reverse_private_endpoints
Creates, updates, deletes, gets or lists a reverse_private_endpoints resource.
Overview
| Name | reverse_private_endpoints |
| Type | Resource |
| Id | clickhouse.clickpipes.reverse_private_endpoints |
Fields
The following fields are returned by SELECT queries:
- get
- list
| Name | Datatype | Description |
|---|---|---|
id | string (uuid) | Reverse private endpoint ID. (example: 12345678-1234-1234-1234-123456789012) |
endpoint_id | string | Reverse private endpoint endpoint ID. (example: vpce-12345678901234567) (wire: endpointId) |
service_id | string (uuid) | ClickHouse service ID reverse private endpoint is associated with. (example: 12345678-1234-1234-1234-123456789012) (wire: serviceId) |
vpc_resource_configuration_id | string | VPC resource configuration ID. Required for VPC_RESOURCE type. (example: rcfg-12345678901234567) (wire: vpcResourceConfigurationId) |
vpc_endpoint_service_name | string | VPC endpoint service name. (example: com.amazonaws.vpce.us-east-1.vpce-svc-12345678901234567) (wire: vpcEndpointServiceName) |
custom_private_dns_mappings | array | Optional private DNS names for Reverse Private Endpoint. Can be used as data source destination address. Must be unique across the ClickHouse service. Generally available for Google Private Service Connect (PSC). For AWS PrivateLink (VPC endpoint service and VPC resource), available in Private Preview; contact ClickHouse support to enable it for your service. Not supported for MSK multi-VPC. Supports exact names and leading wildcard names such as *.example.com (wire: customPrivateDnsMappings) |
description | string | Reverse private endpoint description. Maximum length is 255 characters. (example: My reverse private endpoint) |
dns_names | array | Reverse private endpoint internal DNS names. (wire: dnsNames) |
gcp_service_attachment | string | Private Preview. GCP PSC service attachment URI. Required for GCP_PSC_SERVICE_ATTACHMENT type. Format: projects/{project}/regions/{region}/serviceAttachments/{name}. (example: projects/my-project/regions/us-central1/serviceAttachments/my-service) (wire: gcpServiceAttachment) |
msk_authentication | string | MSK cluster authentication type. Required for MSK_MULTI_VPC type. (SASL_IAM, SASL_SCRAM) (example: SASL_IAM) (wire: mskAuthentication) |
msk_cluster_arn | string | MSK cluster ARN. Required for MSK_MULTI_VPC type. (example: arn:aws:kafka:us-east-1:123456789012:cluster/my-cluster) (wire: mskClusterArn) |
private_dns_names | array | Reverse private endpoint private DNS names. (wire: privateDnsNames) |
status | string | Reverse private endpoint status. (Unknown, Provisioning, Deleting, Ready, Failed, PendingAcceptance, Rejected, Expired) (example: Ready) |
type | string | Reverse private endpoint type. (VPC_ENDPOINT_SERVICE, VPC_RESOURCE, MSK_MULTI_VPC, GCP_PSC_SERVICE_ATTACHMENT) (example: VPC_ENDPOINT_SERVICE) |
vpc_resource_share_arn | string | VPC resource share ARN. Required for VPC_RESOURCE type. (example: arn:aws🐏us-east-1:123456789012:resource-share/share-12345678901234567) (wire: vpcResourceShareArn) |
| Name | Datatype | Description |
|---|---|---|
id | string (uuid) | Reverse private endpoint ID. (example: 12345678-1234-1234-1234-123456789012) |
endpoint_id | string | Reverse private endpoint endpoint ID. (example: vpce-12345678901234567) (wire: endpointId) |
service_id | string (uuid) | ClickHouse service ID reverse private endpoint is associated with. (example: 12345678-1234-1234-1234-123456789012) (wire: serviceId) |
vpc_resource_configuration_id | string | VPC resource configuration ID. Required for VPC_RESOURCE type. (example: rcfg-12345678901234567) (wire: vpcResourceConfigurationId) |
vpc_endpoint_service_name | string | VPC endpoint service name. (example: com.amazonaws.vpce.us-east-1.vpce-svc-12345678901234567) (wire: vpcEndpointServiceName) |
custom_private_dns_mappings | array | Optional private DNS names for Reverse Private Endpoint. Can be used as data source destination address. Must be unique across the ClickHouse service. Generally available for Google Private Service Connect (PSC). For AWS PrivateLink (VPC endpoint service and VPC resource), available in Private Preview; contact ClickHouse support to enable it for your service. Not supported for MSK multi-VPC. Supports exact names and leading wildcard names such as *.example.com (wire: customPrivateDnsMappings) |
