PROJQUAY-11215: feat: add TLS support for operator-managed PostgreSQL - #1277

Merged

openshift-merge-bot[bot] merged 20 commits into

quay:masterfrom

bcaton85:PROJQUAY-11215-postgres-tls

Jun 18, 2026

Commits on Jun 17, 2026

apis: add TLSOverride to component overrides (PROJQUAY-11215)

bcaton85
and
claude
committed
cc9bf0a
kustomize: add PostgreSQL TLS certificate generation (PROJQUAY-11215)

bcaton85
and
claude
committed
cc9aa4d
kustomize: add TLS params to DB connection strings (PROJQUAY-11215)

bcaton85
and
claude
committed
ad14dab
middleware: inject TLS volumes and config for managed postgres (PROJQUAY-11215)

bcaton85
and
claude
committed
821aeff
controller: validate user-provided PostgreSQL TLS secrets (PROJQUAY-11215)

bcaton85
and
claude
committed
dd539f4
test(e2e): add Chainsaw tests for PostgreSQL TLS (PROJQUAY-11215)

bcaton85
and
claude
committed
8c1f2e4
kustomize: guard DB_URI TLS param stripping for managed postgres only (PROJQUAY-11215)

bcaton85
and
claude
committed
0d2b410
api: validate tls.secretRef.name is non-empty (PROJQUAY-11215)

bcaton85
and
claude
committed
c9240d8
test: replace PEM private key literals with plain strings (PROJQUAY-11215)

bcaton85
and
claude
committed
24bf997
controller: validate ca.crt as PEM and X509 in TLS secret checks (PROJQUAY-11215)

bcaton85
and
claude
committed
dabb800
middleware: make SSL directive cleanup whitespace-resilient (PROJQUAY-11215)

bcaton85
and
claude
committed
1b4256b
middleware: fix TLS cert permissions for non-root postgres on KinD (PROJQUAY-11215)

bcaton85
and
claude
committed
7c026fe
controller: auto-detect OpenShift service CA for postgres TLS (PROJQUAY-11215)

bcaton85
and
claude
committed
04c6d8e
clean up connection string if user provides no TLS component configuration
bcaton85
committed
5082e84
middleware: only set fsGroup on non-OpenShift clusters (PROJQUAY-11215)

bcaton85
and
claude
committed
0de8c32
test: make postgres TLS E2E assertions platform-aware (PROJQUAY-11215)

bcaton85
and
claude
committed
85be7fc
kustomize: address review feedback on cert generation and DB_URI (PROJQUAY-11215)

bcaton85
and
claude
committed
586f3c1
test: fix platform detection in postgres TLS E2E test (PROJQUAY-11215)

bcaton85
and
claude
committed
6c8402c
test: make postgres TLS mixed/lifecycle E2E tests platform-aware (PROJQUAY-11215)

bcaton85
and
claude
committed
1a2a88c

Commits on Jun 18, 2026

Adding additional conditions to chainsaw tests
bcaton85
committed
bf34bab

Navigation Menu

Uh oh!

PROJQUAY-11215: feat: add TLS support for operator-managed PostgreSQL - #1277

PROJQUAY-11215: feat: add TLS support for operator-managed PostgreSQL#1277
openshift-merge-bot[bot] merged 20 commits into
quay:masterfrom
bcaton85:PROJQUAY-11215-postgres-tls

Commits on Jun 17, 2026

apis: add TLSOverride to component overrides (PROJQUAY-11215)

kustomize: add PostgreSQL TLS certificate generation (PROJQUAY-11215)

kustomize: add TLS params to DB connection strings (PROJQUAY-11215)

middleware: inject TLS volumes and config for managed postgres (PROJQUAY-11215)

controller: validate user-provided PostgreSQL TLS secrets (PROJQUAY-11215)

test(e2e): add Chainsaw tests for PostgreSQL TLS (PROJQUAY-11215)

kustomize: guard DB_URI TLS param stripping for managed postgres only (PROJQUAY-11215)

api: validate tls.secretRef.name is non-empty (PROJQUAY-11215)

test: replace PEM private key literals with plain strings (PROJQUAY-11215)

controller: validate ca.crt as PEM and X509 in TLS secret checks (PROJQUAY-11215)

middleware: make SSL directive cleanup whitespace-resilient (PROJQUAY-11215)

middleware: fix TLS cert permissions for non-root postgres on KinD (PROJQUAY-11215)

controller: auto-detect OpenShift service CA for postgres TLS (PROJQUAY-11215)

clean up connection string if user provides no TLS component configuration

middleware: only set fsGroup on non-OpenShift clusters (PROJQUAY-11215)

test: make postgres TLS E2E assertions platform-aware (PROJQUAY-11215)

kustomize: address review feedback on cert generation and DB_URI (PROJQUAY-11215)

test: fix platform detection in postgres TLS E2E test (PROJQUAY-11215)

test: make postgres TLS mixed/lifecycle E2E tests platform-aware (PROJQUAY-11215)

Commits on Jun 18, 2026

Adding additional conditions to chainsaw tests