CNPG Recipe 28 - Generated and rotating PostgreSQL user passwords in CloudNativePG 1.31
·10 mins
A first look at what CloudNativePG 1.31 will bring to PostgreSQL credentials:
a DatabaseRole can now generate its own password, keep it in a Secret the
operator owns, shape it with criteria and rotate it on a schedule, with
PostgreSQL enforcing the lifetime through VALID UNTIL. The feature is merged
but not yet released, so this recipe anticipates 1.31 and shows how to try it
today on the latest development snapshot.