tools:
  pgbouncer: {}
  #pgcat # trop contraignant: lister tous les databases/users et auth_type md5 uniquement: {}
  # prometheus: {}
  hashicorp-vault: {}
  crowdsec: {}
  redis: {}
  clickhouse:
    patches:
      - target:
          kind: StatefulSet
          name: clickhouse
        patch: |-
          - op: add
            path: /spec/template/spec/containers/0/volumeMounts/-
            value:
              name: config-volume
              mountPath: /etc/clickhouse-server/users.d/custom-users.xml
              subPath: custom-users.xml
              readOnly: true
  grafana: {}