You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: spiceaidocs/docs/data-connectors/postgres/index.md
+22-8Lines changed: 22 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,10 +25,12 @@ The connection to PostgreSQL can be configured by providing the following `param
25
25
- `pg_pass_key`: The secret key containing the password to connect with.
26
26
- `pg_pass`: The raw password to connect with, ignored if `pg_pass_key` is provided.
27
27
- `pg_sslmode`: Optional parameter, specifies the SSL/TLS behavior for the connection, supported values:
28
-
- `prefer`: (default) This mode will try to establish a secure SSL connection if possible, but will connect insecurely if the server does not support SSL.
29
-
- `required`: This mode requires an SSL connection. If a secure connection cannot be established, server will not connect.
28
+
- `verify-full`: (default) This mode requires an SSL connection, a valid root certificate, and the server host name to match the one specified in the certificate.
29
+
- `verify-ca`: This mode requires an SSL connection and a valid root certificate.
30
+
- `required`: This mode requires an SSL connection.
31
+
- `prefer`: This mode will try to establish a secure SSL connection if possible, but will connect insecurely if the server does not support SSL.
30
32
- `disable`: This mode will not attempt to use an SSL connection, even if the server supports it.
31
-
- `pg_insecure`: Optional parameter, Allows TLS connectivity to servers with invalid/expired certificates.
33
+
- `pg_sslrootcert`: Optional parameter specifying the path to a custom PEM certificate that the connector will trust.
32
34
33
35
Configuration `params` are provided either in the top level `dataset` for a dataset source and federated SQL query, or in the `acceleration` section for a data store.
34
36
@@ -38,12 +40,24 @@ datasets:
38
40
name: my_dataset
39
41
params:
40
42
pg_host: localhost
41
-
pg_port: '5432'
43
+
pg_port: 5432
42
44
pg_db: my_database
43
45
pg_user: my_user
44
46
pg_pass_key: my_secret
45
-
pg_sslmode: required
46
-
pg_insecure: 'true'
47
+
```
48
+
49
+
```yaml
50
+
datasets:
51
+
- from: postgres:path.to.my_dataset
52
+
name: my_dataset
53
+
params:
54
+
pg_host: localhost
55
+
pg_port: 5432
56
+
pg_db: my_database
57
+
pg_user: my_user
58
+
pg_pass_key: my_secret
59
+
pg_sslmode: verify-ca
60
+
pg_sslrootcert: ./custom_cert.pem
47
61
```
48
62
49
63
Additionally, an `engine_secret` may be provided when configuring a PostgreSQL data store to allow for using a different secret store to specify the password for a dataset using PostgreSQL as both the data source and data store.
0 commit comments