description | string | Reverse private endpoint description. Maximum length is 255 characters. (example: My reverse private endpoint) |
dns_names | array | Reverse private endpoint internal DNS names. (wire: dnsNames) |
gcp_service_attachment | string | Private Preview. GCP PSC service attachment URI. Required for GCP_PSC_SERVICE_ATTACHMENT type. Format: projects/{project}/regions/{region}/serviceAttachments/{name}. (example: projects/my-project/regions/us-central1/serviceAttachments/my-service) (wire: gcpServiceAttachment) |
msk_authentication | string | MSK cluster authentication type. Required for MSK_MULTI_VPC type. (SASL_IAM, SASL_SCRAM) (example: SASL_IAM) (wire: mskAuthentication) |
msk_cluster_arn | string | MSK cluster ARN. Required for MSK_MULTI_VPC type. (example: arn:aws:kafka:us-east-1:123456789012:cluster/my-cluster) (wire: mskClusterArn) |
private_dns_names | array | Reverse private endpoint private DNS names. (wire: privateDnsNames) |
status | string | Reverse private endpoint status. (Unknown, Provisioning, Deleting, Ready, Failed, PendingAcceptance, Rejected, Expired) (example: Ready) |
type | string | Reverse private endpoint type. (VPC_ENDPOINT_SERVICE, VPC_RESOURCE, MSK_MULTI_VPC, GCP_PSC_SERVICE_ATTACHMENT) (example: VPC_ENDPOINT_SERVICE) |
vpc_resource_share_arn | string | VPC resource share ARN. Required for VPC_RESOURCE type. (example: arn:aws🐏us-east-1:123456789012:resource-share/share-12345678901234567) (wire: vpcResourceShareArn) |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get | select | service_id, reverse_private_endpoint_id, organization_id | Returns the reverse private endpoint with the specified ID. | |
list | select | service_id, organization_id | Returns a list of reverse private endpoints for the specified service. | |
create | insert | service_id, organization_id | Create a new reverse private endpoint. | |
update | update | service_id, reverse_private_endpoint_id, organization_id | Update mutable fields for an existing reverse private endpoint. customPrivateDnsMappings is a full replacement list. Use an empty array to clear mappings. | |
delete | delete | service_id, reverse_private_endpoint_id, organization_id | Delete the reverse private endpoint with the specified ID. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
organization_id | string | ClickHouse Cloud organization ID. Resolved from the CLICKHOUSE_ORG_ID environment variable when it is set (x-stackQL-envVar); otherwise it must be supplied on every query as WHERE organization_id = <uuid>. A WHERE value always takes precedence over the environment. (x-stackQL-envVar: CLICKHOUSE_ORG_ID) |
reverse_private_endpoint_id | string (uuid) | ID of the reverse private endpoint to delete. (wire: reversePrivateEndpointId) |
service_id | string (uuid) | ID of the service that owns the Reverse Private Endpoint. (wire: serviceId) |
SELECT examples
- get
- list
Returns the reverse private endpoint with the specified ID.
SELECT
id,
endpoint_id,
service_id,
vpc_resource_configuration_id,
vpc_endpoint_service_name,
custom_private_dns_mappings,
description,
dns_names,
gcp_service_attachment,
msk_authentication,
msk_cluster_arn,
private_dns_names,
status,
type,
vpc_resource_share_arn
FROM clickhouse.clickpipes.reverse_private_endpoints
WHERE service_id = '{{ service_id }}' -- required
AND reverse_private_endpoint_id = '{{ reverse_private_endpoint_id }}' -- required
AND organization_id = '{{ organization_id }}' -- required unless CLICKHOUSE_ORG_ID is set
;
Returns a list of reverse private endpoints for the specified service.
SELECT
id,
endpoint_id,
service_id,
vpc_resource_configuration_id,
vpc_endpoint_service_name,
custom_private_dns_mappings,
description,
dns_names,
gcp_service_attachment,
msk_authentication,
msk_cluster_arn,
private_dns_names,
status,
type,
vpc_resource_share_arn
FROM clickhouse.clickpipes.reverse_private_endpoints
WHERE service_id = '{{ service_id }}' -- required
AND organization_id = '{{ organization_id }}' -- required unless CLICKHOUSE_ORG_ID is set
;
INSERT examples
- create
- Manifest
Create a new reverse private endpoint.
