019\u001bclickhousedb.quota","title":"Quotas defined on the server","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"roles":{"name":"roles","type":"\u0019\u001bclickhousedb.role","title":"Roles defined on the server","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"serverSettings":{"name":"serverSettings","type":"\u0019\u001bclickhousedb.serverSetting","title":"Server-level configuration settings","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"settingsProfiles":{"name":"settingsProfiles","type":"\u0019\u001bclickhousedb.settingsProfile","title":"Settings profiles defined on the server","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"users":{"name":"users","type":"\u0019\u001bclickhousedb.user","title":"Users defined on the server","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"ClickHouse server version, for example \"24.8.4.13\"","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}},"title":"ClickHouse server","desc":"The connected ClickHouse server: its version, plus the users, roles, grants, settings profiles, quotas, clusters, and server settings reached from here. Populated from the system.* tables; data the connecting user is not permitted to read is left empty rather than failing.","min_provider_version":"13.0.0","defaults":"version","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"clickhousedb.quota":{"id":"clickhousedb.quota","name":"clickhousedb.quota","fields":{"appliesTo":{"name":"appliesTo","type":"\u0019\u0007","is_mandatory":true,"title":"Names of the users and roles the quota is applied to","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"appliesToAll":{"name":"appliesToAll","type":"\u0004","is_mandatory":true,"title":"Whether the quota is applied to all users and roles","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"keys":{"name":"keys","type":"\u0019\u0007","is_mandatory":true,"title":"Keys the quota is tracked by, for example \"user_name\" or \"ip_address\"","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Quota name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"storage":{"name":"storage","type":"\u0007","is_mandatory":true,"title":"Where the quota is defined: \"local_directory\" (SQL-managed) or \"users_xml\" (config file)","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}},"title":"ClickHouse quota","desc":"A resource-usage quota that can be applied to users and roles. The name field selects the quota, for example clickhousedb.instance.quotas.where(name == \"default\"). Read from system.quotas.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"clickhousedb.role":{"id":"clickhousedb.role","name":"clickhousedb.role","fields":{"grants":{"name":"grants","type":"\u0019\u0007","title":"Privileges granted to the role, each rendered as \"\u003cprivilege\u003e ON \u003cscope\u003e\"","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"storage":{"name":"storage","type":"\u0007","is_mandatory":true,"title":"Where the role is defined: \"local_directory\" (SQL-managed) or \"users_xml\" (config file)","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}},"title":"ClickHouse role","desc":"A role and the privileges granted to it. Roles are assigned to users to grant sets of privileges. The name field selects the role, for example clickhousedb.instance.roles.where(name == \"readonly\"). Read from system.roles, with privileges from system.grants.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"clickhousedb.serverSetting":{"id":"clickhousedb.serverSetting","name":"clickhousedb.serverSetting","fields":{"changed":{"name":"changed","type":"\u0004","is_mandatory":true,"title":"Whether the value differs from its default","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"default":{"name":"default","type":"\u0007","is_mandatory":true,"title":"Default value","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Human-readable description of the setting","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Setting name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Current running value","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}},"title":"ClickHouse server setting","desc":"A single server-level configuration setting and its running value, from system.server_settings. Security-relevant settings (for example tcp_port_secure, https_port) are audited by selecting the setting by name, for example clickhousedb.instance.serverSettings.where(name == \"tcp_port_secure\").","min_provider_version":"13.0.0","defaults":"name value","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"clickhousedb.settingsProfile":{"id":"clickhousedb.settingsProfile","name":"clickhousedb.settingsProfile","fields":{"appliesTo":{"name":"appliesTo","type":"\u0019\u0007","is_mandatory":true,"title":"Names of the users and roles the profile is applied to","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"appliesToAll":{"name":"appliesToAll","type":"\u0004","is_mandatory":true,"title":"Whether the profile is applied to all users and roles","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Settings profile name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"numElements":{"name":"numElements","type":"\u0005","is_mandatory":true,"title":"Number of settings the profile constrains","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"storage":{"name":"storage","type":"\u0007","is_mandatory":true,"title":"Where the profile is defined: \"local_directory\" (SQL-managed) or \"users_xml\" (config file)","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}},"title":"ClickHouse settings profile","desc":"A named set of settings and constraints (for example a read-only profile) that can be applied to users and roles. The name field selects the profile, for example clickhousedb.instance.settingsProfiles.where(name == \"readonly\"). Read from system.settings_profiles.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"clickhousedb.user":{"id":"clickhousedb.user","name":"clickhousedb.user","fields":{"anyHost":{"name":"anyHost","type":"\u0004","is_mandatory":true,"title":"Whether the user may connect from any host","desc":"True when the host restriction allows all addresses (for example \"::/0\" or \"0.0.0.0/0\"), meaning the account is not limited to specific hosts.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"authTypes":{"name":"authTypes","type":"\u0019\u0007","is_mandatory":true,"title":"Authentication methods, for example \"sha256_password\", \"no_password\", \"ldap\", or \"kerberos\"","desc":"A user may have more than one, and ClickHouse admits a login if any method matches. So a user with a \"no_password\" method among others can still be reached with no credential at all, which is a finding (see hasPassword).","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"defaultRoles":{"name":"defaultRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Roles applied to the user by default on login","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"grants":{"name":"grants","type":"\u0019\u0007","title":"Privileges granted to the user, each rendered as \"\u003cprivilege\u003e ON \u003cscope\u003e\"","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"hasPassword":{"name":"hasPassword","type":"\u0004","is_mandatory":true,"title":"Whether the user requires a credential to authenticate","desc":"False when any authentication method is \"no_password\". Because ClickHouse admits a login if any method matches, the presence of a \"no_password\" method means the account is reachable without a credential even if it also has a real one.","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"hostIps":{"name":"hostIps","type":"\u0019\u0007","is_mandatory":true,"title":"IP ranges the user may connect from, for example \"::/0\" for any host","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"hostNames":{"name":"hostNames","type":"\u0019\u0007","is_mandatory":true,"title":"Host name patterns the user may connect from","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"User name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"},"storage":{"name":"storage","type":"\u0007","is_mandatory":true,"title":"Where the user is defined: \"local_directory\" (SQL-managed) or \"users_xml\" (config file)","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}},"title":"ClickHouse user","desc":"A user account and its security attributes: how it authenticates, whether it still allows password-less login, where it is defined (SQL-managed vs an XML config file), which hosts it may connect from, its default roles, and the privileges granted to it. The name field selects the user, for example clickhousedb.instance.users.where(name == \"default\"). Read from system.users; password material (auth_params) is never exposed.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/clickhousedb"}}}