Skip to content

Commit 87a3481

Browse files
committed
update ssl documentation
1 parent 0546311 commit 87a3481

1 file changed

Lines changed: 13 additions & 1 deletion

File tree

manifests/integrations/postgres.pp

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,19 @@
1414
# $username
1515
# The username for the datadog user
1616
# $ssl
17-
# Boolean to enable SSL
17+
# This option determines whether or not and with what priority a secure SSL TCP/IP connection
18+
# is negotiated with the server. There are six modes:
19+
# - `disable`: Only tries a non-SSL connection.
20+
# - `allow`: First tries a non-SSL connection; if if fails, tries an SSL connection.
21+
# - `prefer`: First tries an SSL connection; if it fails, tries a non-SSL connection.
22+
# - `require`: Only tries an SSL connection. If a root CA file is present, verifies the certificate in
23+
# the same way as if verify-ca was specified.
24+
# - `verify-ca`: Only tries an SSL connection, and verifies that the server certificate is issued by a
25+
# trusted certificate authority (CA).
26+
# - `verify-full`: Only tries an SSL connection and verifies that the server certificate is issued by a
27+
# trusted CA and that the requested server host name matches the one in the certificate.
28+
#
29+
# For a detailed description of how these options work see https://www.postgresql.org/docs/current/libpq-ssl.html
1830
# $use_psycopg2
1931
# Boolean to flag connecting to postgres with psycopg2 instead of pg8000.
2032
# Warning, psycopg2 doesn't support ssl mode.

0 commit comments

Comments
 (0)