chore(deps): bump github.com/lib/pq from 1.10.6 to 1.10.7

UPGRADE.md

@@ -8,6 +8,11 @@ does not have any particular instructions.
 
 ## Upcoming release
 
+### Universal
+
+A `lib/pq` change enables SNI by default when connecting to Postgres over TLS.
+Make sure your certificates contain a valid CN or SANs.
+
 ### `kuma-prometheus-sd`
 
 This component has been removed

go.mod

@@ -30,7 +30,7 @@ require (
 	github.com/kelseyhightower/envconfig v1.4.0
 	github.com/kumahq/kuma-net v0.6.0
 	github.com/kumahq/protoc-gen-kumadoc v0.3.1
-	github.com/lib/pq v1.10.6
+	github.com/lib/pq v1.10.7
 	github.com/miekg/dns v1.1.50
 	github.com/natefinch/atomic v1.0.1
 	github.com/onsi/ginkgo/v2 v2.1.6

go.sum

@@ -1031,8 +1031,8 @@ github.com/lib/pq v1.3.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.8.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lib/pq v1.10.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lib/pq v1.10.4/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lib/pq v1.10.6 h1:jbk+ZieJ0D7EVGJYpL9QTz7/YW6UHbmdnZWYyK5cdBs=
-github.com/lib/pq v1.10.6/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
+github.com/lib/pq v1.10.7 h1:p7ZhMD+KsSRozJr34udlUrhboJwWAgCg34+/ZZNvZZw=
+github.com/lib/pq v1.10.7/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de/go.mod h1:zAbeS9B/r2mtpb6U+EI2rYA5OAXxsYw6wTamcNW+zcE=
 github.com/linuxkit/virtsock v0.0.0-20201010232012-f8cee7dfc7a3/go.mod h1:3r6x7q95whyfWQpmGZTu3gk3v2YkMi05HEzl7Tf7YEo=
 github.com/lithammer/dedent v1.1.0/go.mod h1:jrXYCQtgg0nJiN+StA2KgR7w6CiQNv9Fd/Z9BP0jIOc=

tools/postgres/certs/generate.sh

@@ -8,4 +8,4 @@ openssl x509 -req -in postgres.client.csr -CA rootCA.crt -CAkey rootCA.key -CAcr
 
 openssl genrsa -out postgres.server.key 2048
 openssl req -new -sha256 -key postgres.server.key -subj "/C=US/ST=CA/O=MyOrg, Inc./CN=kuma-server" -out postgres.server.csr
-openssl x509 -req -in postgres.server.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out postgres.server.crt -days 5000 -sha256
+openssl x509 -req -in postgres.server.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -extfile <(printf "subjectAltName = DNS:localhost") -out postgres.server.crt -days 5000 -sha256

