Postgres-operator: Add non ssl pgbouncer mode

Created on 23 Jun 2020  路  5Comments  路  Source: zalando/postgres-operator

I can't connect to DB(sslmode=disable) using "-pooler" service

image

But i can connect to db directly

enhancement

Most helpful comment

@FxKu, could you point me to your pooler Dockerfile (and related scripts like entrypoint and such)? I tried searching on the Zalando's repositories, but I couldn't find anything specific to the pooler. Thank you

All 5 comments

All connections are encrypted by default, but check #868.

@FxKu But why i can connect directly to pg with sslmode=disable, but can't with pooler service. Do you mean, that all pgbouncer connections with ssl by default?

I tested ALLOW_NOSSL, but it doesn't work with pooler. I still can connect without tls to pg directly and can't using pooler.

Helm setup

configKubernetes:
  pod_environment_configmap: "{{ release.namespace }}/postgresql-pod-environment"

Configmap

apiVersion: v1
kind: ConfigMap
metadata:
  name: postgresql-pod-environment
  namespace: "{{ release.namespace }}"
data:
  ALLOW_NOSSL: "true"

image
image
image

@sergeyshaykhullin sorry for the delay. Checked our pooler image and SSL is hard coded there. So you could either use your own pooler image or stick to application-side connection pooling.

@FxKu, could you point me to your pooler Dockerfile (and related scripts like entrypoint and such)? I tried searching on the Zalando's repositories, but I couldn't find anything specific to the pooler. Thank you

Was this page helpful?
0 / 5 - 0 ratings

Related issues

michailbrynard picture michailbrynard  路  6Comments

aurelienmarie picture aurelienmarie  路  5Comments

valer-cara picture valer-cara  路  5Comments

GeertJohan picture GeertJohan  路  7Comments

avaczi picture avaczi  路  3Comments