Skip to content

Conversation

@chadcrum
Copy link
Contributor

@chadcrum chadcrum commented Feb 5, 2026

Summary

  • Fix incorrect environment variable name for Quarkus reactive PostgreSQL SSL configuration
  • Remove QUARKUS_DATASOURCE_REACTIVE_URL (operator strips query params)
  • Change SSL mode from require to allow to match main branch

Problem

The sonataflow-platform-jobs-service was crashing with:

FATAL: no pg_hba.conf entry for host "X.X.X.X", user "janus-idp",
database "sonataflow", no encryption (28000)

Root Cause

The environment variable QUARKUS_DATASOURCE_REACTIVE_SSL_MODE is incorrect. The Quarkus property quarkus.datasource.reactive.postgresql.ssl-mode requires the database-specific namespace, so the correct env var is QUARKUS_DATASOURCE_REACTIVE_POSTGRESQL_SSL_MODE.

Test plan

  • Verified fix on running cluster - jobs-service starts successfully
  • Confirmed user-onboarding workflow recovers
  • Verified no orchestrator errors in Backstage logs

The SonataFlowPlatform patch was using incorrect environment variable
name for configuring SSL mode on the reactive PostgreSQL driver.

- QUARKUS_DATASOURCE_REACTIVE_SSL_MODE (wrong)
+ QUARKUS_DATASOURCE_REACTIVE_POSTGRESQL_SSL_MODE (correct)

The Quarkus property `quarkus.datasource.reactive.postgresql.ssl-mode`
requires the database-specific namespace in the env var name.

Also removed QUARKUS_DATASOURCE_REACTIVE_URL as the SonataFlow operator
strips URL query parameters during reconciliation, and changed SSL mode
from 'require' to 'allow' to match main branch.

This fixes jobs-service CrashLoopBackOff caused by:
  FATAL: no pg_hba.conf entry for host "X.X.X.X", user "janus-idp",
  database "sonataflow", no encryption (28000)
@openshift-ci
Copy link

openshift-ci bot commented Feb 5, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign psrna for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 5, 2026

@chadcrum
Copy link
Contributor Author

chadcrum commented Feb 5, 2026

/ok-to-test

@chadcrum
Copy link
Contributor Author

chadcrum commented Feb 5, 2026

/test e2e-ocp-helm-nightly

@rhdh-qodo-merge
Copy link

ⓘ Your monthly quota for Qodo has expired. Upgrade your plan
ⓘ Paying users. Check that your Qodo account is linked with this Git user account

@github-actions
Copy link
Contributor

github-actions bot commented Feb 5, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant