Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow to define SSL keys for configuration and chown then for proper usage #205

Open
wants to merge 11 commits into
base: master
Choose a base branch
from

Conversation

iranzo
Copy link

@iranzo iranzo commented Dec 14, 2018

Allow to define ssl settings via environment variable and check them on /pg-ssl secret in kubernetes so that keys are copied and chowned to end folder:

CONFIGS: ssl:on,ssl_cert_file:'/etc/postgresql/server.crt',ssl_key_file:'/etc/postgresql/server.key'
And provide a secret like:

apiVersion: v1
data:
server.crt: >-
YOURSECRET
server.key: >-
YOURSECRET
kind: Secret
metadata:
name: postgres
namespace: YOURNAMESPACE
selfLink: /api/v1/namespaces/quay-enterprise/secrets/postgres
type: Opaque
That must be mounted on /pg-ssl

@paunin
Copy link
Owner

paunin commented Apr 27, 2019

Need some tests if you go for SSL.
Also better to have some examples of usage.

@iranzo
Copy link
Author

iranzo commented Apr 30, 2019

Blog post is pending, I'll update once it is finalized and released

@cooktheryan
Copy link

@paunin is there any way we can help with the testing to get this merged

@paunin
Copy link
Owner

paunin commented May 28, 2019

@cooktheryan Yes. Add some

  • documentation about usage of the feature
  • tests that feature works as designed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants