ansible/awx-operator

Give a way to connect to external postgres database with client SSL credentials

Open

#1,088 opened on Oct 15, 2022

View on GitHub
 (8 comments) (1 reaction) (0 assignees)Jinja (712 forks)auto 404
help wantedneeds_triage

Repository metrics

Stars
 (1,488 stars)
PR merge metrics
 (PR metrics pending)

Description

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

I haven't found a way to specify a ssl private key and certificate in order to connect to an external database.

My use case is to use a cloud sql instance hosted on GCP and to enforce the use of SSL to connect to the database. Doing so disables the possibility to connect with a username and password.

I have enabled the option on a running awx instance deployed with awx-operator. AWX was then unable to connect to the database.

Contributor guide

Research direction
Investigate the current database connection handling in the AWX operator, specifically the AWX custom resource definition and the logic that builds the database URL. Look for how SSL mode is specified and how to add client certificate and key fields. Check Kubernetes documentation for mounting secrets into pods and reference examples from other operators that support SSL connections to external databases.
Tech stack
gopostgresql
Domain
backenddatabaseauthentication
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitGoKubernetes
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65