From e3583ed3233278c259e376c9515c637a8bbb49ae Mon Sep 17 00:00:00 2001
From: Zoe Roux <zoe.roux@zoriya.dev>
Date: Fri, 18 Jul 2025 12:15:27 +0200
Subject: [PATCH] Force cert auth for all users

---
 apps/postgres/cluster.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/postgres/cluster.yaml b/apps/postgres/cluster.yaml
index 9c946d8..b9f9c1f 100644
--- a/apps/postgres/cluster.yaml
+++ b/apps/postgres/cluster.yaml
@@ -14,6 +14,9 @@ spec:
     serverTLSSecret: postgres-server-cert
     clientCASecret: postgres-server-cert
     replicationTLSSecret: postgres-replication-cert
+  postgresql:
+    pg_hba:
+      - hostssl all all all cert
 
   # this is here because no `Role` crd exsists yet.
   # see https://github.com/cloudnative-pg/cloudnative-pg/issues/5341