++ valkey clickhouse sts nodes

infrastructure/clickhouse/vk-prod/clickhouse.yaml

@@ -39,7 +39,12 @@ spec:
         initDatabases: true
         admin: true
         nodeSelector:
-          dedicated: generic
+          dedicated: sts
+        tolerations:
+          - key: dedicated
+            operator: Equal
+            value: sts
+            effect: NoSchedule
         resources:
           requests:
             cpu: "1"

infrastructure/valkey/vk-prod/valkey.yaml

@@ -37,6 +37,7 @@ spec:
       appendonly yes
       save ""
       maxmemory 6gb
+      aclfile /opt/bitnami/valkey/acl/users.acl
     serviceAccount:
       create: true
       automountServiceAccountToken: true
@@ -61,6 +62,13 @@ spec:
       replicaCount: 3
       automountServiceAccountToken: true
       podAntiAffinityPreset: hard
+      nodeSelector:
+        dedicated: sts
+      tolerations:
+        - key: dedicated
+          operator: Equal
+          value: sts
+          effect: NoSchedule
       topologySpreadConstraints:
         - maxSkew: 1
           topologyKey: topology.kubernetes.io/zone
@@ -81,5 +89,14 @@ spec:
         enabled: true
         size: 32Gi
         storageClass: csi-ceph-ssd-retain
+      extraVolumes:
+        - name: users-acl
+          secret:
+            secretName: valkey-users-acl
+            defaultMode: 292
+      extraVolumeMounts:
+        - name: users-acl
+          mountPath: /opt/bitnami/valkey/acl
+          readOnly: true
     metrics:
       enabled: false