openstack/openstack-helm-infra
Code Issues Proposed changes

Merge "Add default reject rule at the end in Postgres pg_hba.conf to ensure all connections must be explicitly allowed."

Browse Source
This commit is contained in:
Zuul 2020-09-10 02:52:09 +00:00 committed by Gerrit Code Review
commit eab20578ef
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
postgresql/values.yaml
View File

@ -256,8 +256,11 @@ conf:
debug: false
pg_hba: |
host all all 127.0.0.1/32 trust
host all all 0.0.0.0/0 md5
host all postgresql-admin 0.0.0.0/0 md5
host all postgres 0.0.0.0/0 md5
host all psql_exporter 0.0.0.0/0 md5
local all all trust
host all all 0.0.0.0/0 reject
postgresql:
archive_mode: 'off'