Function PostgreSQLHBAs

internal/pgmonitor/postgres.go:26–35

PostgreSQLHBAs provides the Postgres HBA rules for allowing the monitoring exporter to be accessible

(ctx context.Context, inCluster *v1beta1.PostgresCluster, outHBAs *postgres.HBAs)

// PostgreSQLHBAs provides the Postgres HBA rules for allowing the monitoring
// exporter to be accessible
func PostgreSQLHBAs(ctx context.Context, inCluster *v1beta1.PostgresCluster, outHBAs *postgres.HBAs) {
	if ExporterEnabled(ctx, inCluster) ||
		collector.OpenTelemetryMetricsEnabled(ctx, inCluster) {
		// Limit the monitoring user to local connections using SCRAM.
		outHBAs.Mandatory = append(outHBAs.Mandatory,
			postgres.NewHBA().TCP().Users(MonitoringUser).Method("scram-sha-256").Network("127.0.0.0/8"),
			postgres.NewHBA().TCP().Users(MonitoringUser).Method("scram-sha-256").Network("::1/128"),
			postgres.NewHBA().TCP().Users(MonitoringUser).Method("reject"))
	}
}

// PostgreSQLParameters provides additional required configuration parameters
// that Postgres needs to support monitoring for both pgMonitor and OTel