ansible/awx-operator

Use custom CA for external Postgres encrypted

Open

#1,134 建立於 2022年11月25日

在 GitHub 查看
 (1 留言) (1 反應) (0 負責人)Jinja (712 fork)auto 404
communityhelp wanted

倉庫指標

Star
 (1,488 star)
PR 合併指標
 (PR 指標待抓取)

描述

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

Hi all,

I would like to connect AWX to external Postgres with ssl_mode: require and internal certificate authority. Here my config files :

apiVersion: v1
kind: Secret
metadata:
  name: awx-postgres-configuration
  namespace: awx-operator
stringData:
  host: default-db-cluster
  database: awx
  username: postgres
  password: ****
  sslmode: require
  type: unmanaged
type: Opaque
---
spec:
  ...
  postgres_configuration_secret: awx-postgres-configuration

I use bundle_cacert_secret to mount my internal CA.

---
spec:
  ...
  bundle_cacert_secret: ca-custom-certs

But it's not possible to override the file credentials.py with sslrootcert value.

It will be nice to add sslrootcert attribute to have :

apiVersion: v1
kind: Secret
metadata:
 name: awx-postgres-configuration
 namespace: awx-operator
stringData:
 host: default-db-cluster
 database: awx
 username: postgres
 password: ****
 sslmode: require
 sslrootcert: /etc/pki/ca-trust/source/anchors/bundle-ca.crt
 type: unmanaged
type: Opaque

Thanks.

貢獻者指南