Unable to connect application user to acid-minimal-cluster due to pg_hba.conf

[CaptTofu]

Please, answer some short questions which should help us to understand your problem / question better?

• *registry.opensource.zalan.do/acid/postgres-operator:v1.9.0
• Where do you run it - cloud or metal? Kubernetes or OpenShift? [microk8s VM]
• Are you running Postgres Operator in production? [no, not yet]
• Type of issue? [issue with application connection.]

The operator is working fine, and most likely something I need to configure: I've created a simple two-node cluster (acid-minimal-cluster) and specified an application user which can connect locally, but not through the service with the error:

psql -U project_victor app-db-name -W -h acid-minimal-cluster-repl
Password: 
psql: error: connection to server at "acid-minimal-cluster-repl" (10.152.183.203), port 5432 failed: FATAL:  password authentication failed for user "project_victor"
connection to server at "acid-minimal-cluster-repl" (10.152.183.203), port 5432 failed: FATAL:  pg_hba.conf rejects connection for host "10.1.76.169", user "project_victor", database "app-db-name", no encryption

What do I need to specify so that the user is allowed to connect through the service?

[FxKu]

Depends what you mean with locally? When you're inside K8s you should be able to connect via the service name as host. Connecting from your laptop to something inside a VM or docker might require an external LB and allowedSourceRanges.

But your error tells me that you're already reaching the DB but the password is wrong. If project_victor is a user in the manifest grab the password from the corresponding K8s secret. And make sure you set SSL mode to require.

export PGSSLMODE=require;export PGPASSWORD=$(kubectl get secret project-victor.acid-minimal-cluster.credentials.postgresqls.zalan.do -o jsonpath={.data.password} | base64 -d)

psql -U project_victor app-db-name -h acid-minimal-cluster-repl -p 5432