25.3.14 Stable: Add guard for local data lakes

[zvonand]

Changelog category (leave one):

• Critical Bug Fix (crash, data loss, RBAC) or LOGICAL_ERROR

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

Add setting allow_local_data_lakes. Off by default.

CI/CD Options

Exclude tests:

• Fast test
• Integration Tests
• Stateless tests
• Stateful tests
• Performance tests
• All with ASAN
• All with TSAN
• All with MSAN
• All with UBSAN
• All with Coverage
• All with Aarch64
• All Regression
• Disable CI Cache

Regression jobs to run:

• Fast suites (mostly <1h)
• Aggregate Functions (2h)
• Alter (1.5h)
• Benchmark (30m)
• ClickHouse Keeper (1h)
• Iceberg (2h)
• LDAP (1h)
• Parquet (1.5h)
• RBAC (1.5h)
• SSL Server (1h)
• S3 (2h)
• Tiered Storage (2h)

[alsugiliazova]

PR #1534 CI Verification Report

CI Results: 165 success, 9 failures, 1 cancelled, 3 skipped

Failures (9) — none related to PR

#	Suite	Failed Test	Related to PR
1	RegressionTestsRelease / Common (iceberg)	REST catalog connection refused (localhost:5000) — infrastructure	No
2	RegressionTestsAarch64 / Common (iceberg)	Same REST catalog + /upload failure — infrastructure	No
3	RegressionTestsRelease / Common (aggregate_functions)	Only XFail (mannWhitneyUTestMerge, ClickHouse#69192) — job marked passing	No
4	RegressionTestsAarch64 / Common (rbac)	Only XFail (timezone/SSH key tests) + /upload failures	No
5	IntegrationTestsRelease / Integration tests (release)-2	test_race_condition_for_replicated_merge_tree::test_partition_move_drop_race — race condition test, flaky	No
6	IntegrationTestsRelease / Integration tests (release)-5	test_storage_s3_queue/test_4.py::test_alter_settings — S3 queue test, flaky	No
7	IntegrationTestsAsan / Integration tests (asan)-2	test_race_condition_for_replicated_merge_tree::test_partition_move_drop_race — same flaky race test	No
8	IntegrationTestsAsan / Integration tests (asan)-5	test_storage_s3_queue/test_4.py::test_alter_settings + test_keeper_http_control::test_http_readiness_partitioned_cluster	No
9	GrypeScan (server, -alpine) / Grype Scan	CVE scan — infrastructure	No

Cancelled (1)

Suite	Reason
RegressionTestsAarch64 / Common (aggregate_functions)	Cancelled

Skipped (3)

Suite	Reason
BuildDockers (DockerBuildAmd64, DockerBuildAarch64, DockerMultiArchManifest)	Skipped

TSAN, MSAN, UBSAN, Coverage excluded by PR author.

Conclusion

PR #1534 is ready to merge.

[alsugiliazova]

Audit Report: PR #1534 — Add guard for local data lakes

Confirmed defects

No confirmed defects in reviewed scope.