Enabled TLS encryption for PostgreSQL and PgBouncer

[klention]

Enabled TLS encryption for PostgreSQL and PGBouncer (related issue: #361)

Generate a Self Signed OpenSSL certificate.

[vitabaks]

@klention Thank you for your contribution! Please consider my comments.

[klention]

@vitabaks, I updated the scrips as suggested.

Not sure though why tests failed for debian and ubuntu.

[vitabaks]

fatal: [10.172.0.22]: FAILED! => {"changed": false, "msg": "The directory /var/lib/postgresql/17 does not exist or the file is not a directory", "name": "/var/lib/postgresql/17"}

I think we need another path to store certificates.

[klention]

fatal: [10.172.0.22]: FAILED! => {"changed": false, "msg": "The directory /var/lib/postgresql/17 does not exist or the file is not a directory", "name": "/var/lib/postgresql/17"}

I think we need another path to store certificates.

This is strange because just one task above at line 422 creates the postgresql_data_dir directory. But, we can definitely put it somewhere else.

[vitabaks]

This is strange because just one task above at line 422 creates the postgresql_data_dir directory. But, we can definitely put it somewhere else.

I have already fixed this, see the commits.

[vitabaks]

We also need to ensure that the certificate and key are copied to the new cluster node during scaling (add_pgnode.yml). If this is challenging for you, I’m happy to handle it.

[klention]

We also need to ensure that the certificate and key are copied to the new cluster node during scaling (add_pgnode.yml). If this is challenging for you, I’m happy to handle it.

Here is the new commit

[vitabaks]

Here is the new commit

Thanks, I made a small change (commit) and tested it, everything works!