From 10566b46b19e00986a7a064e1cd59ba6482cd831 Mon Sep 17 00:00:00 2001
From: Yanis Guenane <yguenane@gmail.com>
Date: Tue, 9 Mar 2021 11:39:02 +0100
Subject: [PATCH] PostgreSQL: Set scram-sha-256 as default host auth method

---
 roles/installer/templates/tower_postgres.yaml.j2 | 4 ++++
 roles/installer/vars/main.yml                    | 3 +++
 2 files changed, 7 insertions(+)
 create mode 100644 roles/installer/vars/main.yml

diff --git a/roles/installer/templates/tower_postgres.yaml.j2 b/roles/installer/templates/tower_postgres.yaml.j2
index cdfc3d5e..5cdd17e2 100644
--- a/roles/installer/templates/tower_postgres.yaml.j2
+++ b/roles/installer/templates/tower_postgres.yaml.j2
@@ -41,6 +41,10 @@ spec:
                   key: password
             - name: PGDATA
               value: '{{ tower_postgres_data_path }}'
+            - name: POSTGRES_INITDB_ARGS
+              value: '{{ postgres_initdb_args }}'
+            - name: POSTGRES_HOST_AUTH_METHOD
+              value: '{{ postgres_host_auth_method }}'
           ports:
             - containerPort: 5432
               name: postgres
diff --git a/roles/installer/vars/main.yml b/roles/installer/vars/main.yml
new file mode 100644
index 00000000..81c42a1e
--- /dev/null
+++ b/roles/installer/vars/main.yml
@@ -0,0 +1,3 @@
+---
+postgres_initdb_args: '--auth-host=scram-sha-256'
+postgres_host_auth_method: 'scram-sha-256'