Postgres TLS

[loopingrage]

Is your feature request related to a problem? Please describe.

There doesn't seem to be a way to configure TLS options for Postgres via the helm chart. The underlying server supports it so just seems like it needs to be surfaced in values.

Describe the solution you'd like

Ability to configure Postgres TLS options via Temporal Helm Chart.

[atapio]

Looks like there actually is a way to configure PostgreSQL TLS by adding tls.enabled: true to both SQL persistence configurations:

server:
  config:
    persistence:
      default:
        driver: "sql"

        sql:
          driver: "postgres"
          host: _HOST_
          port: 5432
          database: temporal
          user: _USERNAME_
          password: _PASSWORD_
          maxConns: 20
          maxConnLifetime: "1h"
          tls:
            enabled: true

Other TLS options seem to be supported too: https://docs.temporal.io/docs/server-configuration#persistence

[petergardfjall]

What's the status on this? Is it still not possible to configure cert-based authentication for PostgreSQL through the helm chart?

[debugger24]

This is not used in admin-tools update schema.