-
Task
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
False
-
-
False
-
Unset
-
None
-
-
Based on recent issues with SpiceDB, its possible that connections to RDS may not use SSL when there are too many connections. We need to update our configuration to ensure SSL is forced which will also require the CA Cert be verified based on AWS Docs
Done Criteria
- Ensure that when RDS is used:
- postgres storage flag for sslmode is set to verify-full
- the RDS CA cert is available to the pod and the path is set for the postgres storage CA cert flag
- Ensure these settings work whether persistence is on or not