tools/postgres/certs/postgres.client.crt

@@ -1,24 +1,24 @@
 -----BEGIN CERTIFICATE-----
-MIID/TCCAeUCCQDi5MgMK45WdDANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJV
+MIID/TCCAeUCCQDi5MgMK45WgDANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJV
 UzELMAkGA1UECAwCQ0ExFDASBgNVBAoMC015T3JnLCBJbmMuMRAwDgYDVQQDDAdr
-dW1hLWNhMB4XDTIxMDQyMDEzNDAxMVoXDTM0MTIyODEzNDAxMVowPzELMAkGA1UE
+dW1hLWNhMB4XDTIyMDkxNDEwMzQwNVoXDTM2MDUyMzEwMzQwNVowPzELMAkGA1UE
 BhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQKDAtNeU9yZywgSW5jLjENMAsGA1UE
-AwwEa3VtYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMqRNQ7qsRq
-Be4o6uFL/L4LDvnptPzjflSY25Ho8l8I8HBWgH7GgxPThgOQel/CXH3cGuJ+Q9US
-0u/hpebB490gOHCFH2lQ2T9idlDevozR8bP2Ueu9erao4BVFsY1Zsrcupp5LECok
-FAET6G4tRg0+ZgyNWLD0PJrt1pzofIgOLZiXha6ld7UbOg/9K3FlESu1Cbk1+PY2
-Jmp/b15CQrbThwgmfRnn1ouUGRfFO1JDIEhEjyw36IOVekYFfoZ3vLzsTgLdcJJq
-5H3J8KoAkn6obWV/SP02lXd29Arv9iwktgPncgSihuLpW3s3t5WIgzfoCmlsFqD/
-60pMkgZKOuUCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAdKqS1o2HlOdzDeHr5HNO
-Oh4JdoKD4MP4fsgBbGxtvS1gHQlW7u9aJsPIhvsAAa7JAJCJ6pnr25gRG7xrkpVK
-Zijn7v9iZDlDcAjZOBmuyD/W1YBFfdLu0Y9ctWro/YagOXBTzNRGJDBW9dAf66Te
-vzyWMsUFn4dLQGYKMW/CDffKRBuLN1CgBz+hTs0GwkFoiBxTEqEsSYY3bBk+or6E
-e2YqVpKxKSwE8vbVMjza7f6MXEoxrAV1uAiPAwcDXxVvsVVapslRgsXhF1QvlmRg
-BZLpPro1S3cWIqRT7COV6sVPTZvzoAHyNzRSa7FsEvnte7NGbX4NTrSY65WMnO+b
-vGLB//o9Q4yAu9h2GjtOjoOIjWcubxGglWocfRRiiB5RaHQ1iqtwxM+pczuYIwBs
-qTrNw2whEsOzr2WP9Aq572AUZJM2IWS0W4QpyDyz2E8YIbZJs1ZMUgRm7gQwTiB3
-C73QJi0YMOl4jsJaOg8JXyd/rNqpiI8ThUBB03EEVNdH2vR4/E0IYWRgOv36OMi6
-WWFyNBK1e9SLqLzb6JXT77Bkj3WHyifBhSHwAkelg2Y9SAfkJaCaMmVWrjcmKbSU
-XDKaKQKyR4RyrqH4/uK1CbFF+kxo0cjXpZsvenbcOix266knItTmu6OxyYvr4yvp
-WkXXZ1zt1toh8ylpqGsgxLc=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 -----END CERTIFICATE-----

tools/postgres/certs/postgres.client.csr

@@ -1,16 +1,16 @@
 -----BEGIN CERTIFICATE REQUEST-----
 MIIChDCCAWwCAQAwPzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQK
 DAtNeU9yZywgSW5jLjENMAsGA1UEAwwEa3VtYTCCASIwDQYJKoZIhvcNAQEBBQAD
-ggEPADCCAQoCggEBAMMqRNQ7qsRqBe4o6uFL/L4LDvnptPzjflSY25Ho8l8I8HBW
-gH7GgxPThgOQel/CXH3cGuJ+Q9US0u/hpebB490gOHCFH2lQ2T9idlDevozR8bP2
-Ueu9erao4BVFsY1Zsrcupp5LECokFAET6G4tRg0+ZgyNWLD0PJrt1pzofIgOLZiX
-ha6ld7UbOg/9K3FlESu1Cbk1+PY2Jmp/b15CQrbThwgmfRnn1ouUGRfFO1JDIEhE
-jyw36IOVekYFfoZ3vLzsTgLdcJJq5H3J8KoAkn6obWV/SP02lXd29Arv9iwktgPn
-cgSihuLpW3s3t5WIgzfoCmlsFqD/60pMkgZKOuUCAwEAAaAAMA0GCSqGSIb3DQEB
-CwUAA4IBAQCRn46pFUAiMELEWkLgD4AZkKgpfTkG0VXRar4AiZPHKKfBI/qq1oGv
-xNL8v9eHrQ5xrYVm1YntnQ6oXNGGUl/v2dqC615ZA5ykUepaa+d1BPkjz4+dbnsF
-M+lpsKF3Ezz4bXUIccG/Ha6w4A8kXHffYGScHz0gkmiptgwG4K1EIJ69XGmqHJe5
-4fJgcG+WtJles90S+BQ8knB0mN0sDjk8WxvzgkhPBcuFcuzWyVT0f+ufyI8hHiXy
-JXFhXvKrR2Cd+mBYN+9NOAv/4Vg8ypPeMKcx3A+RtxArVwjif8KwWy2vrmF7yeLW
-AiFqWIpeYTxL6gGwgiAZQwNSaAwV+Me7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 -----END CERTIFICATE REQUEST-----

