You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/content/architecture/user-management.md
+6-3Lines changed: 6 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,10 +20,13 @@ When you create a Postgres cluster with PGO and do not specify any additional us
20
20
-`user`: The name of the user account.
21
21
-`password`: The password for the user account.
22
22
-`dbname`: The name of the database that the user has access to by default.
23
-
-`host`: The name of the host of the database. This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the primary Postgres instance.
23
+
-`host`: The name of the host of the database.
24
+
This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the primary Postgres instance.
24
25
-`port`: The port that the database is listening on.
25
-
-`uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING) that provides all the information for logging into the Postgres database.
26
-
-`jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/head/connect.html) that provides all the information for logging into the Postgres database via the JDBC driver.
26
+
-`uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING)
27
+
that provides all the information for logging into the Postgres database.
28
+
-`jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/use/)
29
+
that provides all the information for logging into the Postgres database via the JDBC driver.
27
30
28
31
You can see this default behavior in the [connect to a cluster]({{< relref "tutorial/connect-cluster.md" >}}) portion of the tutorial.
Copy file name to clipboardExpand all lines: docs/content/quickstart/_index.md
+12-6Lines changed: 12 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -78,17 +78,23 @@ Within this Secret are attributes that provide information to let you log into t
78
78
-`user`: The name of the user account.
79
79
-`password`: The password for the user account.
80
80
-`dbname`: The name of the database that the user has access to by default.
81
-
-`host`: The name of the host of the database. This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the primary Postgres instance.
81
+
-`host`: The name of the host of the database.
82
+
This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the primary Postgres instance.
82
83
-`port`: The port that the database is listening on.
83
-
-`uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING) that provides all the information for logging into the Postgres database.
84
-
-`jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/head/connect.html) that provides all the information for logging into the Postgres database via the JDBC driver.
84
+
-`uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING)
85
+
that provides all the information for logging into the Postgres database.
86
+
-`jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/use/)
87
+
that provides all the information for logging into the Postgres database via the JDBC driver.
85
88
86
89
If you deploy your Postgres cluster with the [PgBouncer](https://www.pgbouncer.org/) connection pooler, there are additional values that are populated in the user Secret, including:
87
90
88
-
-`pgbouncer-host`: The name of the host of the PgBouncer connection pooler. This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the PgBouncer connection pooler.
91
+
-`pgbouncer-host`: The name of the host of the PgBouncer connection pooler.
92
+
This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the PgBouncer connection pooler.
89
93
-`pgbouncer-port`: The port that the PgBouncer connection pooler is listening on.
90
-
-`pgbouncer-uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING) that provides all the information for logging into the Postgres database via the PgBouncer connection pooler.
91
-
-`pgbouncer-jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/head/connect.html) that provides all the information for logging into the Postgres database via the PgBouncer connection pooler using the JDBC driver.
94
+
-`pgbouncer-uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING)
95
+
that provides all the information for logging into the Postgres database via the PgBouncer connection pooler.
96
+
-`pgbouncer-jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/use/)
97
+
that provides all the information for logging into the Postgres database via the PgBouncer connection pooler using the JDBC driver.
92
98
93
99
Note that **all connections use TLS**. PGO sets up a PKI for your Postgres clusters. You can also choose to bring your own PKI / certificate authority; this is covered later in the documentation.
Copy file name to clipboardExpand all lines: docs/content/tutorial/connect-cluster.md
+6-3Lines changed: 6 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,10 +33,13 @@ When your Postgres cluster is initialized, PGO will bootstrap a database and Pos
33
33
-`user`: The name of the user account.
34
34
-`password`: The password for the user account.
35
35
-`dbname`: The name of the database that the user has access to by default.
36
-
-`host`: The name of the host of the database. This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the primary Postgres instance.
36
+
-`host`: The name of the host of the database.
37
+
This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the primary Postgres instance.
37
38
-`port`: The port that the database is listening on.
38
-
-`uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING) that provides all the information for logging into the Postgres database.
39
-
-`jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/head/connect.html) that provides all the information for logging into the Postgres database via the JDBC driver.
39
+
-`uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING)
40
+
that provides all the information for logging into the Postgres database.
41
+
-`jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/use/) that provides
42
+
all the information for logging into the Postgres database via the JDBC driver.
40
43
41
44
All connections are over TLS. PGO provides its own certificate authority (CA) to allow you to securely connect your applications to your Postgres clusters. This allows you to use the [`verify-full` "SSL mode"](https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS) of Postgres, which provides eavesdropping protection and prevents MITM attacks. You can also choose to bring your own CA, which is described later in this tutorial in the [Customize Cluster]({{< relref "./customize-cluster.md" >}}) section.
You should see that there are several new attributes included in this Secret that allow for you to connect to your Postgres instance via the connection pooler:
47
47
48
-
-`pgbouncer-host`: The name of the host of the PgBouncer connection pooler. This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the PgBouncer connection pooler.
48
+
-`pgbouncer-host`: The name of the host of the PgBouncer connection pooler.
49
+
This references the [Service](https://kubernetes.io/docs/concepts/services-networking/service/) of the PgBouncer connection pooler.
49
50
-`pgbouncer-port`: The port that the PgBouncer connection pooler is listening on.
50
-
-`pgbouncer-uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING) that provides all the information for logging into the Postgres database via the PgBouncer connection pooler.
51
-
-`pgbouncer-jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/head/connect.html) that provides all the information for logging into the Postgres database via the PgBouncer connection pooler using the JDBC driver. Note that by default, the connection string disable JDBC managing prepared transactions for [optimal use with PgBouncer](https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling).
51
+
-`pgbouncer-uri`: A [PostgreSQL connection URI](https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING)
52
+
that provides all the information for logging into the Postgres database via the PgBouncer connection pooler.
53
+
-`pgbouncer-jdbc-uri`: A [PostgreSQL JDBC connection URI](https://jdbc.postgresql.org/documentation/use/) that provides
54
+
all the information for logging into the Postgres database via the PgBouncer connection pooler using the JDBC driver.
55
+
Note that by default, the connection string disable JDBC managing prepared transactions for
56
+
[optimal use with PgBouncer](https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling).
52
57
53
58
Open up the file in `kustomize/keycloak/keycloak.yaml`. Update the `DB_ADDR` and `DB_PORT` values to be the following:
0 commit comments