feat(temporal): allow customization of SSL mode for external db

Signed-off-by: CyberHippo <[email protected]>

charts/airbyte-temporal/README.md

@@ -28,6 +28,8 @@ Helm chart to deploy airbyte-temporal
 | global.configMapName | string | `""` |  |
 | global.database.secretName | string | `""` |  |
 | global.database.secretValue | string | `""` |  |
+| global.database.type | string | `"internal"` |  |
+| global.database.ssl.enabled | bool | `"true"` |  |
 | global.deploymentMode | string | `"oss"` |  |
 | global.extraContainers | list | `[]` |  |
 | global.extraLabels | object | `{}` |  |
@@ -59,4 +61,3 @@ Helm chart to deploy airbyte-temporal
 | service.port | int | `7233` |  |
 | service.type | string | `"ClusterIP"` |  |
 | tolerations | list | `[]` |  |
-

charts/airbyte-temporal/templates/deployment.yaml

@@ -59,21 +59,23 @@ spec:
             value: "config/dynamicconfig/development.yaml"
 
           {{- include "airbyte.temporal.database.envs" . | nindent 10 }}
-          
+
         {{- end }}
 
         {{- if eq .Values.global.database.type "external" }}
-        # Assume an external database requires SSL.
-          - name: POSTGRES_TLS_ENABLED
-            value: "true"
           - name: POSTGRES_TLS_DISABLE_HOST_VERIFICATION
             value: "true"
-          - name: SQL_TLS_ENABLED
-            value: "true"
           - name: SQL_TLS_DISABLE_HOST_VERIFICATION
             value: "true"
         {{- end }}
 
+        {{- if .Values.global.database.ssl.enabled }}
+          - name: POSTGRES_TLS_ENABLED
+            value: "true"
+          - name: SQL_TLS_ENABLED
+            value: "true"
+        {{- end }}
+
         {{- if .Values.extraEnv }}
         {{ .Values.extraEnv | toYaml | nindent 10 }}
         {{- end }}

charts/airbyte-temporal/values.yaml

@@ -10,6 +10,8 @@ global:
   extraLabels: {}
   database:
     type: internal
+    ssl:
+      enabled: true
     secretName: ""
     secretValue: ""