ansible/awx-operator

Use custom CA for external Postgres encrypted

Open

#1134 aperta il 25 nov 2022

Vedi su GitHub
 (1 commento) (1 reazione) (0 assegnatari)Jinja (712 fork)auto 404
communityhelp wanted

Metriche repository

Star
 (1488 star)
Metriche merge PR
 (Metriche PR in attesa)

Descrizione

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

Hi all,

I would like to connect AWX to external Postgres with ssl_mode: require and internal certificate authority. Here my config files :

apiVersion: v1
kind: Secret
metadata:
  name: awx-postgres-configuration
  namespace: awx-operator
stringData:
  host: default-db-cluster
  database: awx
  username: postgres
  password: ****
  sslmode: require
  type: unmanaged
type: Opaque
---
spec:
  ...
  postgres_configuration_secret: awx-postgres-configuration

I use bundle_cacert_secret to mount my internal CA.

---
spec:
  ...
  bundle_cacert_secret: ca-custom-certs

But it's not possible to override the file credentials.py with sslrootcert value.

It will be nice to add sslrootcert attribute to have :

apiVersion: v1
kind: Secret
metadata:
 name: awx-postgres-configuration
 namespace: awx-operator
stringData:
 host: default-db-cluster
 database: awx
 username: postgres
 password: ****
 sslmode: require
 sslrootcert: /etc/pki/ca-trust/source/anchors/bundle-ca.crt
 type: unmanaged
type: Opaque

Thanks.

Guida contributor