tools/postgres/certs/postgres.client.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEAwypE1DuqxGoF7ijq4Uv8vgsO+em0/ON+VJjbkejyXwjwcFaA
-fsaDE9OGA5B6X8Jcfdwa4n5D1RLS7+Gl5sHj3SA4cIUfaVDZP2J2UN6+jNHxs/ZR
-6716tqjgFUWxjVmyty6mnksQKiQUARPobi1GDT5mDI1YsPQ8mu3WnOh8iA4tmJeF
-rqV3tRs6D/0rcWURK7UJuTX49jYman9vXkJCttOHCCZ9GefWi5QZF8U7UkMgSESP
-LDfog5V6RgV+hne8vOxOAt1wkmrkfcnwqgCSfqhtZX9I/TaVd3b0Cu/2LCS2A+dy
-BKKG4ulbeze3lYiDN+gKaWwWoP/rSkySBko65QIDAQABAoIBAAU/Q655FDRHrXUj
-wHziMB9j6LkrYWRTMXhQy8Z2ft2zPdOnX7kI2UlVLIs3/TJJ5Xa0zjw8rNIzuVwd
-svorSFcPoLTVv2xzcgPUP94YvwLGOjteagFujLgQfkXUI9vrB3UJWg1zczHO2oLU
-6DDeIr4EaXX47uODDYYU0upRDdgSjX3X4//2LTrdUVlEd2jLAmhecf5BDsUtQVnQ
-iaYITKkVA2EI083Qc1p3MaOmjHhK906IuWROTfihS+9r+/BXJKmWMv3tLpbofNNo
-TyTIGbLE08qS1ZeQu63Lqyu2Qj50kEMbn0hxUpnDBEFWCssmn6cJwPX9TMqcGBje
-7mQGMcECgYEA455qKPXc1xaeU/NFSNJnVyMs4jt/zdld2huH5LXM9lh+73VTHP7R
-uDrPHW0M1NGYfy2NnygJmma5ujziXlp8aJF8MK2ymd5mYgWnIznJVIhZvFxKU7H5
-yudTrleJLQyxsi4OURwZroPjbBLRe5OcyLmaTPFKTI9QJWRhtKpT9z0CgYEA23/u
-6RfHAFvdoXNWcWcjnjpjMrjWRho52x4qeI8vdW4RsSM2oa70PdsBaILiOev42mvI
-F60NI41rNscwAQhfuS9hgGbeDQdB3EX90aN3rko1VG2oANvmBJocvTf9BXWiRmz3
-Sr4FpH2W7nwdkiLXRXBxMN3L9IG4raPOfshDTMkCgYBZzgmyiXaNQjZLhwLB/Yma
-Pp2Z0MHW9LjrscsG+JeaZkYGsjKNkRgraMCIqprSaLOTEeT7c29+hKMokJb7hRXq
-p+PozM9XmACrEfHkmwsNGBLXl04YAXM9k9FXSuArbwO4+iTZ6Y1UZmLXJAGUkSPd
-qiTv0I9w72Y+qoFGJ6GjPQKBgQChmshQLyRhvEEpzBwZtCECLuS4BGQmCssL62LD
-jlAXuikmbNGdKo1COUsJIkvi7zwxu+b+n3cr9MO5+d7686peUmcLvTDBENXJknJ0
-dVD5LkOjXHSz5TKtsrV0DpOoAFqwVSugiNTorVqBTToMTMCHrGh53OJ7q0JH/XFb
-4J/EGQKBgAIWm0VGYKKIbkvY3QBmB05lQd2N3SsbPe4+kH1QnFfZa46A5MtszNXS
-uM6F1fhx/YYGJfHGKypmONsWHVV1Ct2YIs+JTE20DhLoGBvKj3rPN3EbhfUgf3kJ
-8wD+3Glr0INrkH86mdK2cP2nOECVGZb7ltMkxG0xPCVv7qqx/x2r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 -----END RSA PRIVATE KEY-----

tools/postgres/certs/postgres.server.crt

@@ -1,24 +1,25 @@
 -----BEGIN CERTIFICATE-----
-MIIEBDCCAewCCQDi5MgMK45WdTANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJV
-UzELMAkGA1UECAwCQ0ExFDASBgNVBAoMC015T3JnLCBJbmMuMRAwDgYDVQQDDAdr
-dW1hLWNhMB4XDTIxMDQyMDEzNDAxMVoXDTM0MTIyODEzNDAxMVowRjELMAkGA1UE
-BhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQKDAtNeU9yZywgSW5jLjEUMBIGA1UE
-AwwLa3VtYS1zZXJ2ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ
-FVjfQTg9kTY2xBIFGnMFwSxdEEAM4i/WG0XNBe2ogTwb1STBlt7HKFMQt1YgjJNt
-v9ePPmQ/DTqfE9/6ru6Q1PlLxofWGnDdTkrrRbFzK2m+zHQKpIzCaaADmzIVerm5
-4eGHF0aMV4XyCHGQG6VwltyIHrnWgKNPOk6dLdX9BeKZMFy5CYrnYdbmvmCV4Axs
-/m++MdwcaTYA9IlLnylpk8FG2ks0kHRrJtBLZbgS7FuDsWqOiigDxLvWtsnImiUe
-lfeH01qBviaYc8qWZn1BiqaxGNq9LSmHu0A13NBi2GX89LrOGEVDZqXZiQZd+1QU
-Bu4Hr+jdr519gDst+55/AgMBAAEwDQYJKoZIhvcNAQELBQADggIBAFOcPwpCiMHB
-MrGqQZ10FQrXMgTu1LBF5/h+21mYBGLawaqJJ6vXjaTMp/Jnxet6gDEsoYoJtd0K
-Pk6dwdduPcauv+Enp8LFoBBJBGHJFuNQEt1GumFoy5tECjmIjfA8c4gBo9fQdiMY
-yUNVWBuKc1Cds545zbzb8kfDzjDi/mD6piyKJ7xoq8FBDyotvJBUoy+QN60rQTgB
-qLqLEUmw1+KrrYbJ76oUH/7+icIXqf9DcSr5kL/bUiQ1GPaiF/plv7nRGvGeMLB5
-dm6Uv2LH1QDxp8rdCTjl08oCTBrCLwHfR2gOxtyeHmSTjDumO7HqXKx83yz2QkEf
-0UJSBsxKygPpPmiXqBxJwEb1j3gJ3njLJjV/piz1kt6x3rFiueFWvyF7MMKZYxwT
-L4sJbHyutqtaD6zmBVmzfmOuLiRDoZ9ewu9Y/d7h+iAEJ4Mb6mfROSM95I+tYYyH
-RNygDVJ3Kyv0rJ7pr0EGMqWw8s/Bvr2DiG5IZlv5IhcOY8Sbp8MfIFhprK5BlJNZ
-sHbdRv3M5wSCUyKD2OzFI6mFHKCw0YaTFGmb9FQROgie5K4vTlFx+rlF5ALDvBS/
-82r19fQGqE+n4dwa5zql4KkPRsVkWn4nDrEtCTIt7a9ZcvCu/1DldI2eS80Tsqbm
-/CZ/HYvCfP8aJ6/Q8BgLBsaWSOzLmmzE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 -----END CERTIFICATE-----

tools/postgres/certs/postgres.server.csr

@@ -1,16 +1,16 @@
 -----BEGIN CERTIFICATE REQUEST-----
 MIICizCCAXMCAQAwRjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQK
 DAtNeU9yZywgSW5jLjEUMBIGA1UEAwwLa3VtYS1zZXJ2ZXIwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQDZFVjfQTg9kTY2xBIFGnMFwSxdEEAM4i/WG0XN
-Be2ogTwb1STBlt7HKFMQt1YgjJNtv9ePPmQ/DTqfE9/6ru6Q1PlLxofWGnDdTkrr
-RbFzK2m+zHQKpIzCaaADmzIVerm54eGHF0aMV4XyCHGQG6VwltyIHrnWgKNPOk6d
-LdX9BeKZMFy5CYrnYdbmvmCV4Axs/m++MdwcaTYA9IlLnylpk8FG2ks0kHRrJtBL
-ZbgS7FuDsWqOiigDxLvWtsnImiUelfeH01qBviaYc8qWZn1BiqaxGNq9LSmHu0A1
-3NBi2GX89LrOGEVDZqXZiQZd+1QUBu4Hr+jdr519gDst+55/AgMBAAGgADANBgkq
-hkiG9w0BAQsFAAOCAQEAOhoLVW+HwTKwaY8RxLyXJUZZckVpffsbu3LDY7TjCy15
-LindTXAZbbIe4g8Ne8SeA+pLEZsvjUdFvxrAm+nIYOHDlIxslPns8azHl9K/emky
-cG2I/0iKqZMNf8xjPojxWmFkqUP9pNkbLWZRKRVO3watKCoxqyFIqusORfwOkdVk
-2K7qjg6Dn682rnKxLrtjUM2ZQHsU8MRNNr7lnxAJR21+8cULSJhFFTO1J2MVP33v
-B9psjxD5IUmxFZzZa8nqWrJW1Hk82YNHKyeW82gn8e/149YLaRHiMzn/3vZomibD
-5YPuRkiSxXk0UqX0GtG1FYHhLTItZ3YJINDn4d0nZg==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 -----END CERTIFICATE REQUEST-----

