all done

Signed-off-by: Hiranmoy Das Chowdhury <[email protected]>

docs/examples/pgbouncer/reconfigure-tls/add-tls.yaml

@@ -0,0 +1,24 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: PgBouncerOpsRequest
+metadata:
+  name: add-tls
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: pb
+  tls:
+    sslMode: verify-full
+    clientAuthMode: md5
+    issuerRef:
+      name: pb-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    certificates:
+      - alias: client
+        subject:
+          organizations:
+            - pgbouncer
+          organizationalUnits:
+            - client
+  apply: Always

docs/examples/pgbouncer/reconfigure-tls/change-issuer.yaml

@@ -0,0 +1,14 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: PgBouncerOpsRequest
+metadata:
+  name: change-issuer
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: pb
+  tls:
+    issuerRef:
+      name: pb-new-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"

docs/examples/pgbouncer/reconfigure-tls/issuer.yaml

@@ -0,0 +1,8 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: pb-issuer
+  namespace: demo
+spec:
+  ca:
+    secretName: pgbouncer-ca

docs/examples/pgbouncer/reconfigure-tls/new-issuer.yaml

@@ -0,0 +1,8 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: pb-new-issuer
+  namespace: demo
+spec:
+  ca:
+    secretName: pgbouncer-new-ca

docs/examples/pgbouncer/reconfigure-tls/pb.yaml

@@ -0,0 +1,23 @@
+apiVersion: kubedb.com/v1
+kind: PgBouncer
+metadata:
+  name: pb
+  namespace: demo
+spec:
+  replicas: 1
+  version: "1.18.0"
+  database:
+    syncUsers: true
+    databaseName: "postgres"
+    databaseRef:
+      name: "ha-postgres"
+      namespace: demo
+  connectionPool:
+    poolMode: session
+    port: 5432
+    reservePoolSize: 5
+    maxClientConnections: 87
+    defaultPoolSize: 2
+    minPoolSize: 1
+    authType: md5
+  deletionPolicy: WipeOut

docs/examples/pgbouncer/reconfigure-tls/remove-tls.yaml

@@ -0,0 +1,14 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: PgBouncerOpsRequest
+metadata:
+  name: remove-tls
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: pb
+  tls:
+    clientAuthMode: md5
+    remove: true
+  timeout: 5m
+  apply: IfReady

docs/examples/pgbouncer/reconfigure-tls/rotate-tls.yaml

@@ -0,0 +1,11 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: PgBouncerOpsRequest
+metadata:
+  name: rotate-tls
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: pb
+  tls:
+    rotateCertificates: true