container enable sslmode for PostgreSQL (CO-2689)

Internet2 · Jan 22, 2024 · d8bec8c · d8bec8c
1 parent d791f82
commit d8bec8c
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/container/registry/base/comanage_utils.sh b/container/registry/base/comanage_utils.sh
@@ -135,6 +135,7 @@ function comanage_utils::consume_injected_environment() {
         COMANAGE_REGISTRY_DATABASE
         COMANAGE_REGISTRY_DATABASE_HOST
         COMANAGE_REGISTRY_DATABASE_PORT
+        COMANAGE_REGISTRY_DATABASE_POSTGRES_SSLMODE
         COMANAGE_REGISTRY_DATABASE_USER
         COMANAGE_REGISTRY_DATABASE_USER_PASSWORD
         COMANAGE_REGISTRY_EMAIL_FROM
@@ -502,6 +503,11 @@ EOF
         php_string+="'port' => ${COMANAGE_REGISTRY_DATABASE_PORT},"
     fi
 
+    if [[ "${COMANAGE_REGISTRY_DATABASE_POSTGRES_SSLMODE}"  =~ ^(disable|allow|prefer|require|verify-ca|verify-full)$ ]]; then
+        php_string+=$'\n    '
+        php_string+="'sslmode' => '${COMANAGE_REGISTRY_DATABASE_POSTGRES_SSLMODE}',"
+    fi
+
     php_string+=$'\n    );\n}\n';
 
     printf "%s" "$php_string" > $database_config