Skip to content

Commit a54af19

Browse files
committed
update ssl documentation
1 parent 0546311 commit a54af19

1 file changed

Lines changed: 14 additions & 2 deletions

File tree

manifests/integrations/postgres.pp

Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,19 @@
1414
# $username
1515
# The username for the datadog user
1616
# $ssl
17-
# Boolean to enable SSL
17+
# This option determines whether or not and with what priority a secure SSL TCP/IP connection
18+
# is negotiated with the server. There are six modes:
19+
# - `disable`: Only tries a non-SSL connection.
20+
# - `allow`: First tries a non-SSL connection; if if fails, tries an SSL connection.
21+
# - `prefer`: First tries an SSL connection; if it fails, tries a non-SSL connection.
22+
# - `require`: Only tries an SSL connection. If a root CA file is present, verifies the certificate in
23+
# the same way as if verify-ca was specified.
24+
# - `verify-ca`: Only tries an SSL connection, and verifies that the server certificate is issued by a
25+
# trusted certificate authority (CA).
26+
# - `verify-full`: Only tries an SSL connection and verifies that the server certificate is issued by a
27+
# trusted CA and that the requested server host name matches the one in the certificate.
28+
#
29+
# For a detailed description of how these options work see https://www.postgresql.org/docs/current/libpq-ssl.html
1830
# $use_psycopg2
1931
# Boolean to flag connecting to postgres with psycopg2 instead of pg8000.
2032
# Warning, psycopg2 doesn't support ssl mode.
@@ -72,7 +84,7 @@
7284
# dbname: 'postgres'
7385
# username: 'datadog'
7486
# password: 'some_pass'
75-
# ssl: false
87+
# ssl: 'allow'
7688
# custom_metrics:
7789
# a_custom_query:
7890
# query: 'select tag_column, %s from table'

0 commit comments

Comments
 (0)