Charmed PostgreSQL K8s

Canonical
Databases

Architecture:

Base version:

Channel	Revision	Published	Runs on
latest/stable	20	20 Sep 2022	Ubuntu 20.04
14/stable	495	18 Feb 2025	Ubuntu 22.04
14/stable	494	18 Feb 2025	Ubuntu 22.04
14/candidate	495	11 Feb 2025	Ubuntu 22.04
14/candidate	494	11 Feb 2025	Ubuntu 22.04
14/beta	495	06 Feb 2025	Ubuntu 22.04
14/beta	494	06 Feb 2025	Ubuntu 22.04
14/edge	549	28 Mar 2025	Ubuntu 22.04
14/edge	548	28 Mar 2025	Ubuntu 22.04
16/beta	525	19 Mar 2025	Ubuntu 24.04
16/beta	524	19 Mar 2025	Ubuntu 24.04
16/edge	551	29 Mar 2025	Ubuntu 24.04
16/edge	550	29 Mar 2025	Ubuntu 24.04

Learn to deploy on juju >

Platform:

Relevant links

Homepage

Contacts

Maintainers

Canonical Data Platform

Submit a bug

Share your thoughts on this charm with the community on discourse.

Join the discussion

Note: All commands are written for juju >= v.3.0

If you are using an earlier version, check the Juju 3.0 Release Notes.

How to enable LDAP authentication

Disclaimer: In this guide, we use self-signed certificates provided by the self-signed-certificates operator.

This is not recommended for a production environment.

For production environments, check the collection of Charmhub operators that implement the tls-certificate interface, and choose the most suitable for your use-case.

Deploy an LDAP server

Deploy the GLAuth charm:

juju deploy self-signed-certificates
juju deploy postgresql-k8s --channel 14/stable --trust postgresql-k8s-glauth
juju deploy glauth-k8s --channel edge --trust

Integrate (formerly known as “relate”) the three applications:

juju integrate glauth-k8s self-signed-certificates
juju integrate glauth-k8s postgresql-k8s-glauth

Deploy the GLAuth-utils charm, in order to manage LDAP users:

juju deploy glauth-utils --channel edge --trust

Integrate (formerly known as “relate”) the two applications:

juju integrate glauth-k8s glauth-utils

Enable LDAP

To have LDAP authentication enabled, relate the PostgreSQL charm with the GLAuth charm:

juju integrate postgresql-k8s:ldap glauth-k8s:ldap
juju integrate postgresql-k8s:receive-ca-cert glauth-k8s:send-ca-cert

To have LDAP users available in PostgreSQL, provide a comma separated list of LDAP groups to already created PostgreSQL authorization groups. To create those groups before hand, refer to the Data Integrator charm page.

juju config postgresql-k8s ldap_map="<ldap_group>=<psql_group>"

Disable LDAP

You can disable LDAP by removing the following relations:

juju remove-relation postgresql-k8s:receive-ca-cert glauth-k8s:send-ca-cert
juju remove-relation postgresql-k8s:ldap glauth-k8s:ldap

Help improve this document in the forum (guidelines). Last updated a day ago.