The PostgreSQL server managed by *Postgres Operator* uses a self-signed certificate by default. In order to enable full validation of the server certificate, we need to use a certificate signed by a known CA that the clients can trust. To that end, I have added a *cert-manager* Issuer specifically for PostgreSQL. The CA certificate is also managed by *cert-manager*; it is self-signed and needs to be distributed to clients out-of-band. |
||
---|---|---|
.. | ||
ui | ||
.gitignore | ||
api-service.yaml | ||
certificate.yaml | ||
default-cluster.yaml | ||
kustomization.yaml | ||
namespace.yaml | ||
operator-service-account-rbac.yaml | ||
operatorconfiguration.crd.yaml | ||
pod.env | ||
postgres-operator.yaml | ||
postgresql-operator-configuration.yaml | ||
postgresteam.crd.yaml | ||
secrets.yaml |