use_ssl.yml

- type: replace
  path: /instance_groups/name=postgres/jobs/name=postgres/properties/databases/tls?/ca
  value: ((postgres_cert.ca))

- type: replace
  path: /instance_groups/name=postgres/jobs/name=postgres/properties/databases/tls?/certificate
  value: ((postgres_cert.certificate))

- type: replace
  path: /instance_groups/name=postgres/jobs/name=postgres/properties/databases/tls?/private_key
  value: ((postgres_cert.private_key))

- type: replace
  path: /variables?/name=postgres_ca?
  value:
    name: postgres_ca
    type: certificate
    options:
      is_ca: true
      common_name: postgres_ca

- type: replace
  path: /variables?/name=postgres_cert?
  value:
    name: postgres_cert
    type: certificate
    options:
      ca: postgres_ca
      common_name: ((postgres_host_or_ip))
      alternative_names: [((postgres_host_or_ip))]
      extended_key_usage:
      - server_auth