Expose server_tls_sslmode as configurable

[krunchyklown]

As we use Postgresql servers that have sslmode=enable, we need to be able to deploy this helm chart with server_tls_sslmode enabled

The current default is disabled, and not configurable

This should be something like in _pgbouncer.ini.tpl:

diff --git a/pgbouncer/templates/_pgbouncer.ini.tpl b/pgbouncer/templates/_pgbouncer.ini.tpl
index d49c2d6..ed6b4b8 100644
--- a/pgbouncer/templates/_pgbouncer.ini.tpl
+++ b/pgbouncer/templates/_pgbouncer.ini.tpl
@@ -36,7 +36,7 @@ unix_socket_dir = var/run/postgresql
;client_tls_protocols = all
;client_tls_dheparams = auto
;client_tls_ecdhcurve = auto
-;server_tls_sslmode = disable
+server_tls_sslmode = {{ .Values.serverTlsSslmode }}
;server_tls_ca_file =
;server_tls_key_file =
;server_tls_cert_file =

[teejaded]

what about using customSettings?

customSettings:
  server_tls_sslmode: require

[mattmessinger]

@krunchyklown can you please confirm that @teejaded 's suggestion solves your use-case?

[gameiro]

Hi, guys I have the same issue with Azure postgresql DB it requires the cert so it can access the server. I am thinking if we could link existing secret or configmap with the cert and would then set in value path for the cert in the container.