As an Administrator I want to be able to configure Metrics components to use TLS client authentication for PostgreSQL so that the connection is more secure
Description
Currently, there is no way to configure the components to connect to PostgreSQL using client TLS even if the PostgreSQL is configured to accept them. We should extend the settings so that postgres can also be configured to use TLS. Currently, the following modules require access to PostgreSQL:
Currently, there is no way to configure the components to connect to PostgreSQL using client TLS even if the PostgreSQL is configured to accept them. We should extend the settings so that postgres can also be configured to use TLS. Currently, the following modules require access to PostgreSQL:
Anonymizer
Opendata
Networking
More information about the X-Road Metrics system architecture is available here.
Acceptance criteria:
Client TLS can be configured in settings.yaml for PostgreSQL connections in all Metrics modules that use PostgreSQL
The old configuration continues to work without TLS
Documentation is updated to inform users about this option
The example settings.yaml files of all affected modules are updated