tools/postgres/certs/postgres.server.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEA2RVY30E4PZE2NsQSBRpzBcEsXRBADOIv1htFzQXtqIE8G9Uk
-wZbexyhTELdWIIyTbb/Xjz5kPw06nxPf+q7ukNT5S8aH1hpw3U5K60Wxcytpvsx0
-CqSMwmmgA5syFXq5ueHhhxdGjFeF8ghxkBulcJbciB651oCjTzpOnS3V/QXimTBc
-uQmK52HW5r5gleAMbP5vvjHcHGk2APSJS58paZPBRtpLNJB0aybQS2W4Euxbg7Fq
-joooA8S71rbJyJolHpX3h9Nagb4mmHPKlmZ9QYqmsRjavS0ph7tANdzQYthl/PS6
-zhhFQ2al2YkGXftUFAbuB6/o3a+dfYA7LfuefwIDAQABAoIBAQDTmRxEmaUBVi8b
-GOlbshlWDaJ5oCJerIbmUzUpkFLEwhveIVevn6jNRgAZtisslPoLq0ipZq5+Sx3N
-+6iCCMufvwi1FPJI/wLupKcgR5Gdaj6r7UxbJ2PRCPYhLcCW8UZh6sxTSpvIpnN4
-pURUrK4JXfPedty8Oi11R6djTE9eTfehlQIjT5bHwrg2p8jHoNyEc3Cr1IHLxIHv
-+TwULo2dacqH0NjV4NvE4lKxKafbEJ6g1Wrcc++mr+f04mZtbnKaMkzajTs18Qfw
-/X8TROkJ4h09076SoHRawo0MUvDIS8S0ukwttuvmLt1C2xl2R+Kw8zKrmhsG3st2
-NgeUrcpJAoGBAO731GiKRsFcxus/NScMP0ZIGrS1sa/eIUEIqrwLAdlezE4XbJ04
-rDwE2EzBwNnfpqibaAMMsMYTE34EHur5btEP99jkkH7K6HPg/7N/Fgfwntj6OrjC
-6aEkI8qi6H7idT46qEbyPjl1NLLVJKcUxc4rlDk0RFivg+oa6RwseieTAoGBAOiO
-NomSNwPYLOZqSkgv7DOgXQL5UNOHe+YPaynhA6PGIDYRtza4I4Px9Dg5Q+IxXOES
-RtEVhDtZltNn1VPOtoDEAd96FZItQQSkD0ZEidb4cq+VIQgRZARqLyyULTtU0vmn
-v8+6xROgqM30D23Sz8EDuiw5g9BT5ccCdB7xY+jlAoGAF1nYQ67fYx2xwmMWyo4D
-0NZS5b2rc0f9b+Fs7ZsVvyvoQuk/D83t5p+Ck12Lfr7ABlHJRCMFUxWiHfpBGyzs
-izlIOsV66SjithASbHPKr1Pv8bvh6RQCyGBDrxVkKqHuWvpYXzZkpjCxyZfSURFS
-kubnQP++ffwIo+OlS7984EkCgYEAlCmXAYsQVfiykpKBhQBTQokW+UASiNI209pa
-8jGT+hHOj+Q1kD09E2FhsTh60W+VtyfHyook1xM7DrGGroByshMvBkxn1dvTIrvL
-p38fOsDLgKZIhzVdPZrRN1uofbaLO9fuUtCxotGm+qBV/ChliJlxUZ/LJT1ulZ4w
-kU5F0ykCgYBw1+ovhy2Gd8TqnIyoC74Y3BAtp95HxgGRPsQyjEIve8t4AtA7t1th
-OvoEcmfIY+0piMZxpIlpb4MdKUQ/yQdyfkRE6Y1NDzaf1MkKoYWlVOUNRpFsDyNX
-QihwexZ8+/+b+bEKXAKAEz/nSE90oLWDiVvX7JS5Wj3hj5xgHb+xOw==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 -----END RSA PRIVATE KEY-----