Skip to content

Query Authentication

The query subsystem requires clients to authenticate by default. You can disable and re-enable authentication requirements.

See Search Tools and select your preferred interface for examples using user credentials or auth tokens.

Disable Query Authentication⚓︎

The query subsystem uses unified auth system in the cluster by default. The unified_auth tunable defaults to true.

To allow queries to a cluster without authentication, add the enable_query_auth: false flag in the cluster configuration file:

1
2
spec:
  enable_query_auth: false

All query services will now respond to any incoming queries.

Enable Query Authentication⚓︎

The query subsystem uses unified auth system in the cluster by default. The unified_auth tunable defaults to true.

Under the rare configuration that unified_authis false, require clients to authenticate by setting enable_query_auth: true flag in the cluster configuration file:

1
2
spec:
  enable_query_auth: true

Authenticate Superset⚓︎

Configure the Superset application using the ClickHouse plugin. Set the connection string:

1
clickhouse+native://user@company.net:mypassword@hostname.company.net.hydrolix.net/sample_project?secure=true

1000