INSERT INTO clickhouse.clickpipes.reverse_private_endpoints (
description,
type,
vpc_endpoint_service_name,
vpc_resource_configuration_id,
vpc_resource_share_arn,
msk_cluster_arn,
msk_authentication,
gcp_service_attachment,
custom_private_dns_mappings,
service_id,
organization_id
)
SELECT
'{{ description }}',
'{{ type }}',
'{{ vpc_endpoint_service_name }}',
'{{ vpc_resource_configuration_id }}',
'{{ vpc_resource_share_arn }}',
'{{ msk_cluster_arn }}',
'{{ msk_authentication }}',
'{{ gcp_service_attachment }}',
'{{ custom_private_dns_mappings }}',
'{{ service_id }}',
'{{ organization_id }}'
RETURNING
request_id,
result,
status
;
# Description fields are for documentation purposes
- name: reverse_private_endpoints
props:
- name: service_id
value: "{{ service_id }}"
description: Required parameter for the reverse_private_endpoints resource.
- name: organization_id
value: "{{ organization_id }}"
description: Required parameter for the reverse_private_endpoints resource.
- name: description
value: "{{ description }}"
description: |
Reverse private endpoint description. Maximum length is 255 characters.
- name: type
value: "{{ type }}"
description: |
Reverse private endpoint type.
valid_values: ['VPC_ENDPOINT_SERVICE', 'VPC_RESOURCE', 'MSK_MULTI_VPC', 'GCP_PSC_SERVICE_ATTACHMENT']
- name: vpc_endpoint_service_name
value: "{{ vpc_endpoint_service_name }}"
description: |
VPC endpoint service name.
- name: vpc_resource_configuration_id
value: "{{ vpc_resource_configuration_id }}"
description: |
VPC resource configuration ID. Required for VPC_RESOURCE type.
- name: vpc_resource_share_arn
value: "{{ vpc_resource_share_arn }}"
description: |
VPC resource share ARN. Required for VPC_RESOURCE type.
- name: msk_cluster_arn
value: "{{ msk_cluster_arn }}"
description: |
MSK cluster ARN. Required for MSK_MULTI_VPC type.
- name: msk_authentication
value: "{{ msk_authentication }}"
description: |
MSK cluster authentication type. Required for MSK_MULTI_VPC type.
valid_values: ['SASL_IAM', 'SASL_SCRAM']
- name: gcp_service_attachment
value: "{{ gcp_service_attachment }}"
description: |
Private Preview. GCP PSC service attachment URI. Required for GCP_PSC_SERVICE_ATTACHMENT type. Format: projects/{project}/regions/{region}/serviceAttachments/{name}.
- name: custom_private_dns_mappings
description: |
Optional private DNS names for Reverse Private Endpoint. Can be used as data source destination address. Must be unique across the ClickHouse service.
Generally available for Google Private Service Connect (PSC). For AWS PrivateLink (VPC endpoint service and VPC resource), available in Private Preview; contact ClickHouse support to enable it for your service. Not supported for MSK multi-VPC.
Supports exact names and leading wildcard names such as *.example.com
value:
- privateDnsName: "{{ privateDnsName }}"
UPDATE examples
- update
Update mutable fields for an existing reverse private endpoint. customPrivateDnsMappings is a full replacement list. Use an empty array to clear mappings.
UPDATE clickhouse.clickpipes.reverse_private_endpoints
SET
custom_private_dns_mappings = '{{ custom_private_dns_mappings }}'
WHERE
service_id = '{{ service_id }}' --required
AND reverse_private_endpoint_id = '{{ reverse_private_endpoint_id }}' --required
AND organization_id = '{{ organization_id }}' --required unless CLICKHOUSE_ORG_ID is set
RETURNING
request_id,
result,
status;
DELETE examples
- delete
Delete the reverse private endpoint with the specified ID.
DELETE FROM clickhouse.clickpipes.reverse_private_endpoints
WHERE service_id = '{{ service_id }}' --required
AND reverse_private_endpoint_id = '{{ reverse_private_endpoint_id }}' --required
AND organization_id = '{{ organization_id }}' --required unless CLICKHOUSE_ORG_ID is set
;