Skip to content

Consider enabling advanced SSL connections options for the database backend

Summary

We appear to limit SSL options for PostgreSQL to the following:

  • global.psql.ssl.secret
  • global.psql.ssl.serverCA
  • global.psql.ssl.clientCertificate
  • global.psql.ssl.clientKey

But a few more options may be necessary for some users. Examples minimally consist of the following:

  • sslmode
  • sslcompression

Utilize this issue to determine other ssl specific options should be exposed for users of our helm charts.

This issue spawned from an investigation into the configuration for GitLab.com: gitlab-com/gl-infra/delivery#632 (closed)