SSLMode

[rpmoore]

Say I want to set sslmode to require, do I just specify this in the connectAddr: attribute? Or is there another setting that I should be using? I'm not looking to use mtls yet at this point.

[rpmoore]

I ask because I'm getting this error when I use require in the connectAddr in the temporal worker:

[Fx] Error returned: received non-nil error from function "go.temporal.io/server/temporal".ServerOptionsProvider
        /home/runner/work/docker-builds/docker-builds/temporal/temporal/fx.go:173:
sql schema version compatibility check failed: pq: unsupported sslmode "require/temporal?sslmode=disable"; only "require" (default), "verify-full", "verify-ca", and "disable" supported

[rpmoore]

if I specify it as a connectAttribute I get the following error:

"level":"warn","ts":"2024-08-15T21:40:09.949Z","msg":"Not using any authorizer and flag `--allow-no-auth` not detected. Future versions will require using the flag `--allow-no-auth` if you do not want to set an authorizer.","logging-call-at":"main.go:178"}
panic: duplicate connection attr: sslmode:disable, sslmode:require

It's as though temporal is adding sslmode:disable and it's non-obvious how to override this

[rpmoore]

OK, after some digging I think I figured it out. There's a separate TLS definition that has to be configured. Once I did this the worker spun up correctly.