Skip to content

Easy TLS#87

Merged
levkk merged 3 commits intomainfrom
levkk-tls
Apr 21, 2026
Merged

Easy TLS#87
levkk merged 3 commits intomainfrom
levkk-tls

Conversation

@levkk
Copy link
Copy Markdown
Contributor

@levkk levkk commented Apr 21, 2026 •
edited
Loading

Add support for easily deploying TLS on AWS RDS.

client -> pgdog
Using self-signed certs, generated on chart installation / upgrade.

tlsGenerateSelfSignedCert: true
tlsClientRequired: true # optional: force clients to use TLS or disconnect

pgdog -> rds
Bundling the RDS cert bundle into the chart. It's installed and mounted into the container on boot.

rdsCertificateBundle:
  enabled: true
tlsVerify: "verify_full" # optional: force pgdog to verify RDS cert using the bundle and force-enable TLS

@levkk levkk changed the title TLS Easy TLS Apr 21, 2026
@levkk levkk marked this pull request as ready for review April 21, 2026 16:39
sunil-2000
sunil-2000 approved these changes Apr 21, 2026
View reviewed changes
Copy link
Copy Markdown

@sunil-2000 sunil-2000 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@levkk levkk merged commit d61a0b1 into main Apr 21, 2026
2 checks passed
@levkk levkk deleted the levkk-tls branch April 21, 2026 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@sunil-2000 sunil-2000 sunil-2000 approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@levkk @sunil-2000