search

pg-spot-ops / pg-spot-operator

Maintains stateful Postgres on Spot VMs
Other
2 stars 0 forks source link

A CLI flag to set pg_hba.conf #6

Open kmoppel opened 2 weeks ago

kmoppel commented 2 weeks ago

To enable some easy security in CLI mode, a la something like:

... --pg-hba-lines "host all all $(curl -sL whatismyip.akamai.com)/32 scram-sha-256,host all all samenet scram-sha-256"
scorpevans commented 2 weeks ago

@kmoppel I think it would be better/cleaner to have something like --pg-hba-file my_local_hba.conf, or?

kmoppel commented 2 weeks ago

Could have as an option as well indeed...but given main use case will be of more casual type, and want to have a "contained / in-the-box" UX the literal option is just fine. More advanced / permanent instances will probably use the full YAML manifest anyways