From 494d797086aa727ce393edb210ce952088138799 Mon Sep 17 00:00:00 2001
From: nicktrn <55853254+nicktrn@users.noreply.github.com>
Date: Tue, 5 May 2026 10:37:15 +0100
Subject: [PATCH] fix(helm): bump clickhouse subchart 9.3.7 -> 9.4.4
 (clickhouse 25.7.5)

Pulls in upstream memory-tracker fixes shipped in clickhouse 25.7.x.
The previous pin (25.6.1) hits a memory-tracker accounting bug under
sustained ingest where the global counter overflows to ~7 EiB, after
which every query is rejected by OvercommitTracker until the pod is
restarted - reported in #3520 with full repro and pod logs.

9.4.4 is the latest packaged release at oci://registry-1.docker.io/
bitnamicharts/clickhouse; that registry has been frozen since
2025-08-28 but the chart source (Apache 2) is still maintained at
bitnami/charts. The image already resolves via bitnamilegacy/clickhouse
(per existing values.yaml override) since bitnami/clickhouse is now
paid-only.

refs #3520
---
 hosting/k8s/helm/Chart.lock  | 6 +++---
 hosting/k8s/helm/Chart.yaml  | 2 +-
 hosting/k8s/helm/values.yaml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/hosting/k8s/helm/Chart.lock b/hosting/k8s/helm/Chart.lock
index ac445fac172..5a7882cfa0e 100644
--- a/hosting/k8s/helm/Chart.lock
+++ b/hosting/k8s/helm/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
   version: 21.2.6
 - name: clickhouse
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 9.3.7
+  version: 9.4.4
 - name: minio
   repository: oci://registry-1.docker.io/bitnamicharts
   version: 17.0.9
-digest: sha256:b6cef61abc0b8bcdf4e6d7d86bd8dd7999dd07543f5532f3d94797ffdf0ad30b
-generated: "2025-06-27T19:27:24.075488134+01:00"
+digest: sha256:e1b572ab8eca0cc376311398c27b1734d8a598095fccc81dd9c32b2c8b9c1149
+generated: "2026-05-05T10:31:58.493590751+01:00"
diff --git a/hosting/k8s/helm/Chart.yaml b/hosting/k8s/helm/Chart.yaml
index 855453bb422..83734b4ddb1 100644
--- a/hosting/k8s/helm/Chart.yaml
+++ b/hosting/k8s/helm/Chart.yaml
@@ -27,7 +27,7 @@ dependencies:
     repository: "oci://registry-1.docker.io/bitnamicharts"
     condition: redis.deploy
   - name: clickhouse
-    version: "9.3.7"
+    version: "9.4.4"
     repository: "oci://registry-1.docker.io/bitnamicharts"
     condition: clickhouse.deploy
   - name: minio
diff --git a/hosting/k8s/helm/values.yaml b/hosting/k8s/helm/values.yaml
index 3ed254397e7..062bebf9c7f 100644
--- a/hosting/k8s/helm/values.yaml
+++ b/hosting/k8s/helm/values.yaml
@@ -542,7 +542,7 @@ clickhouse:
   image:
     # Use bitnami legacy repo
     repository: bitnamilegacy/clickhouse
-    # image: docker.io/bitnamilegacy/clickhouse:25.6.1-debian-12-r0
+    # image: docker.io/bitnamilegacy/clickhouse:25.7.5-debian-12-r0
 
   # TLS/Secure connection configuration
   secure: false # Set to true to use HTTPS and secure connections