sassoftware / viya4-deployment

This project contains Ansible code that creates a baseline in an existing Kubernetes environment for use with the SAS Viya Platform, generates the manifest for an order, and then can also deploy that order into the Kubernetes environment specified.
Apache License 2.0
69 stars 62 forks source link

About Azure Database for PostgreSQL – Flexible Server #561

Open TakeshiMifune opened 2 weeks ago

TakeshiMifune commented 2 weeks ago

Is your feature request related to a problem? Please describe.

Hello Team,

This is Takeshi Mifune. We are currently using SAS Viya on Azure and have received the following communication.

In July 2024, we’ll begin updating Azure Database for PostgreSQL Flexible Server to use TLS certificates from Microsoft RSA Root Certificate Authority 2017. If your apps use certificate pinning, you’ll need to update your trusted root store to accept this root CA in addition to existing DigiCert Global Root CA. •If your applications take advantage of verify-ca or verify-full as value of sslmode parameter in the database client connectivity they may be affected by this change and need to follow below directions to add new certificates to certificate store to maintain connectivity. •If your connection string includes sslmode=disable, sslmode=allow, sslmode=prefer, or sslmode=require, you don’t need to update certificates.

'[question] SAS Viya version:LTS 2024.03 External PstgresSQL is created using "viya4-iac-azure". (It is created with the following contents in "terraform.tfvars".) postgres_servers = { default = { sku_name = "GP_Standard_D4ds_v4" storage_mb = 131072 connectivity_method = "private" administrator_password = "" postgresql_configurations = [ { name = "max_connections" value = "1024" } ] }, } '==========

  1. Are we using verify-ca or verify-full for the value of the sslmode parameter?

  2. Please let me know if there is a way to verify the value of the sslmode parameter.

Best Regards, Takeshi

Describe the solution you'd like

I want to check if the Azure Database for PostgreSQL – Flexible Server needs to renew the certificate.

Describe alternatives you've considered

No response

Additional context

No response

Code of Conduct