openstack/openstack-helm-infra
Code Issues Proposed changes

postgresql: Revert "Add default reject rule ..."

Browse Source 
This reverts commit 982e3754a5755cc227552b6f1fcc195e8793589c.
"Add default reject rule end in Postgres pg_hba.conf to ensure all
connections must be explicitly allowed."

The original commit introduced a breaking change when installing with
the chart defaults - before, all remote connections with md5 auth were
allowed, and after the change, only explicit users are allowed.

This is fully overridable, but the original defaults are more
conservative.

Change-Id: Ib297e480bccd3ac7c0cf15985b3def2c8b3e889e
This commit is contained in:
Phil Sphicas 2020-10-23 17:37:28 +00:00
parent c43331d67a
commit 20288319af
2 changed files with 2 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
postgresql/Chart.yaml
View File

@ -15,7 +15,7 @@ apiVersion: v1
appVersion: v9.6 appVersion: v9.6
description: OpenStack-Helm PostgreSQL description: OpenStack-Helm PostgreSQL
name: postgresql name: postgresql
version: 0.1.5 version: 0.1.6
home: https://www.postgresql.org home: https://www.postgresql.org
sources: sources:
- https://github.com/postgres/postgres - https://github.com/postgres/postgres

5
postgresql/values.yaml
View File

@ -277,11 +277,8 @@ conf:
debug: false debug: false
pg_hba: | pg_hba: |
host all all 127.0.0.1/32 trust host all all 127.0.0.1/32 trust
host all postgresql-admin 0.0.0.0/0 md5 host all all 0.0.0.0/0 md5
host all postgres 0.0.0.0/0 md5
host all psql_exporter 0.0.0.0/0 md5
local all all trust local all all trust
host all all 0.0.0.0/0 reject
postgresql: postgresql:
archive_mode: 'on' archive_mode: 'on'