ansible/awx-operator

Use custom CA for external Postgres encrypted

Open

#1,134 opened on Nov 25, 2022

View on GitHub
 (1 comment) (1 reaction) (0 assignees)Jinja (712 forks)auto 404
communityhelp wanted

Repository metrics

Stars
 (1,488 stars)
PR merge metrics
 (PR metrics pending)

Description

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

Hi all,

I would like to connect AWX to external Postgres with ssl_mode: require and internal certificate authority. Here my config files :

apiVersion: v1
kind: Secret
metadata:
  name: awx-postgres-configuration
  namespace: awx-operator
stringData:
  host: default-db-cluster
  database: awx
  username: postgres
  password: ****
  sslmode: require
  type: unmanaged
type: Opaque
---
spec:
  ...
  postgres_configuration_secret: awx-postgres-configuration

I use bundle_cacert_secret to mount my internal CA.

---
spec:
  ...
  bundle_cacert_secret: ca-custom-certs

But it's not possible to override the file credentials.py with sslrootcert value.

It will be nice to add sslrootcert attribute to have :

apiVersion: v1
kind: Secret
metadata:
 name: awx-postgres-configuration
 namespace: awx-operator
stringData:
 host: default-db-cluster
 database: awx
 username: postgres
 password: ****
 sslmode: require
 sslrootcert: /etc/pki/ca-trust/source/anchors/bundle-ca.crt
 type: unmanaged
type: Opaque

Thanks.

Contributor guide