[pgpool-general: 8140] Re: transparent authentication

[Bo Peng]

Hello,

> I don't know exactly. We use docker image  pgpool/pgpool:4.2.2
> 
> Can you tell something on this image?

Below is the doc:

https://github.com/pgpool/pgpool2_on_k8s/blob/master/docs/index.md


You can set the enviroment variable "PGPOOL_ENABLE_POOL_PASSWD" to skip generating
pool_password and use password authentication:

  PGPOOL_ENABLE_POOL_PASSWD=false

https://github.com/pgpool/pgpool2_on_k8s/blob/master/docs/index.md#environment-variables

Alternatively, you can customize configmap pgpool-config to configure pool_hba.conf.

https://github.com/pgpool/pgpool2_on_k8s/blob/master/docs/index.md#configure-pgpool-ii-using-configmap


> On 09.05.2022 09:04, Bo Peng wrote:
> > Hello,
> >
> >> Thank you for reply.
> >>
> >> Could you tell where should pool_hba.conf file be placed  when I run
> >> pgpool as:
> >>
> >> 1. docker image on Kubernetes platform
> >>
> >> 2. docker image on virtual machine.
> > Does the docker image which you are using supports customization of pool_hba.conf?
> >   
> >> Thanks in advance.
> >>
> >> Regards,
> >>      Nikolay
> >>
> >> On 09.05.2022 03:44, Bo Peng wrote:
> >>> Hello,
> >>>
> >>>> Our Pgpool is working in Kubernetes and it is doing role of sql queries
> >>>> load balancer. In the same time postgresql servers, that are managed by
> >>>> patroni, are working in their own virtual machines.
> >>>>
> >>>> I would like ask - could current release Pgpool now perform transparent
> >>>> authentication from clients pf the Pgpool to PostgreSQL server?
> >>> Does "transparent authentication" mean that authentication is performed without generating pool_passwd file?
> >>> If so, you can set "password" authentication and force SSL on all connections in pool_hba.conf:
> >>>
> >>>     hostssl    all    all    all    password
> >>>
> >>>> _______________________________________________
> >>>> pgpool-general mailing list
> >>>> pgpool-general at pgpool.net
> >>>> http://www.pgpool.net/mailman/listinfo/pgpool-general
> >


-- 
Bo Peng <pengbo at sraoss.co.jp>
SRA OSS, Inc. Japan
http://www.sraoss.co.jp/