Trouble setting up Airbyte with sslmode in values.yaml for Kubernetes Helm Chart

Summary

The user is facing issues setting up Airbyte via Kubernetes with Helm Chart due to difficulties adding sslmode=true to the values.yaml file.


Question

Hi all. I’m trying to set up Airbyte via Kubernetes with Helm Chart. I’m setting up with my own values.yaml, but I’m having trouble having Airbyte up and running due to not being able to add sslmode=true to the values.yaml. My values.yaml is as follows:

    enabled: false

# Trying with "externalDatabase" and without "externalDatabase" makes no difference
externalDatabase:
  host: "host-name"
  user: "user-name"
  database: "db-name"
  password: "password-value"
  port: 5432
  jdbcUrl: "<postgresql://host-name:5432/db-name?ssl=true&sslmode=require>"
  # trying "jdbc:<postgresql://host-name:5432/db-name?ssl=true&sslmode=require>" doesn't help either

global:
  database:
    host: "host-name"
    user: "user-name"
    database: "db-name"
    password: "password-value"
    port: 5432
    sslmode: "require"
    jdbcUrl: "<postgresql://host-name:25060/db-name?ssl=true&sslmode=require>"```

<br>

---

This topic has been created from a Slack thread to give it more visibility.
It will be on Read-Only mode here. [Click here](https://airbytehq.slack.com/archives/C021JANJ6TY/p1724835447883169) if you want 
to access the original thread.

[Join the conversation on Slack](https://slack.airbyte.com)

<sub>
["airbyte", "kubernetes", "helm-chart", "sslmode", "values.yaml"]
</sub>

Which version of helm charts do you use? The latest one?

As I checked externalDatabase is no longer used in the latest chart (0.493.1); there are only leftovers in configuration, but not used anywhere in templates

global.database.sslmode and global.database.jdbcUrl don’t exist in helm chart

if you want to know what is supported, the best option is to clone repository
https://github.com/airbytehq/helm-charts
and extract specific version tar xzf airbyte-0.493.1.tgz

https://docs.airbyte.com/deploying-airbyte/integrations/database

Have you tried to configure Airbyte without these extra SSL-related options?

Yes the latest Helm version. I was just testing it just now.

I tried without the SSL configuration in the beginning, and got this error “no pg_hba.conf entry for host”. Usually this error is due to ssl mode not being set to required or preferred. Which is why I resorted to try adding sslmode into values.yaml.

if your infrastructure communicates internally, I’d consider allowing connections to PostgreSQL from selected CIDR
https://dba.stackexchange.com/questions/83984/connect-to-postgresql-server-fatal-no-pg-hba-conf-entry-for-host